Chalumeau

Privacy policy

Last updated: October 27, 2026 · Version française

Chalumeau (“we”) makes and sells handcrafted crème brûlée in Gatineau. This policy explains what personal information we collect when you order or contact us, why we collect it, who we share it with and how to exercise your rights, in accordance with Quebec’s Act respecting the protection of personal information in the private sector.

Person in charge of personal information

Information we collect

• For an order: name, email, phone (optional), pickup or delivery choice, delivery address (if you choose delivery), time slot, flavours ordered, notes (for example an allergy), promo code used and tip.
• For an event request: name, email, phone, event type and date, number of guests, venue and a description of your project.
• Payment: your card details are entered directly in Square’s secure payment module. We never see or store your card number.

Why we use it

• To prepare, charge and hand over your order (pickup or delivery).
• To send your order confirmation and reach you if needed (delay, allergy question).
• To send you, after your order, a thank-you email with a review request and a discount on your next box. You can ask us to stop at any time.
• To check promo code use (one code per customer).
• To respond to your event requests.
• To keep our sales records and meet our tax obligations (GST/QST).

We never sell your information and don’t use it for other purposes without your consent.

Who we share it with

We work with a few service providers, who only receive what they need to provide their service:

• Square: secure payment processing.
• Google (Google Workspace): email and our order-tracking spreadsheet.
• Cloudflare: a small server that forwards payments to Square.
• Netlify: website hosting.
• Formspree: delivery of order and event forms.
• Meta (Facebook, Instagram): measuring our ads, only if you accept cookies.

Some of these providers may store data outside Quebec, including in the United States. We choose reputable providers that offer adequate security measures.

Cookies

If you click “Accept” in the cookie banner, our site loads the Meta Pixel. It lets us measure how well our Facebook and Instagram ads work (for example, knowing that an order followed an ad) and show our ads to people likely to be interested. Meta then receives technical data about your visit (pages viewed, add to cart, checkout started, order amount) and may link it to your Meta account, under its own privacy policy. We never send your name, email or address to Meta.

The Meta Pixel is off by default: it only loads if you accept it. You can change your mind anytime with the “Cookies” link at the bottom of our home page. Square’s payment module and our fonts (Google Fonts) may also use cookies or technical connections needed for them to work and to prevent fraud.

Retention and security

Order information is kept as long as needed for the purposes above, then for the period required by tax laws (usually six years). Event requests that don’t go ahead are deleted after about a year. Access is limited to Chalumeau’s co-founders, and our accounts are protected.

Your rights

At any time, you can:

• ask to access the information we hold about you;
• have it corrected if it’s inaccurate or incomplete;
• withdraw your consent to receive our follow-up emails;
• ask us to delete your information once it’s no longer needed.

Email us at info@chalumeauqc.com. We reply within 30 days. If you’re not satisfied with our answer, you can contact the Commission d’accès à l’information du Québec.

Privacy incidents

If an incident ever posed a risk of serious harm, we would notify the people concerned and the Commission d’accès à l’information, as required by law.

Changes

We may update this policy. The date of the last update is shown at the top of the page.