Privacy policy
Last updated: August 21, 2026
Effective date: August 21, 2026
At Gusti International Inc., we place great importance on protecting your personal information. This privacy policy (the “Policy”) is intended to inform users of the website www.gusti.ca (the “Site”) about the personal information we collect, use, and disclose when you visit or make a purchase on our Site.
We comply with Quebec's Act respecting the protection of personal information in the private sector, commonly known as “Law 25,” as well as the federal Personal Information Protection and Electronic Documents Act (“PIPEDA”). If you reside in the United States, additional rights may apply under the laws of your state; see “Additional Rights for U.S. Residents” below.
By using our Site, you acknowledge that you have read this Policy. Certain processing of your personal information — including non-essential cookies and the advertising-related sharing described below — is carried out only with your consent, collected through the cookie management banner displayed on the Site. You may change your preferences or withdraw your consent at any time through that banner.
We may update this Policy from time to time to reflect changes in our practices or for other legal, regulatory, or operational reasons. The “Last updated” date above indicates the version currently in effect; we encourage you to review this page periodically.
Information We Collect
When you create an account, make or attempt to make a purchase, subscribe to our newsletter or SMS marketing, or contact our Customer Service team, we collect the following information:
- Name
- Email address
- Phone number
- Mailing address (billing and shipping)
- Payment information necessary to process your transaction — we do not collect or retain your full credit card number; it is processed directly by our payment provider in accordance with industry standards (PCI-DSS)
- The content of your communications with our Customer Service team, including in connection with a return or exchange
This data is referred to as “Order Information.”
We also automatically collect certain information related to your device, including:
- Web browser type
- IP address
- Time zonePages or products viewed
- Referring sites or search terms
- Information about how you interact with the Site
This information is referred to as “Device Information.” In this Policy, the term “personal information” refers to Order Information and Device Information collectively.
How We Collect Information
We collect your personal information in various ways:
- When you fill out a form (account creation, newsletter, customer service)
- When you interact with the Site
For Device Information, we use the following technologies:
- Cookies
- Log files
- Web beacons, pixels, and other tracking technologies
You can review the list of cookies used on our Site and manage your preferences at any time through the cookie management banner available on the Site. For more general information about cookies, you can also visit http://www.allaboutcookies.org.
How We Use Your Information
Your information is used for the following purposes:
- Processing and managing orders
- Creating user accounts
- Marketing or promotional communications
- Collecting testimonials or customer reviews
- Customer service and technical support
- Targeted advertising
- Security and fraud prevention
- Site administration
We use Order Information to process your payment, arrange delivery, send you order confirmations, communicate with you, and detect fraudulent activity. We use Device Information to prevent security risks and fraud, analyze and improve the performance of our Site, and assess the effectiveness of our advertising campaigns.
Where a decision about you is made exclusively through automated processing of your personal information, for example, as part of fraud detection, you will be informed of that decision and may request that a member of our team review it and allow you to present your comments.
Any other use will require your explicit consent.
How We Share Your Information
We do not sell your personal information in exchange for monetary consideration. That said, certain laws, including several U.S. privacy laws (see “Additional Rights for U.S. Residents” below), consider the sharing of information with advertising platforms for targeted advertising purposes to constitute a “sale” or “share” of personal information, even where no money changes hands. You can opt out of this sharing at any time through our cookie management banner.
We disclose your personal information to the following third parties, only to the extent necessary for the purposes described in this Policy:
- Shopify Inc., our e-commerce platform and one of our payment service providers, Shopify's Privacy Policy (https://www.shopify.com/legal/privacy)
- PayPal, for processing certain payments
- Our shipping carriers, for delivering your orders
- Klaviyo, for managing our email and SMS marketing communications
- Google Analytics, to better understand how the Site is used
- Meta (Facebook and Instagram), Google Ads, and TikTok, to show you more relevant advertising
- Providers of AI-powered shopping assistants, such as Microsoft Copilot and ChatGPT (OpenAI), to whom we make our product information available so you can discover us and shop through their platforms
You can manage your targeted-advertising preferences through our cookie management banner, or directly with these platforms:
- Facebook: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Bing: https://advertise.bingads.microsoft.com/en-ca/resources/policies/personalized-ads
- DAA: http://optout.aboutads.info
We may also disclose your personal information where required by law, or in connection with a merger, acquisition, or sale of company assets.
Transfer of Information Outside Québec
Several of the third parties mentioned above process or store personal information outside Québec, including in the United States. Before making such a transfer, we assess whether the information will benefit from adequate protection, including through appropriate contractual arrangements with these third parties, in accordance with Law 25.
Data Retention
We retain your information for a maximum of 2 years following account inactivity, or as long as necessary to fulfill the purposes described in this Policy. Certain data may be retained longer for legal or regulatory reasons. Anonymized or aggregated data may be retained indefinitely.
Your Rights
In accordance with applicable law, including Law 25, you may:
- Access your personal information
- Request that it be corrected
- Withdraw your consent, where processing is based on it
- Request the transfer of your information (portability), in a structured, commonly used technological format
- Request the deletion of your personal information, subject to certain exceptions provided by law
- Request that we stop disseminating your personal information, or that it be de-indexed, where its dissemination causes you harm
- Request that a decision made about you exclusively through automated processing be explained and reviewed by a member of our team
- File a complaint with the Commission d'accès à l'information du Québec
To exercise your rights, write to us at: info@gusti.ca
We may need to verify your identity before responding to your request. Please note that without certain information, we may not be able to provide you with certain services.
Additional Rights for U.S. Residents
If you reside in the United States, the laws of your state — including the California Consumer Privacy Act, as amended by the California Privacy Rights Act, as well as similar laws in other states — may grant you additional rights, including:
- The right to know what personal information we hold about you, its sources, and the third parties with whom it is shared
- The right to request deletion or correction of your personal information
- The right to opt out of the “sale” or “sharing” of your personal information, including for targeted advertising purposes
- The right not to be discriminated against for exercising any of these rights
You can exercise your opt-out right through our cookie management banner, which recognizes the Global Privacy Control (GPC) signal when enabled in your browser, or by writing to us at info@gusti.ca.
Privacy Incidents
In the event of a privacy incident involving your personal information that presents a serious risk of harm, we will notify the Commission d'accès à l'information du Québec and any affected individuals, in accordance with Law 25, and we will record the incident in our privacy incident registry.
Minors
Our Site is not directed at children, and we do not knowingly collect personal information from individuals who have not reached the age of majority. If you believe we have collected personal information from a minor, please contact us so that we can delete it.
Security
We maintain reasonable security measures to protect your information against loss, unauthorized use, or alteration, including by entrusting payment processing to PCI-DSS certified providers. However, no system is completely secure, and transmitting information over the Internet always carries some risk.
External Links
Our Site may contain links to third-party websites, including social media platforms such as Facebook or Instagram. We are not responsible for the privacy practices of these sites. We strongly encourage you to read the privacy policy of any site you visit.
Privacy Officer
For any question or complaint regarding the handling of your personal information, you may contact our Privacy Officer at:
Privacy Officer, Gusti International Inc.
8484 rue de l'Esplanade
Montréal, Québec H2P 2R7
Email: info@gusti.ca
We will handle your request in accordance with Law 25.