Privacy Policy

1. Who we are

This privacy policy applies to the website operated by Shomali Inc. ("we", "us", "our"). Our address is 20925 Rue Daoust, Sainte-Anne-de-Bellevue, QC H9X 0A3, Canada.

For privacy-related questions or to exercise your rights, contact us via our Contact page or by phone at 1-888-775-0463 or 514-457-0470.

2. What information we collect

We collect information you provide and information generated when you use our site.

• Account registration (B2B): When you request access, we collect company name, contact name, email, phone, address (city, province, country, postal code), business type, and any message you submit. After approval, your account holds email, name, language and currency preferences, payment terms, and links to our internal customer records (ERP customer ID).
• Addresses and contacts: If you use our account features, we store shipping and billing addresses (including contact name and phone) and contact persons (name, position, email, phone, primary contact, and marketing email preference). This data may be synced with our internal ERP.
• Orders and cart: We store your orders, cart contents, and (for logged-in users) invoice and payment history information that we receive from our internal systems.
• Contact form: When you use the contact form, we collect name, email, phone (optional), subject, and message. If you are logged in, we send your message together with your contact name, customer name, and ERP customer ID to our team so we can respond.
• Marketing emails: If you have an account, you can manage whether individual contacts receive marketing emails in your account under the Contacts section. We sync this preference with our systems. If you use an unsubscribe link in our marketing emails, we record your email address so we can honour your opt-out.
• Email tracking: When you open or click links in emails we send (e.g. order or marketing emails), we may record a tracking identifier, the type of event (open or click), the URL clicked (if applicable), your browser/device information (user agent), and your IP address. This helps us understand how our emails are used and improve our communications.

3. Cookies and local storage

We use the following:

• Session cookie (auth-token): Keeps you logged in. It is HTTP-only, and we use it for 30 days. It is required to use your account.
• Language preference (locale): We store your language choice (English or French) so the site displays in your preferred language.
• Announcement banner: We may use browser storage (e.g. session storage) to remember when you have dismissed a site announcement so we do not show it again during the same session.

You can control or delete cookies and local storage via your browser settings. Disabling the session cookie will prevent you from staying logged in.

4. How we use your information

We use the information we collect to:

• Create and manage your account and process your registration request.
• Process orders, manage your cart, and display orders, invoices, and payment history.
• Sync customer, address, contact, order, and invoice data with our internal ERP and business systems.
• Respond to your contact form submissions and logged-in messages.
• Send you transactional emails (e.g. order confirmation, password reset) and, where you have agreed, marketing communications.
• Analyse email opens and clicks to improve our communications.
• Comply with legal, tax, or accounting obligations and protect our rights.

5. Sharing your information

We share your information with our internal systems (including our ERP) to run our business, fulfil orders, and manage customer records. Contact form and in-site messages are sent to our company email and handled by our team. We do not sell your personal information. We may disclose information where required by law or to protect our rights.

6. How long we keep your information

We keep your account and profile information while your account is active. Order, invoice, and payment information are retained for at least seven (7) years for business and legal purposes (e.g. tax and accounting). Registration requests that do not become accounts may be retained for a limited period for record-keeping. Email tracking and unsubscribe records may be kept for a limited period. If you would like more detail on retention for a specific type of data, please contact us.

7. Security

We use measures such as encrypted passwords, secure cookies where the site is served over HTTPS, and access controls to protect your information. No method of transmission or storage is 100% secure; we encourage you to use a strong password and keep it confidential.

8. Your rights

Depending on applicable law (including Canadian federal and Quebec privacy law), you may have the right to access, correct, or delete your personal information, or to withdraw consent where we rely on it. You can update your profile, addresses, and contacts in your account. To request access, correction, deletion, or to ask questions about our practices, please contact us using the details in section 1. If you are in Quebec, you may also have the right to lodge a complaint with the Commission d'accès à l'information du Québec.

9. Changes to this policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page will be revised when we make changes. We encourage you to review this page periodically.