Privacy policy

Last updated: November 5, 2026

This policy explains what personal information OneStop Living collects, why, and how we protect it. It is written to meet Quebec’s Act respecting the protection of personal information in the private sector (as amended by Law 25) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

OneStop Living is a business operated by its owner in Montréal and is not yet incorporated. We will update this policy with our registered legal name. [CONFIRM WITH LAWYER]

Who is responsible

OneStop Living is responsible for the personal information it holds. Our privacy officer answers all questions and requests about it:

What we collect

• Information you send us. When you email or call us: your name, company, job title, email address, phone number, and the business documents you choose to share (price lists, catalogues, account application forms, invoices).
• Technical information. Like every website, our hosting provider automatically records basic connection data to deliver and protect the site: IP address, browser type, page requested and time.

This website has no forms, no accounts, no analytics, no advertising pixels and no tracking cookies. Our fonts and files are served from our own site, so visiting a page does not send your information to other companies.

Why we use it

• To answer your messages and calls.
• To open and manage a wholesale or reseller account with your company: purchase orders, payments, invoices and reorders.
• To show Amazon proof that our products come from authorized sources, when Amazon asks.
• To keep the accounting and tax records the law requires.
• To keep this website secure and working.

We only collect what we need for these purposes. We never sell or rent personal information, and we do not use it for advertising.

Consent

By contacting us, you agree that we use your information for the purposes above. You can withdraw your consent at any time by writing to our privacy officer, unless the law requires us to keep the information (for example, tax records).

Who we share it with

Only with the service providers we need, under agreements that protect your information:

• Zoho — our business email (Canadian data centre).
• Cloudflare — hosting and security for this website. Its network operates worldwide, including the United States.
• Amazon — only the business documents needed to show our sourcing is authorized (for example, an invoice), when requested.
• Our accountant and government authorities — when the law requires it.

Information outside Quebec

Some providers, such as Cloudflare, may process technical information outside Quebec and Canada. Before doing so, we assess whether the information will receive adequate protection, as Quebec law requires. [CONFIRM WITH LAWYER]

How long we keep it

• Business records of an account (orders, invoices, related emails): 6 years after the end of the tax year they relate to, as Canadian tax law requires.
• Messages that do not lead to a business relationship: deleted within 2 years.
• Website technical logs: kept by our hosting provider for a short period, for security only.

When we no longer need information, we delete it securely.

How we protect it

We use encrypted connections (HTTPS) on this website, two-step login on our email and hosting accounts, and we limit access to the information to the people who need it.

Your rights

You can ask us to:

• see the personal information we hold about you and how it is used;
• correct information that is wrong or incomplete;
• delete your information or stop using it, when the law allows;
• give you your information in a commonly used technological format;
• withdraw your consent.

Write to our privacy officer. We answer within 30 days. If you are not satisfied with our answer, you can file a complaint with the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

Privacy incidents

If a privacy incident creates a risk of serious injury, we notify the Commission d’accès à l’information and the people affected, and we keep a register of incidents, as the law requires.

Children

This website is for businesses. We do not knowingly collect information from anyone under 14.

Changes to this policy

We update this policy when our practices change and show the date of the latest update at the top of this page.