Privacy policy

Privacy officer

The person responsible for the protection of personal information (Privacy Officer) is Renaud Cardinal, operator of SimpleICI.

Contact: support@simpleici.ca

We respond to requests within 30 days, as required by Law 25.

Minors

SimpleICI is open to all visitors. Creating an account and the associated collection of personal information are intended for people who can validly consent under applicable law.

In Quebec, consent from a person under 14 must be given by the holder of parental authority (s. 14, Act respecting the protection of personal information in the private sector).

If you believe a minor registered without valid consent, or if you hold parental authority, email support@simpleici.ca to request account deletion.

Information collected

Account: email, name, address, city, postal code, approximate coordinates (latitude/longitude), dietary preferences, budget, culinary tastes, store radius.

Usage: grocery lists, searches, favorite retailers, contact messages, beta feedback, Premium subscription (payments processed by a specialized subprocessor).

Technical: authentication session cookies, language preference, server logs (IP address, timestamps, user-agent).

Security: bot verification at registration.

Purposes

Provide the service: flyers, price comparison, grocery lists, localized deals.

Personalize the experience based on your preferences and postal code.

Process payments and manage Premium subscriptions.

Maintain site security and prevent fraud.

AI features (recipes, suggested lists): content generation from your preferences — no automated decisions with legal effect on you.

Legal basis and consent

Registration requires your explicit consent to this policy and the terms of use.

Newsletter and advertising cookies rely on separate consent, which you may withdraw at any time.

Retention

Active account: retained while your account exists.

After deletion: profile and list data are erased; some contact or feedback records may be kept up to 24 months for support purposes.

Technical logs: up to 12 months.

Stripe billing records: as required by applicable legal and accounting obligations.

Your rights (Law 25)

Access and correction: via your profile or by contacting us.

Portability: JSON export from Profile → Export my data.

Deletion: Profile → Delete my account.

Withdraw consent (newsletter, ad cookies): via settings or the cookie banner.

Right to file a complaint with the Commission d'accès à l'information du Québec (CAI).

Privacy incidents

If an incident poses a risk of serious injury, we will notify the CAI and affected individuals as required by Law 25.

Transfers outside Quebec

Some subprocessors process personal information outside Quebec, primarily in the United States. We require appropriate contractual safeguards under Law 25 (s. 3.5).

Third-party flyer viewers embedded on the site may also collect data under their own policies.

Subprocessors

We use subprocessors for authentication, hosting, database, payments, advertising (if consented), bot verification, media storage, and AI features, primarily located in the United States.

A detailed list of subprocessor categories and processing countries is available on request at support@simpleici.ca.