Privacy Policy.

Edi Cupia is a brand of Umama’s Eco World Inc., a Canadian company (“Edi Cupia”, “we”, “us”). We are responsible for the personal information collected through www.edicupia.com and its forms.

We have designated a person responsible for the protection of personal information. You can reach them through our contact page — choose the “General” topic and mention “Privacy” in your message.

This policy applies to personal information we collect when you visit our website, request a sample, send us a message, apply to become a partner or subscribe to our letters. It does not cover other websites we link to; please read their own policies.

We collect personal information only when you give it to us, and only what each form needs:

When you use the website, we also process limited technical information needed to run and protect it:

• Your IP address, held briefly in memory to limit repeated form submissions. It is not stored with your enquiry.
• A signed, short-lived security token that shows a form was sent from our website.
• One functional cookie, ec_lang, which remembers the language you chose for up to 12 months. It is set only when you switch language.
• Images you try in the logo preview on our Custom Branding page are processed entirely in your browser and are never uploaded to us.

• To answer your enquiry and prepare the sample, proposal or information you asked for.
• To follow up on a sample request or partner application, and to manage our business relationship with you.
• To send you our letters — only if you opted in. You can unsubscribe at any time.
• To keep the website secure and to prevent spam and abuse.
• To understand, in aggregate, how the website is used so we can improve it.

We do not use your information for automated decision-making or profiling, and we never sell or rent it.

We rely on your consent, which you give by ticking the consent box before sending a form. Letters are sent only with your separate, express consent, in line with Canada’s Anti-Spam Legislation (CASL). You can withdraw your consent at any time.

If you are in the European Economic Area, the United Kingdom or Switzerland, we process your information on the basis of your consent, the steps needed before entering into a contract with you, and our legitimate interest in keeping the website secure.

We don’t use advertising cookies, social-media pixels or cross-site tracking.

Where analytics are enabled, we use a privacy-focused, cookieless service that counts visits and key actions — such as a sample request being sent — in aggregate, without identifying you. If your browser sends a Do Not Track or Global Privacy Control signal, no analytics events are sent at all.

We share personal information only with service providers who help us run the website and answer you. They must protect it and may use it only on our instructions:

• Hosting and infrastructure — to serve the website and receive form submissions.
• Email delivery — to route your enquiry to the right person on our team.
• Workflow and customer-relationship tools — where we connect our forms to them.
• Bot protection — where enabled, a verification service checks that a form is sent by a person.
• Analytics — cookieless and aggregated, as described above.

We may also disclose information where the law requires it, or to protect our rights, our customers or the public.

Some service providers may store or process information outside your province or country, including in the United States, where it may be accessible to authorities under local law. Before personal information is communicated outside Québec, we assess whether it will be adequately protected, as Law 25 requires.

We keep enquiry information only as long as we need it to answer you, to manage any relationship that follows and to meet our legal obligations. After that, we delete or anonymise it securely. If you unsubscribe from our letters, we remove your address from the mailing list promptly.

We use safeguards suited to the sensitivity of the information, including:

• Encrypted connections (HTTPS) across the whole website.
• Signed form tokens, spam traps and rate limiting on every form.
• Strict validation of everything submitted — and no file uploads through our forms.
• Access to enquiries limited to the people who need it to answer you.

No method of transmission or storage is completely secure. If a confidentiality incident presents a risk of serious harm, we will notify you and the relevant authorities as the law requires.

Depending on where you live, you can:

• Ask whether we hold personal information about you, and receive a copy.
• Ask us to correct information that is inaccurate or incomplete.
• Withdraw your consent, or unsubscribe from our letters at any time.
• Ask us to delete your information or to stop disseminating it.
• Receive your information in a structured, commonly used technological format.
• Object to or restrict certain processing (EEA, UK and Switzerland).

To make a request, write to us through our contact page. We may need to confirm your identity, and we will reply within 30 days.

If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, or your local data-protection authority.

Our website is intended for adults and businesses. We do not knowingly collect personal information from children under 14. If you believe a child has sent us information, please contact us and we will delete it.

We may update this policy as our website and services evolve. Every update is published on this page, and significant changes will be highlighted here.

Questions about privacy? Reach us through our contact page — choose “General” and mention “Privacy”, and your message will be routed to the person responsible.