Maple Ace — Ball Bearings Canada

This Privacy Policy explains how Maple Ace Inc. ("Maple Ace", "we", "us", "our") collects, uses, discloses, and protects personal information when you visit our website, place an order, or otherwise interact with our services. We are committed to handling your personal information in accordance with the federal Personal Information Protection and Electronic Documents Act ("PIPEDA"), the Quebec Act respecting the protection of personal information in the private sector (as amended by Law 25), and other applicable privacy laws.

Information We Collect

We collect personal information directly from you and through your interaction with the Site:

Account and order information: name, email address, billing and shipping address, telephone number, password (encrypted), and order history.
Payment information: payment-card details and billing address. Card numbers are processed by our payment processor and are not stored on our servers.
Communications: messages you send us through the contact form, email, or customer-support channels.
Technical and device data: IP address, browser type and version, operating system, referring URLs, and device identifiers.
Usage data: pages visited, products viewed, time on site, and other behavioural data collected through cookies and similar technologies.
Wishlist and cart data: stored locally in your browser to preserve your selections between visits; we do not access or transmit this data to our servers unless you proceed to checkout.

How We Use Your Information

We use the personal information we collect for the following purposes:

To process and fulfil your orders, including payment, shipping, and customer support.
To create and maintain your account and provide you with access to your purchase history and saved items.
To respond to your inquiries and provide technical assistance.
To send you order confirmations, shipping notifications, and other transactional communications.
With your consent, to send you marketing communications about new products, promotions, and company news. You may withdraw your consent at any time using the unsubscribe link in those messages or by contacting us directly.
To improve the Site, our products, and our services through analytics and aggregated reporting.
To detect and prevent fraud, abuse, and security incidents.
To comply with legal obligations, including tax, accounting, and consumer-protection requirements.

Sharing With Third Parties

We do not sell your personal information. We share it only with the following categories of recipients, and only to the extent necessary for the purposes described above:

Payment processors (such as [Stripe / Moneris / your provider]) to process payments securely.
Shipping carriers (such as Canada Post, Purolator, FedEx, or UPS) to deliver your orders.
IT and hosting providers that operate the infrastructure on which our Site runs.
Analytics providers ([e.g. Google Analytics, Plausible, or your provider]) for the purposes described in the Cookies section.
Professional advisors (such as accountants and legal counsel) when reasonably necessary.
Authorities when required by law, court order, or in response to a valid legal request, or to protect our rights, property, or the safety of others.

Where third parties act as our service providers, we require them by contract to handle personal information in a manner consistent with this Policy and applicable law.

Cookies and Similar Technologies

We use cookies and similar technologies (such as local storage and pixels) to:

Remember your preferences and language selection.
Maintain your shopping cart and wishlist between visits.
Authenticate you when you sign in to your account (a JWT cookie identifies your session).
Measure use of the Site and improve performance through analytics.
With your consent where required, deliver advertising relevant to your interests.

You can manage cookies through your browser settings. Disabling certain cookies may limit functionality of the Site (for example, you may not be able to remain signed in or check out).

Data Retention and Security

We retain personal information only as long as is reasonably necessary to fulfil the purposes for which it was collected, to comply with our legal, tax, and accounting obligations, and to resolve disputes. Order records are typically retained for at least seven (7) years to meet Canadian tax-record requirements. Account data is retained for as long as your account remains active; if you request deletion, we will delete or anonymise your data except where retention is required by law.

We use commercially reasonable technical and organisational measures to protect personal information against loss, theft, and unauthorised access — including encryption of data in transit (TLS), encrypted storage of authentication tokens, and access controls limiting employee access to a need-to-know basis. No method of transmission or storage is one hundred per cent secure, and we cannot guarantee absolute security.

International Transfers

Maple Ace is based in Canada, and your personal information will primarily be processed and stored in Canada. Some of our service providers may process information in the United States or other jurisdictions. Where personal information is transferred outside Quebec or Canada, we take reasonable steps to ensure that an equivalent level of protection applies, in accordance with applicable law, including the requirements of Quebec's Law 25.

Your Rights and Choices

Subject to applicable law, you have the following rights with respect to your personal information:

Access: request confirmation of whether we hold personal information about you and a copy of that information.
Correction: request that we correct inaccurate or incomplete personal information.
Deletion (right to be forgotten): request that we delete personal information that is no longer necessary, where applicable law permits.
Withdrawal of consent: withdraw consent to specific processing activities where consent is the legal basis. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Portability: in certain circumstances, request a copy of your personal information in a structured, commonly used, machine-readable format.
Complaint: file a complaint with the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec.

To exercise any of these rights, contact our Privacy Officer at the address below. We will respond within the time frames required by applicable law (in Quebec, generally within 30 days).

Children's Privacy

The Site and our products are not directed to individuals under the age of 14 (Quebec) or under the minimum digital-consent age in your jurisdiction. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on the Site, and the "Last updated" date at the top will reflect the date of the change. Material changes will, where appropriate, be brought to your attention before they take effect.

Contact and Privacy Officer

For any questions about this Privacy Policy, to exercise any of your rights, or to raise a privacy concern, please contact our designated Privacy Officer:

[Privacy Officer name]

Maple Ace Inc., 6665 Boul Henri-Bourassa West, Montreal, QC, H4R 1E1, Canada

Email: marketplace@mapleace.com