Privacy
This policy explains what data ATHKA collects, why, who it is shared with and how to exercise your rights. It is written to comply with Quebec's Law 25, the GDPR for residents of the European Union and equivalent laws elsewhere.
Controller
The ATHKA store is operated by Medtra Inc. (Boisbriand, Quebec, Canada), seller and data controller. Privacy officer: admin@medtra.ca. Questions about the store: athka@medtra.ca.
What we collect, and why
| Data | When | Why | Kept |
|---|---|---|---|
| Name, shipping address, phone, email | At checkout | Deliver, reach you about the order, send tracking | 7 years (accounting obligations) |
| Payment data | At checkout | Processed by Stripe; ATHKA only receives the confirmation and last 4 digits | At Stripe, per its policy |
| Newsletter sign-up | Send the welcome code and the weekly newsletter | Until you unsubscribe | |
| Approximate country (by IP) | When the site opens | Show the right currency and delivery times | Not kept |
| Cart contents, currency and language | During your visit | Restore your cart | In your browser only, never sent before checkout |
Who it is shared with
- Stripe (payment): name, email, addresses, amount.
- Our logistics partner (preparation and shipping, warehouse in Asia): name, shipping address, phone, items ordered — nothing else.
- Resend (email delivery): your email and the content of the emails.
- ipwho.is (IP geolocation): your IP address, to infer your country.
Some of this data is therefore processed outside Quebec and Canada (United States, Asia). Medtra Inc. has assessed these transfers and uses providers offering adequate protection. No data is ever sold or rented.
Cookies and local storage
The site sets no advertising or tracking cookies. It only uses your browser's local storage to remember your cart, currency and language, and Stripe sets its own technical cookies required for payment.
Security
The site is served over HTTPS. Access to order data is limited to the people who need it to serve you. In case of a privacy incident presenting a risk of serious harm, you are notified without delay, as Law 25 requires.
Your rights
You can at any time ask to access, correct or delete your information, withdraw consent to the newsletter, or obtain your data in a readable format. Email athka@medtra.ca; reply within 30 days. If you're not satisfied, you can contact Quebec's Commission d'accès à l'information or your country's data-protection authority.
Minors
The store is for people aged 18 and over. We do not knowingly collect data from minors.
Changes
The update date is at the top of the page. A significant change is announced on the site before it takes effect.