Our Privacy Policy
Respecting your privacy is a core value of ours.
We, at Maison La Miellée, are committed to protecting your personal information in compliance with the Act respecting the protection of personal information in the private sector (Law 25) of Quebec and the European Union's General Data Protection Regulation (GDPR), where applicable.
This policy explains how we process the information collected via our website (hosted on Squarespace, using Google Analytics and a contact form), via our professional Facebook page, when collecting payments on-site, during online transactions, and via transfers and checks.
Collection and Use of Your Personal Information
We collect five types of information, depending on the platform or method you use to interact with us:
1. Voluntarily Provided Information
Via our Website (Contact Form):
Type of Information: Your name, email address, and the content of your message.
Purpose: To respond to your specific requests, provide the information solicited, and ensure follow-up on our communications.
Via our Facebook Page:
Type of Information: We do not collect or use any personally identifiable information through this channel, except for that which you voluntarily provide to us (for example, when you contact us via private message to ask a question). However, we do have access to anonymized aggregated/statistical data via Facebook page analysis tools.
Purpose: To respond to your specific requests, manage communications, and perform anonymized statistical monitoring of interactions with our page.
2. Information Collected During Online Transactions (via Squarespace Payments)
Type of Information: Transaction data (time, date, reservation details (number of nights, number of people), and billed amount). The full credit/debit card number and security code (CVV) are neither collected nor stored by us.
Purpose: To process and finalize the online booking or purchase, provide you with a detailed invoice, and ensure accounting management.
Security and PCI DSS Compliance: Squarespace Payments is our preferred payment solution. Credit card information is processed on servers compliant with the PCI-DSS standard (Payment Card Industry Data Security Standard) and is encrypted. Maison La Miellée never has access to your complete payment information. This data is managed exclusively by Squarespace and its payment processor.
3. Information Collected During On-site Transactions (Square Payment Terminal)
Type of Information: During a transaction via our Square terminal, we collect transaction data (time, date, location, reservation details (number of nights, number of people), billed amount, and a portion of the card number, specifically the last four digits). If you opt for an electronic receipt, your email address or phone number is also collected.
Purpose: To process and finalize the payment, issue an electronic receipt (if requested), and ensure accounting management.
Third-Party Management: We use Square's service for payment processing. Your complete card information (full number, expiration date, CVV) is encrypted and managed directly by Square. We do not have access to it. We invite you to consult Square's Privacy Notice related to its customers to understand their data collection, use, and protection practices:Square Privacy Notice.
4. Information Collected for Manual Payments and Transfers
Type of Information:
Interac e-Transfer: Sender's full name and their contact email address (or phone number).
Check: Sender's full name and address (as appearing on the check).
Purpose: To receive payment for the reservation (deposit or balance), issue an appropriate receipt, and ensure the maintenance of our accounting and financial records in compliance with the law.
Retention: This information is retained in Maison La Miellée's accounting records for a period of 7 years, except in the event of an extension imposed by an applicable law or regulatory requirement.
5. Information Automatically Collected on Our Website:
Type of Information: Your IP address, browser type, operating system, pages visited, time and date of visit, and referral source.
Purpose: To understand the use of our website, measure its audience, and improve our services as well as the user experience. This analysis is conducted with your consent, for the legitimate purpose of optimizing our services. We are committed to maintaining default IP address anonymization and applying strict protection measures for all data.
Cookie Management: If you do not wish for us to collect and analyze cookie files, we invite you to select "Refuser les témoins" (Refuse cookies) when the consent banner appears.
If you have already accepted cookies and wish to withdraw your consent, we invite you to scroll to the very bottom of our webpage and click on the "Préférences en matière de témoins de navigation" (Cookie preferences) link. Please note, however, that disabling cookies may affect certain functionalities of the site.
Data Retention
Your personal information is retained only for the duration necessary to fulfill the purposes for which it was collected (e.g., to answer your question) and to meet our legal and accounting requirements. Once this purpose is achieved, it is securely destroyed. For example, contact data via the form is retained for a maximum period of six (6) months following the last exchange, then deleted. We do not use newsletter features and do not retain the personal email addresses of travelers who contact us. We prioritize our Facebook, Instagram communities, and our website to publish our latest news.Protection and Security of Your Information
We commit to taking reasonable security measures, appropriate to the nature of the information, to protect it against loss, theft, unauthorized access, disclosure, copying, use, or modification.
Website: Our site is hosted on Squarespace, and we ensure that our environment is configured to maintain the security of your data.
Online Transactions: We use the Squarespace Payments solution, whose infrastructure complies with the PCI-DSS standard, guaranteeing that your payment data is encrypted and managed by the payment processor and not by us.
On-site Transactions: We comply with the security standards required by our payment partner, Square.
Manual Payments and Transfers: Information associated with checks and transfers is processed and archived securely and confidentially, limiting access to authorized personnel only for accounting and administrative purposes.
Facebook Page: By interacting with our Facebook page, you are subject to the privacy policy of Facebook (Meta). We invite you to consult it directly to understand how this company collects, uses, and protects your data, which is independent of our own practices.Link to Meta’s Privacy Policy
Sensitive Information
For the protection of your privacy, and to ensure compliance with PCI DSS standards, we ask you to avoid in all cases sharing sensitive personal information (such as your full credit card information, social security number, etc.) via unsecured channels like our contact form, private messages on Facebook, email, or by telephone. All transactions for direct bookings must be made via the secure Squarespace Payments platform (Section 2) or on-site payments via the secure Square terminal (Section 3).Your Rights
In accordance with the Act respecting the protection of personal information in the private sector in Quebec ("Law 25") and the General Data Protection Regulation in the European territory ("GDPR"), you have the following rights regarding your personal information, depending on the applicable legal and regulatory context:
Right of Access and Rectification: You have the right to request access to the information we hold about you and to have it rectified if it is inaccurate, incomplete, or ambiguous.
Right to be Forgotten (Erasure): You may request the erasure of your personal information, subject to any legal retention obligations that may be imposed upon us.
Right to Data Portability (GDPR): You have the right, in accordance with applicable conditions, to receive the information you have provided to us in a structured and commonly used format.
Right to Restriction of Processing: You may request that we limit the processing of your personal information.
Right to Cease Dissemination (Law 25): If applicable, you may request the cessation of the dissemination of your personal information or its de-indexing, under certain conditions.
Contact Us
For any questions or concerns regarding the processing of your personal information, the Person Responsible for the Protection of Personal Information (PRP) at Maison La Miellée is Jacinthe Coulombe.
Email Address: