Privacy Policy

1. Who This Applies To

This Privacy Policy applies to all visitors and customers of elebe.ca and any related services operated under the elebe brand. By using this site, you consent to the practices described here.

elebe is operated by an individual creator based in Quebec, Canada. We are subject to the Act respecting the protection of personal information in the private sector (Law 25 / Quebec) and, where applicable, Canada's PIPEDA.

2. What We Collect & Why

We do not collect sensitive personal data (health, financial, ethnic, or political information). We do not collect data on children under 13 and do not knowingly allow them to submit personal information.

3. Cookies & Tracking

This site uses minimal cookies. We do not use advertising cookies, cross-site tracking pixels, or behavioral profiling tools.

• Essential cookies — required for the site to function (e.g., cart session). Cannot be disabled without breaking site functionality.
• Analytics cookies — lightweight, anonymized traffic data only (e.g., page visits). No personal identifiers are attached.

You can disable cookies in your browser settings at any time. Disabling essential cookies may affect your ability to complete a purchase.

4. Third-Party Services

We use a small number of third-party services to operate the site. Each has its own privacy policy:

• Payment processor (e.g., Stripe or equivalent) — handles all payment data. We receive only order confirmation and the last 4 digits of a card for reference.
• Shipping carriers (e.g., Canada Post, USPS) — receive your name and address to deliver your order.
• Hosting provider — stores site files and basic server logs.
• Email platform — used to send order confirmations and respond to inquiries.

We do not share your data with any party for advertising, resale, or marketing purposes.

5. How We Use Your Information

• To process and fulfill your order;
• To send transactional emails (confirmation, tracking, issue resolution);
• To respond to questions or support requests you initiate;
• To detect and prevent fraud or unauthorized activity;
• To comply with legal obligations under applicable law.

We will never use your email for marketing without your explicit opt-in. There are no mailing lists you are added to automatically.

6. Commercial Email & CAN-SPAM Compliance

If we ever send commercial or promotional email (for example, a new-drop announcement), we comply with the U.S. CAN-SPAM Act, Canada's Anti-Spam Legislation (CASL), and other applicable laws. Specifically:

• We send marketing email only to people who have explicitly opted in. We do not buy, rent, or scrape email lists.
• Our "From," "To," and "Reply-To" fields and routing information are accurate and identify elebe as the sender.
• Subject lines reflect the actual content of the message and are not deceptive.
• Promotional messages are identified as such and include our valid physical postal mailing address.
• Every marketing email includes a clear, working unsubscribe link. We honour opt-out requests promptly — within 10 business days — and do not sell or transfer the email address of anyone who unsubscribes.

Transactional emails (order confirmations, shipping updates, replies to your inquiries, account and security notices) are not promotional and may be sent regardless of marketing preferences, as permitted by law.

To unsubscribe at any time, use the link in any marketing email or contact [email protected]. Our postal mailing address, included in all commercial email, is:

elebe
PO Box 1
QC  G6X 1C2
Canada

7. Your Rights (Canada)

Under Quebec's Law 25 and applicable Canadian law, you have the right to:

• Access — request a copy of the personal data we hold about you;
• Correct — request corrections to inaccurate information;
• Delete — request deletion of your data, subject to legal retention requirements;
• Withdraw consent — where processing is based on consent, you may withdraw it at any time;
• Complain — file a complaint with the Commission d'accès à l'information du Québec (CAI) if you believe your rights have been violated.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you specific rights regarding your personal information. This section applies to you in addition to the rights described above.

Categories of personal information we collect. In the past 12 months we have collected the following categories of personal information, as defined by the CCPA:

We collect this information for the business purposes described in Section 5. We do not collect sensitive personal information as defined by the CPRA, and we do not use or disclose any such information for purposes that would trigger the right to limit its use.

We do not sell or share your personal information. elebe has not sold and does not sell personal information, and does not "share" it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We have no actual knowledge of selling or sharing the personal information of minors under 16.

Your California rights. Subject to certain exceptions, you have the right to:

• Know / Access — request the categories and specific pieces of personal information we have collected, the sources, the business purpose, and any third parties with whom it was shared;
• Delete — request deletion of personal information we collected from you;
• Correct — request correction of inaccurate personal information;
• Opt out of sale/sharing — though we do not sell or share your information, this right is available to you;
• Limit use of sensitive information — though we do not collect sensitive personal information that would require this;
• Non-discrimination — we will not deny service, charge a different price, or provide a different quality of service because you exercised any of these rights.

How to exercise your rights. Submit a request by emailing [email protected] with "California Privacy Request" in the subject line. We will verify your request using information associated with your account or order before responding, and will respond within 45 days (extendable by an additional 45 days where permitted). You may use an authorized agent to submit a request on your behalf with proof of authorization.

9. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or disclosure. However, no method of transmission over the internet or electronic storage is 100% secure.

Payment data is never transmitted through or stored on our servers — it is handled exclusively by our payment provider's PCI-compliant infrastructure.

In the event of a data breach that poses a risk to your rights, we will notify affected individuals and the appropriate authority as required by law.

10. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described above or as required by law. Order records may be retained for up to 7 years for accounting and tax purposes. You may request deletion of non-legally-required data at any time.

11. International Data Transfers

Your information is primarily stored and processed in Canada. If a third-party service transfers data internationally (e.g., a US-based payment processor), it does so under appropriate safeguards consistent with Canadian law. By using this site, you acknowledge this possibility.

elebe is operated from Canada and this Privacy Policy is governed by Canadian law. We welcome visitors and customers worldwide; if you access the site from outside Canada, you understand that your personal information will be transferred to, stored in, and processed in Canada and other countries where our service providers operate, which may have data-protection laws that differ from those in your country. By using the site or placing an order, you consent to this transfer and processing. Where local mandatory privacy law grants you additional rights (such as the GDPR in the EU/UK, or the CCPA/CPRA in California), we honour those rights to the extent they apply to you; for California-specific rights, see Section 8 above.

12. Children's Privacy

This site is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has submitted personal information to us, please contact us immediately and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the revised version will be posted here with an updated effective date. We encourage you to review this page periodically. Continued use of the site after changes constitutes acceptance of the updated policy.

14. Contact & Privacy Inquiries

For any privacy-related questions, requests, or concerns:

[email protected]

elebe · PO Box 1 · QC G6X 1C2 · Canada

We aim to respond to all privacy requests within 30 days.