Privacy Policy

Eastern Duty Free Shops Inc. (“EASTERN DUTY FREE SHOPS INC.”, “IGL Duty Free”, “Stanstead Duty Free”, “Boutique Hors Taxes de l'Est Inc.”, “Boutique Hors Taxes IGL”, “Hors Taxes de Stanstead”, “we”, “our”, “us”) is committed to protecting the confidentiality and security of your information. This privacy policy (the “policy”) describes how we collect, use and share your personal information, and how said personal information may be consulted and corrected if necessary. This policy also explains how cookies are used on our website.

When you visit the website or create an online account (collectively referred to as the “website”), when you buy products or services on the website, when you communicate with us, and when you accept to receive emails from Eastern Duty Free Shops Inc., you are accepting the terms and conditions described herein.

This policy does not apply to third-party websites. Therefore, Eastern Duty Free Shops Inc. will not be held responsible for their privacy policies, procedures or practices.

1. Collecting Personal Information

We collect your personal information in several different ways, including when you enter your personal information on our website, when you buy products, when you create an account, when you communicate with us by telephone or email, when you post to our social media accounts, etc. Depending on the circumstances, personal information may include your first name, last name, email address, mailing address, telephone number, profile picture or password. If you choose to not share your personal information, you may not be able to access some sections to the website.

Please note that we will never ask for sensitive information (such as information about your race or ethnicity, political opinions, religious or philosophical beliefs, union membership, sexual orientation and activity, or information about your health), and we ask that you please do not share this kind of sensitive information with us.

You may have the option of accessing an account or creating one using your username and password for third-party service providers (“integrated service”), such as Facebook, or you may be able to authorize an integrated service to provide us with personal information and other data that they hold about you. By authorizing us to connect you to an integrated service, you are authorizing us to access and store your name, email address and other information which is made available to us through the integrated service, to use said information and to share it in accordance with the terms herein. To find out which information we will be able to access through the integrated service, consult your privacy settings in the integrated service and make changes if required. Please carefully read the terms of use and privacy policies of each integrated service before using their services and creating an account.

You may have to provide your credit card details in order to finalize a purchase on the website. Our policy is to redirect you to a payment processing portal hosted by a third-party payment services provider. For your protection, we do not store any credit card information once the transaction has been processed. This means that you will have to re-enter your credit card information for any future purchases. You should read our payment services provider’s privacy policy, available on their website, to find out how your information will be processed before submitting your credit card information.

We also collect data about your visit to our website. This data may include your IP address, the date, time and duration of your visit, and the webpages consulted. Like most commercial websites, our website uses cookies. Cookies are files that are installed on your computer’s hard drive or your browser that collect information such as your language preference, your browsing history, and your browser type and version, in order to optimize your visit to our website. We use cookies to compile aggregate data about website traffic and interactions, so that we can improve user experience and the tools on our website. We may also use trusted third-party services to collect this data on our behalf. Cookies cannot be used to extract your personal information. You can choose to receive a warning on your computer each time a cookie is sent or to disable cookies altogether. Disabling cookies on your browser may negatively impact your browsing experience on our website.

The legal basis for processing personal information essentially rests on the fact that processing said data is required to make the website available to users, and that said data processing is carried out in our legitimate interests, which are described in more detail in the section Using and Sharing Personal Information. We may also process personal information with your consent, which we will ask for as required.

2. Using and Sharing Personal Information

We take measures to ensure that the only employees able to access your personal information are those who are required to in order to carry out their responsibilities. We use and share your personal information for the following purposes:

  • To operate, maintain, improve and provide the website’s functions, to provide you with the information and services you request, to respond to comments and questions, and to provide support to users of the website;

  • To understand and analyze our user’s usage trends and preferences, to improve the website and to develop new products, new services and new functions;

  • To communicate with you in compliance with applicable laws;

  • And for any other purpose permitted or required by law.

When we disclose your personal information to third parties, we take reasonable steps to ensure that the rules stated herein are respected and that the third parties provide satisfactory guarantee that they can implement adequate technical and organizational measures for the protection of your information. Below we have listed our third-party service providers who are likely to process your personal information (with links to their privacy policies):

In the event of the transfer of ownership, sale, merger, liquidation, restructuring or takeover of Eastern Duty Free Shops Inc., in whole or in part, your personal information may be transferred as part of the transaction.

3. Retaining Personal Information

Your personal information may be stored and processed in any country where we have facilities or employ third-party service providers. When you use the website, you consent to the transfer of your personal information to countries that are not your country of residence. Data protection laws may differ from one country to another. When this kind of data is held outside of Canada, it is subject to the laws of the country where it is held and may have to be shared with the country’s governments, courts, law enforcement agencies and regulatory bodies, in accordance with applicable law. Nonetheless, our personal information practises will continue to be governed by this policy and, if required, we will comply with the requirements of the General Data Protection Regulation (GDPR) to provide sufficient protection when transferring personal information from a country located in the European Union or the European Economic Area to a third country.

We have established several physical, administrative and technical protection measures designed to conserve the privacy and security of the personal information we hold. However, no security measures are absolute nor fully secure. You hereby accept the responsibility for all activities conducted from your account and password on our website whether these activities are conducted by you or someone else.

We retain your personal information solely for the reasonable period required for the relevant purposes stated herein and to comply with our legal and statutory obligations. For more information regarding the retention period of your personal information, please contact us following the instructions provided in the “Contact” section.

4. Rights with Respect to Personal Information

In some circumstances and in accordance with GDPR and other applicable privacy protection laws, an individual has the following rights:

  • Access: the right to ask if we are processing data, and if we are, to ask for access to said personal information. This enables the individual to receive a copy of the personal information we hold and certain other information about them;

  • Correction: the right to request that any incomplete or incorrect personal information we hold be corrected;

  • Deletion: the right to ask us to delete or remove personal information in some circumstances. There are exceptions where we may refuse a request for deletion, for example, when personal information is required by the law or in connection with claims;

  • Restriction/limitation: the right to ask us to suspend the processing of certain personal information, for example, to establish its accuracy or the reason for its processing;

  • Transfer: the right to request the transfer of certain personal information to a third party;

  • Objection/opposition: an individual may challenge when we are processing personal information on grounds of legitimate interest (or those of a third party) or for direct marketing purposes. However, we may be entitled to continue processing data;

  • Automated decisions: the right to contest any automated decisions made where this has legal consequences or a similar significant effect, and to ask for it to be reconsidered;

  • Consent: the right to withdraw consent when we are processing personal information with consent.

An individual also has the right to file a complaint with a data protection supervisory authority, in particular in the country/province/state where you normally reside, where we are based, or where an alleged infringement of data protection law has taken place.

To exercise any of these rights, please contact us using the contact details in the “Contact” section below. Please note that we may ask you to provide proof of your identity before responding to your request. This identification information will be used solely for this purpose.

5. Updates

We may make updates to our privacy policy from time to time, consult this page regularly to keep up to date with any amendments made to this policy. In the event that the policy is amended, we will make it accessible on our website and indicate the date of the last revision, and we will comply with all applicable laws. By continuing to use the website after any amendments to the policy come into effect, you are indicating that you have read, understood and accepted the latest version of the policy.

6. Protecting Children’s Privacy

The website is not destined for children under the age of 16, and we do not knowingly collect personal information on children under the age of 16 without the consent of their parent or guardian. If you are under the age of 16, please do not use the website or access it at any time or in any manner. If we come to learn that personal information about a child under the age of 16 has been collected by the website without the verifiable consent of the child’s parent or guardian, we will take the required steps to erase said information. If you are a parent or guardian and you discover that your child under the age of 16 has provided us with their personal information, you can let us know by following the instructions in the “Contact” section and asking us to erase said information from our systems.

7. Contact

If you have any questions or comments about this policy or your personal information, if you would like to ask to access or correct your personal information, exercise your applicable rights, make a complaint or obtain information about our policies and practices regarding our service providers located outside of Canada, you can contact our privacy protection officer by mail or email at the following addresses:

Boutique Hors Taxes de l’Est Inc.

1, Autoroute 55

Stanstead (Québec) J0B 3E2

+1 (819) 876-5000

Email :

[Last updated: 2024-05-23]