Privacy Policy

ApothecaTree Inc. ("ApothecaTree", "we", "us") respects your privacy. This Privacy Policy explains what personal data we collect through our website and Somnaffron™ product, why we collect it, how we use it, and your rights under the EU General Data Protection Regulation (GDPR/RGPD) and applicable Canadian privacy laws (including PIPEDA and Quebec Law 25).

1. Data controller

ApothecaTree Inc., Montréal, QC, Canada. Contact: hello@apothecatree.com.

2. What we collect

• Newsletter signups: email address, preferred language, and the date you subscribed.
• Technical data: IP address, browser type, device type, and pages visited, collected via essential and (with your consent) analytics cookies.
• Correspondence: any message you send us via email.

3. Why we use it (legal basis)

• Consent (Art. 6(1)(a) GDPR): sending you product updates and marketing emails after you sign up to our list.
• Legitimate interest (Art. 6(1)(f) GDPR): running and securing the website, preventing abuse, measuring aggregate audience.
• Legal obligation: responding to lawful requests from authorities.

4. Cookies

We use a small number of cookies. Essential cookies are required for the site to work and store your cookie preference. Analytics cookies are only set after you choose "Accept all" in the cookie banner. You can change your choice at any time by clearing site data in your browser.

5. Sharing

We do not sell your personal data. We share it only with service providers strictly necessary to operate the site (hosting, email delivery, analytics), under contract and appropriate safeguards. Some providers may be located outside the EU/EEA or Canada; in that case we rely on Standard Contractual Clauses or equivalent transfer mechanisms.

6. Retention

Newsletter data is retained until you unsubscribe. Technical logs are kept for up to 12 months. Correspondence is kept for as long as needed to handle your request and for legal record-keeping.

7. Your rights

You can request access, rectification, erasure, restriction, portability, and object to processing of your personal data. You can withdraw consent at any time. To exercise these rights, email hello@apothecatree.com. You also have the right to lodge a complaint with your local data protection authority (in the EU) or with the relevant Canadian/Québec authority.

8. Security

We use industry-standard technical and organizational measures to protect your data (HTTPS, access controls, encrypted storage). No system is 100% secure; please use a strong, unique password for any account you may create with us.

9. Changes

We may update this policy from time to time. Material changes will be announced on this page. The "last updated" date above reflects the current version.