Privacy statement (CA)

1. Person in Charge of Processing

This privacy policy applies to the website operated by Roulottes Evo inc. (hereinafter "we," "us," or "our"). As a Quebec-based business, we are subject to Quebec Law 25 — formally known as An Act to modernize legislative provisions as regards the protection of personal information (S.Q. 2021, c. 25) — and we are committed to handling your personal information responsibly and transparently.

This policy explains what personal information we collect when you visit our website, why we collect it, how long we keep it, who we share it with, and what rights you have over it.

2. Personal Information Collected

We collect personal information in the following categories, depending on how you interact with our website:

• Identification and contact information — your name, email address, phone number, and billing or shipping address, collected when you place an order or contact us.
• Transaction data — purchase history, order details, payment method type (we do not store full card numbers), and transaction amounts, collected through our online store.
• Navigation and device identifiers — IP address, browser type, device identifiers, pages visited, session duration, and approximate geographic location, collected automatically when you browse our site.
• Advertising identifiers and social identifiers — identifiers linked to your advertising profile or social media accounts, collected when you interact with marketing tools on our site (subject to your consent).
• Consent preferences — your cookie consent choices, stored locally in your browser to remember your preferences across visits.

We do not knowingly collect sensitive personal information such as health data, financial account credentials, or government-issued identification numbers beyond what is strictly necessary to process a transaction.

3. Purposes of Processing

We use your personal information only for the purposes described below. Where we rely on your consent, you may withdraw it at any time (see Section 7).

• Operating the online store and processing orders — We use your identification, contact, and transaction data to process purchases, arrange delivery, issue invoices, and handle returns. This processing is necessary to perform the contract you enter into with us when you place an order. WooCommerce Analytics also helps us understand sales performance and customer behavior within our store; this processing relies on your consent for analytics cookies.
• Audience measurement and site optimization — With your consent, we use Google Analytics 4 to measure how visitors use our site (pages visited, session duration, approximate location) so we can improve content and navigation. This data is pseudonymized and processed in aggregate wherever possible.
• Targeted advertising and remarketing — With your consent, we use the Meta Pixel (Facebook) to track conversions and show you relevant advertisements on third-party platforms after you visit our site. This involves sharing certain device and behavioral identifiers with Meta Platforms, Inc.
• Displaying the site correctly (functional tools) — We use Google Fonts, Adobe Fonts (Typekit), and YouTube (embedded videos) to present our site as intended. These services may collect your IP address and device identifiers as a technical side-effect of delivering fonts or video content. Where these tools are non-essential, they are activated only with your consent.
• Managing your consent choices — We use Moelleux (operated by Horizon-Cumulus, Joliette, Quebec) to record and store your cookie consent preferences. A cookie named moelleux_{site_key} is placed in your browser for up to 13 months. This processing is strictly necessary for us to honor your choices and comply with Quebec Law 25; it does not require separate consent.
• Legal compliance and fraud prevention — We may process personal information as required by applicable law, to respond to legal requests, or to detect and prevent fraudulent transactions. This processing is based on our legal obligations and legitimate interest in protecting our business and customers.

4. Third Parties and Processors

The table below lists every third-party service active on our website, its purpose, its category, and whether it involves a transfer of personal information outside Quebec.

We also use Microsoft 365 (operated in the United States) for internal business email communications. If you contact us by email, your message and contact details may be processed on Microsoft's servers located in the United States. Please see Section 5 for details on cross-border transfer safeguards.

Our website is hosted by Horizon-Cumulus (Joliette, Quebec). Your website data and consent records are stored on servers located in Quebec, Canada.

5. Transfers Outside Quebec

Several of the third-party services listed in Section 4 involve transferring your personal information to the United States. Under section 17 of Quebec Law 25, we are required to conduct a Privacy Impact Assessment (PIA) before communicating personal information outside Quebec, and to ensure that the receiving jurisdiction offers an adequate level of protection.

The following transfers outside Quebec are currently in place:

• Google Analytics 4 (Google LLC, United States) — navigation and device data for audience measurement. Google participates in the EU-U.S. Data Privacy Framework and offers standard contractual clauses. A PIA has been conducted for this transfer.
• WooCommerce Analytics (Automattic Inc., United States) — transaction and navigation data for store analytics. Automattic offers standard contractual clauses. A PIA has been conducted for this transfer.
• Meta Pixel / Facebook (Meta Platforms, Inc., United States) — device identifiers, advertising identifiers, and behavioral data for remarketing. Meta offers standard contractual clauses. A PIA has been conducted for this transfer.
• Google Fonts (Google LLC, United States) — IP address and device identifiers transmitted when fonts are loaded. A PIA has been conducted for this transfer.
• Adobe Fonts / Typekit (Adobe Inc., United States) — IP address and device identifiers transmitted when fonts are loaded. A PIA has been conducted for this transfer.
• YouTube (Google LLC, United States) — device identifiers, IP address, and session data when embedded videos are played. A PIA has been conducted for this transfer.
• Microsoft 365 (Microsoft Corporation, United States) — email content and contact details processed through our business email platform. Microsoft offers standard contractual clauses and participates in recognized cross-border data transfer frameworks. A PIA has been conducted for this transfer.

You may decline non-essential transfers by refusing the corresponding cookie categories through our consent banner. Transfers related to Microsoft 365 occur whenever you send us an email directly and cannot be avoided if you choose to contact us by that means.

6. Retention Period

We keep your personal information only as long as necessary for the purposes described in this policy or as required by law. The table below summarizes our retention practices by data type.

When the applicable retention period expires, personal information is either securely deleted or anonymized so that it can no longer be linked back to you.

7. Your Rights

Quebec Law 25 gives you the following rights regarding your personal information. To exercise any of these rights, please contact our Person responsible for the protection of personal information (see Section 8). We will respond within 30 days of receiving your request.

• Right of access — You may ask us to confirm whether we hold personal information about you and to receive a copy of that information in a clear and understandable format.
• Right of rectification — If any personal information we hold about you is inaccurate, incomplete, or ambiguous, you may ask us to correct it.
• Right of erasure (right to be forgotten) — You may ask us to delete personal information that we collected without a valid legal basis, that is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent and no other legal basis applies. Note that we may be required to retain certain information to comply with legal obligations (for example, tax records).
• Right to data portability — You may ask us to provide personal information you have given us in a structured, commonly used, technological format so you can transfer it to another organization, where technically feasible.
• Right to withdraw consent — Where our processing is based on your consent (analytics, marketing, and certain functional cookies), you may withdraw that consent at any time by updating your preferences through our consent banner or by contacting us directly. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

If you believe your rights have not been respected, you have the right to file a complaint with the Quebec Information Access Commission (CAI) at https://www.cai.gouv.qc.ca.

8. Person Responsible for the Protection of Personal Information

In accordance with section 3.1 of Quebec Law 25, we have designated a Person responsible for the protection of personal information who oversees compliance with this policy and handles all privacy-related requests.

• Name: Michael Thibodeau
• Title / Role: --
• Email: info@helio-vr.com
• Phone: 514 838-4468

You may contact our Person responsible for the protection of personal information at any time to exercise your rights, ask questions about this policy, or report a privacy concern. We are committed to responding to all requests within 30 days, as required by Quebec Law 25.

If your request is complex or if we receive a large volume of requests simultaneously, we may extend this period by an additional 30 days, in which case we will notify you of the extension and the reason for it before the initial deadline expires.

9. Effective Date and Versioning

This privacy policy takes effect on 10 juin 2026 and replaces any prior version.

Version: 1

We may update this policy from time to time to reflect changes in our practices, the services we use, or applicable law. When we make material changes, we will update the effective date above and, where appropriate, notify you through our website or by email. We encourage you to review this policy periodically.

The current version of this policy is always available on our website. Archived versions are available upon request by contacting our Person responsible for the protection of personal information.