Privacy policy

Effective date: September 1, 2026
Last updated: August 29, 2026

This Privacy Policy explains how Boissons Mapl Inc., operating as Mapl Soda (“Mapl,” “we,” “us,” or “our”), collects, uses, communicates, retains, and protects personal information when you visit maplsoda.ca, make a purchase, create or manage a subscription or account, contact us, or otherwise interact with us.

1. Privacy Officer and Contact

Mapl's Privacy Officer is responsible for our personal-information practices and privacy requests.

Privacy Officer, Boissons Mapl Inc.
248 Braebrook Avenue
Pointe-Claire, Québec H9R 1V9
Canada
Telephone: 514-558-3669
Email: mapl.sodabusiness@gmail.com

Please write “Privacy Request” in the subject line. We may verify your identity before acting on a request.

2. Personal Information We Collect

Depending on how you interact with us, we may collect:

  • identity and contact information, such as name, email address, telephone number, billing address, shipping address, and delivery instructions;
  • order and transaction information, such as products, quantities, purchase history, discounts, taxes, shipping method, payment status, returns, refunds, and subscription selections;
  • payment information, which is collected and processed by Shopify and its payment providers. Mapl does not ordinarily receive or retain complete payment-card numbers;
  • account and subscription information, such as login-related records, delivery frequency, renewal date, status, and changes or cancellations;
  • communications and customer-service information, including messages, preferences, survey responses, claim details, photographs, shipping labels, lot codes, best-before information, and food-safety reports;
  • marketing information, including consent records, email or SMS preferences, campaign interactions, promotion use, and unsubscribe requests; and
  • technical and usage information, such as IP address, browser, device, operating system, language, approximate location derived from IP address, cookie or similar identifiers, referral source, pages viewed, shopping activity, and interaction with our site or messages.

We collect information directly from you, automatically through the website and communications, and from service providers involved in payments, commerce, subscriptions, marketing, fraud prevention, analytics, shipping, or delivery.

3. Why We Use Personal Information

We use personal information only for identified, serious, and legitimate purposes, including to:

  • provide the website, accounts, checkout, orders, subscriptions, shipping, local delivery, returns, refunds, and customer support;
  • process and verify payments, prevent fraud, secure our services, and enforce applicable terms;
  • communicate order, account, subscription, safety, recall, and service information;
  • investigate delivery, product-quality, food-safety, warranty, and customer-service claims;
  • maintain business, tax, transaction, consent, incident, and compliance records;
  • understand site and campaign performance, troubleshoot, and improve our products, services, and customer experience; and
  • send marketing by email or text where we have the consent or other legal authority required, and manage marketing preferences.

If we wish to use personal information for a new incompatible purpose, we will obtain consent when required by law.

We seek valid consent where required and explain the relevant purposes at or before collection. You may withdraw consent for optional uses, subject to legal or contractual restrictions and reasonable notice. Withdrawal does not affect processing already lawfully completed and may prevent us from providing a feature that depends on the information.

You can unsubscribe from marketing email through the link in the message and can follow the instructions in a marketing text to opt out of SMS. We may still send non-promotional communications needed to complete an order, administer a subscription or account, address safety, or respond to you.

5. Cookies, Analytics, and Advertising Technologies

We and our service providers use cookies, pixels, local storage, and similar technologies to operate checkout and account features, remember choices, keep the site secure, measure performance, and—when enabled and permitted—support analytics or advertising.

Technologies used for profiling, advertising, identification, or location functions are described through our cookie banner or privacy-preference interface. Non-essential technologies are not intended to be activated by default where prior consent is required. You can manage available choices through the cookie or privacy settings on our site and through your browser. Blocking essential cookies may prevent some features from working.

6. When We Communicate Personal Information

We may communicate personal information to service providers only as reasonably necessary for the purposes described above. These may include:

  • Shopify, which hosts our store and provides commerce, checkout, payment, security, and related services;
  • payment processors, banks, fraud-prevention, accounting, and tax providers;
  • subscription and customer-account providers, including Appstle when enabled;
  • email and SMS providers, including Klaviyo when enabled;
  • analytics and advertising providers, such as Google or Meta when their services are enabled and the required consent has been obtained;
  • Canada Post, Purolator, UPS, other carriers, local delivery providers, and shipping insurers;
  • cloud hosting, data storage, IT, cybersecurity, professional advisers, and customer-support providers; and
  • regulators, law enforcement, courts, or other parties where required by law or reasonably necessary to protect rights, safety, or security.

We may transfer information as part of a proposed or completed financing, reorganization, merger, or sale of all or part of the business, subject to appropriate confidentiality and legal safeguards.

We do not sell personal information for money. Some analytics or advertising disclosures may be treated as a “sale,” “sharing,” or targeted advertising under certain laws; where those laws apply, we provide the choices they require.

7. Shopify

Our store is hosted by Shopify. Shopify processes personal information for our store and also for its own purposes as described in its applicable privacy materials. Your information may also be processed by Shopify and its providers in other jurisdictions. You can learn more at Shopify's consumer privacy portal and privacy policy linked from our checkout or cookie interface.

8. Processing Outside Québec

Some service providers may process or store personal information outside Québec or Canada, where it may be subject to the laws and lawful access procedures of that jurisdiction. Before communicating personal information outside Québec, we assess the relevant privacy factors and use contractual or other safeguards as required. We limit information to what is reasonably necessary for the service.

9. Retention and Disposal

We retain personal information only as long as reasonably needed for the purposes identified, to meet legal, tax, accounting, food-safety, chargeback, warranty, dispute, or compliance requirements, or to establish, exercise, or defend legal rights. Retention periods vary by record type and sensitivity.

When retention is no longer required, we securely destroy the information or anonymize it for a serious and legitimate purpose in accordance with applicable law. Information retained in backups is isolated and deleted or overwritten according to the applicable backup cycle.

10. Security and Privacy Incidents

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity, amount, purpose, distribution, and storage format of the information. No method of transmission or storage is completely secure.

If a confidentiality incident occurs, we take reasonable steps to reduce the risk of harm, prevent recurrence, keep the records required by law, and notify affected individuals and regulators when legally required.

11. Your Privacy Rights

Subject to applicable law and exceptions, you may request:

  • confirmation of whether we hold personal information about you and access to that information;
  • correction of inaccurate, incomplete, or ambiguous information;
  • information about categories of persons with access and the applicable retention period;
  • withdrawal of consent for optional processing;
  • deletion, cessation of dissemination, or de-indexation where the legal conditions are met;
  • a copy of computerized personal information collected from you in a structured, commonly used technological format where the portability right applies; and
  • information about, or review of, a decision based exclusively on automated processing where applicable.

Send a written request to the Privacy Officer. We may request information needed to verify identity and authority. We will respond within the time required by applicable law—generally within 30 days under Québec private-sector privacy law—and explain any refusal and available recourse.

You may also file a complaint with the Commission d'accès à l'information du Québec or another competent privacy authority. We encourage you to contact us first so we can try to resolve the concern.

12. Children

Our store is intended for general audiences and is not directed to children under 14. We do not knowingly collect personal information from a child under 14 without consent from the holder of parental authority or tutor when that consent is required. Contact the Privacy Officer if you believe a child has provided information improperly.

Our site may link to third-party websites or services. Their privacy practices are governed by their own notices, and we are not responsible for those practices.

14. Changes to This Policy

We may update this policy to reflect changes in our practices, services, providers, or legal obligations. We will post the revised version with a new “Last updated” date and provide additional notice when required or appropriate for a material change.