Skip to Content

IPATIO Privacy Policy

Last updated: October 20, 2026

We are committed to maintaining the accuracy, confidentiality, and security of your personally identifiable information ("Personal Information"). As part of this commitment, our privacy policy governs our actions as they relate to the collection, use and disclosure of Personal Information. Our privacy policy is based upon the values set by the Canadian Standards Association's Model Code for the Protection of Personal Information and Canada's Personal Information Protection and Electronic Documents Act.

1Introduction

We are responsible for maintaining and protecting the Personal Information under our control. We have designated an individual or individuals who is/are responsible for compliance with our privacy policy.

2Identifying Purposes

We collect, use and disclose Personal Information to provide you with the product or service you have requested and to offer you additional products and services we believe you might be interested in. The purposes for which we collect Personal Information will be identified before or at the time we collect the information. In certain circumstances, the purposes for which information is collected may be clear, and consent may be implied, such as where your name, address and payment information is provided as part of the order process.

Knowledge and consent are required for the collection, use or disclosure of Personal Information except where required or permitted by law. Providing us with your Personal Information is always your choice. However, your decision not to provide certain information may limit our ability to provide you with our products or services. We will not require you to consent to the collection, use, or disclosure of information as a condition to the supply of a product or service, except as required to be able to supply the product or service.

4Limiting Collection

The Personal Information collected will be limited to those details necessary for the purposes identified by us. With your consent, we may collect Personal Information from you in person, over the telephone or by corresponding with you via mail, facsimile, or the Internet.

5Limiting Use, Disclosure and Retention

Personal Information may only be used or disclosed for the purpose for which it was collected unless you have otherwise consented, or when it is required or permitted by law. Personal Information will only be retained for the period of time required to fulfill the purpose for which we collected it or as may be required by law.

6Accuracy

Personal Information will be maintained in as accurate, complete and up-to-date form as is necessary to fulfill the purposes for which it is to be used.

7Safeguarding Customer Information

Personal Information will be protected by security safeguards that are appropriate to the sensitivity level of the information. We take all reasonable precautions to protect your Personal Information from any loss or unauthorized use, access or disclosure.

8Openness

We will make information available to you about our policies and practices with respect to the management of your Personal Information.

9Customer Access

Upon request, you will be informed of the existence, use and disclosure of your Personal Information, and will be given access to it. You may verify the accuracy and completeness of your Personal Information, and may request that it be amended, if appropriate. However, in certain circumstances permitted by law, we will not disclose certain information to you. For example, we may not disclose information relating to you if other individuals are referenced or if there are legal, security or commercial proprietary restrictions.

10Handling Customer Complaints and Suggestions

You may direct any questions or enquiries with respect to our privacy policy or our practices by contacting:

support@ipatio.ca

Additional Information

Cookies

A cookie is a small computer file or piece of information that may be stored in your computer's hard drive when you visit our websites. We may use cookies to improve our website's functionality and in some cases, to provide visitors with a customized online experience.

Cookies are widely used and most web browsers are configured initially to accept cookies automatically. You may change your Internet browser settings to prevent your computer from accepting cookies or to notify you when you receive a cookie so that you may decline its acceptance. Please note, however, if you disable cookies, you may not experience optimal performance of our website.

Visit counts (Cloudflare Web Analytics). Our site is delivered through Cloudflare, which also counts visits for us with Cloudflare Web Analytics. It sets no cookies and does not identify you: it records which pages are viewed and how fast they load, from the technical details of each page request. Cloudflare, Inc. (San Francisco, California, USA) processes this information, including outside Québec and Canada.

Online Advertising and Customer Audiences

We advertise on Google services (Google Search, Google Shopping, YouTube, Gmail and partner websites) through Google Ads. To measure and improve that advertising, we use two kinds of tools.

Measurement and remarketing tags. Our website loads Google Analytics and Google Ads tags through Google Tag Manager. They use cookies and similar identifiers to measure visits and purchases attributed to our advertising and to build audiences of people who have visited ipatio.ca. You can manage these cookies through the cookie banner on our site and your browser settings, and you can control personalized advertising in your Google account at adssettings.google.com. When you have accepted marketing cookies, our order-confirmation page also gives the Google Ads tag a scrambled (SHA-256 hashed) form of your e-mail address, never the address itself, so Google can match the purchase to an ad you clicked (Google calls this enhanced conversions). Without your consent to marketing cookies, it is not sent.

Before you choose, or if you refuse. Until you accept marketing or analytics cookies, the Google tags set no cookies. They still send Google a few signals without cookies or advertising identifiers (for example that a page was viewed or an order was placed), which Google uses to estimate overall results (Google Consent Mode). Like any request to a website, these signals reach Google with your device's IP address and browser type.

Customer audiences (Google Customer Match). We may also use the contact details you gave us when you created an account or placed an order to build advertising audiences in Google Ads. This lets us show you relevant offers when you use Google services and helps Google's systems reach people whose interests are similar to those of our customers. The information used for this purpose is limited to your e-mail address, telephone number, first and last name, postal code and country. Before anything leaves our systems, your e-mail address, telephone number and name are converted into one-way cryptographic hashes (SHA-256). Google uses these hashes only to check whether they correspond to a signed-in Google account, does not share them with any other advertiser, and deletes hashes that do not match. Google does not receive your order history, and this information is never sold.

Your consent and your choices. We include your contact details in these audiences only where you have agreed to receive marketing communications from us, or after we have informed you of this use and given you the opportunity to object. You may object or withdraw your consent at any time, and we will remove you from these audiences within 30 days: e-mail support@ipatio.ca with the subject "Advertising audiences", or use the unsubscribe link in our e-mails. Doing so does not affect your account, your orders or our ability to serve you.

Where and for how long. Google LLC (1600 Amphitheatre Parkway, Mountain View, California, USA) processes this information on servers located outside Québec and Canada, including in the United States, under Google's advertising data-processing terms and the Google Ads Customer Match policy. Audience membership expires 540 days after your most recent purchase or update and is refreshed periodically from our records; if you object, you are removed from the audience as well.

Questions about this use of your Personal Information may be directed to our person in charge of the protection of personal information at support@ipatio.ca.

Use of Google API Services and Internal Tools

IPATIO operates an internal application, "IPATIO Ads tooling", that connects to Google services (Google Ads, Google Analytics, Google Search Console, Google Merchant Center and Google Tag Manager) through Google's APIs. This application accesses only IPATIO's own business accounts, is used solely by IPATIO staff, and is not offered to customers or the public.

Data accessed. Aggregated advertising, search and analytics performance data for IPATIO's own accounts and product listings. The application does not collect, access or store personal information about you through these APIs, and it does not sell, rent or share Google account data with third parties. Where Google Analytics or Google Ads collect data on our website, that collection is described in the cookie and analytics sections of this policy and is subject to Google's own privacy policy.

Google API Services User Data Policy. IPATIO's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data retrieved through these APIs is stored on IPATIO's own servers in Canada, is used only for reporting on and managing IPATIO's accounts, and is retained no longer than needed for that purpose.

Sign in with Google. Customers can choose to sign in to their ipatio.ca account with Google. When you do, IPATIO receives only your name, email address and profile picture from Google (the "openid", "email" and "profile" permissions) and uses them solely to create your IPATIO customer account or sign you in to it. IPATIO does not access your Gmail, contacts, files or any other Google data, does not post on your behalf, and does not sell, rent or share this information; the Limited Use commitments above apply. You can remove IPATIO's access at any time in your Google account settings.

Questions about this section can be sent to support@ipatio.ca.

Customer Support Chat and AI Assistant

The chat on our website is answered first by an AI assistant. It answers from our own pages (product information, policies, FAQ and guides) and from live store information such as prices and stock. If you are signed in, it can also use your recent orders to answer questions about them. You can ask to talk to a person at any time: our support team then sees the conversation and replies in the chat or by e-mail.

What we collect. The messages you write. When you use the chat, also: the pages of our site you viewed during that visit (see “Visits and e-mails” below); where the visit came from, such as a search engine or an ad, without the address of the page you came from; your approximate location (city and region), worked out from your internet address, which we do not keep; and the type of device, system and browser you use. This helps our team understand your question and serve you. If you ask for a person, the e-mail address and name you give us, with your consent to be contacted. If you are signed in, the chat is linked to your account.

Visits and e-mails. While a page of our site is open in your browser, it tells us about once a minute which page you are on, and when you download a document or add a product to your cart, so our team can see how many people are visiting and help them. It uses a random identifier kept only in that browser tab, recognises the tabs of one browser by the site's security cookie (form key), and comes with your approximate city and the type of device. We delete it 30 minutes after you leave. What remains is an anonymous summary of the visit (where it came from, the pages and actions, approximate city, type of device, the amount of any order, without your internet address, an identifier or an order number), kept 25 months so we can see, overall, how visitors find and use our site and plan our marketing. When you chat with us, the pages and actions of your visit are kept with the conversation. Our e-mails are sent through Amazon Simple Email Service (Amazon Web Services, United States), which tells us whether each e-mail was delivered, bounced or marked as spam, and whether it was opened or a link in it was clicked (through an invisible image and links that pass through Amazon). We use this to know whether you received our reply and to correct a mistyped address. We keep it with the conversation for up to 24 months, or for 6 months for order and account e-mails, and we do not keep your internet address or browser details from these e-mails.

Service providers. To write and check answers, and to translate messages for our team, parts of the conversation are processed by OpenRouter, Inc. (United States) and by TypeSafe (United States). OpenRouter sends them only to “zero data retention” endpoints of AI providers based in the United States: these providers process the text only to produce a reply, do not keep it afterwards and do not use it for training. TypeSafe checks answers for accuracy and sorts messages by topic, and receives them with personal details such as e-mail addresses, phone numbers and order numbers removed. We do not send your name, e-mail address or postal address to these providers. What you type in a message is sent as written, so please do not include payment card details.

Retention. Conversations are stored on our servers in Canada and deleted after 24 months. Translations kept so that a message is not translated twice are deleted after 90 days. Conversations you had with us through our previous chat provider, Crisp, were moved to our servers in Canada; they are kept under the same rules and are visible only to our team. The text of messages older than 30 days was no longer available from Crisp and was not copied.

Your choices. The assistant can make mistakes, and it does not make decisions about your orders, refunds or account: our team does. You can always reach us without the chat at support@ipatio.ca. To get a copy of your conversations or have them deleted, write to us at the same address.

Other Websites

Our website may contain links to other third party sites that are not governed by this privacy policy. Although we endeavour to only link to sites with high privacy standards, our privacy policy will no longer apply once you leave our website. Additionally, we are not responsible for the privacy practices employed by third party websites. Therefore, we suggest that you examine the privacy statements of those sites to learn how your information may be collected, used, shared and disclosed.