Last updated: November 29, 2025
This Privacy Policy explains how Sandra McMahon, doing business as Simply Sandra Yvonne (“we,” “us,” or “our”), accesses, collects, stores, uses, and shares (“processes”) your personal information when you use our services (the “Services”), including when you:
If you have questions after reading this Privacy Policy or disagree with any part of it, please do not use our Services. You can contact us at hello@simplysandrayvonne.ca with any questions or concerns about how your data is handled.
This summary highlights the main points of our Privacy Policy. For more detail, please refer to the full sections below.
What personal information do we process?
We may process personal information that you choose to provide (like your name and email address) and certain information collected automatically when you use our Services. See 1. WHAT INFORMATION DO WE COLLECT?
Do we process sensitive personal information?
No. We do not intentionally process sensitive categories of data (such as information about health, race, sexual orientation, or religious beliefs).
Do we collect information from third parties?
No. We do not obtain your personal information from third-party sources.
How do we process your information?
We use your information to provide and administer the Services, respond to you, manage security and fraud risks, run analytics, and comply with legal obligations. See 2. HOW DO WE PROCESS YOUR INFORMATION?
In what situations and with whom do we share personal information?
We may share your information with service providers and in certain business or legal situations. See 4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
How do we keep your information safe?
We use reasonable technical and organisational measures to protect your information, but no system is completely secure. See 8. HOW DO WE KEEP YOUR INFORMATION SAFE?
What are your rights?
Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, and to lodge complaints with regulators. See 10. WHAT ARE YOUR PRIVACY RIGHTS? and 12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
How can you exercise your rights?
You can contact us directly to make a request. We will respond in accordance with applicable data protection laws. See 10. WHAT ARE YOUR PRIVACY RIGHTS? and 15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
If you want the more detailed legal explanation, keep reading below.
In Short: We collect the personal information you choose to give us.
We collect personal information that you voluntarily provide when you:
Personal Information Provided by You
The specific personal information we collect depends on how you interact with us and which Services you use. This may include:
Sensitive Information
We do not process sensitive personal information (such as information about health, race, sexual orientation, religious beliefs, or other categories considered “sensitive” under certain laws).
Payment Data
When you make purchases, we may collect information necessary to process your payment (such as card number and security code). We do not store full payment card details ourselves.
Payment data is handled by third-party payment processors:
You are responsible for ensuring that the personal information you provide is accurate and up to date, and for notifying us if your details change.
In Short: When you use our Services, certain technical and usage information is collected automatically.
When you visit or interact with our Services, we automatically collect certain information, which generally does not identify you by name but may identify your device or your approximate location. This helps us maintain security, ensure functionality, and analyse usage.
This may include:
We use cookies and similar technologies to collect some of this information.
Log and Usage Data
Our servers may automatically record:
Device Data
We may collect information about the device you use to access the Services, such as:
Location Data
We may collect location-related information, which may be:
You may be able to control whether location information is shared via your device or browser settings. If you disable location features, some parts of the Services may not function as intended.
In Short: We use your information to operate the Services, communicate with you, improve our offerings, manage security risks, and comply with laws.
We process your personal information for purposes including:
We may also process your personal information for other purposes when we have a valid legal basis to do so, as described in the next section.
In Short: We only process your personal information when we have a lawful basis to do so.
Under the GDPR and UK GDPR, we may rely on one or more of these legal bases:
We may process your information with your express or implied consent, depending on context and applicable law. You can withdraw consent at any time (see Section 10).
In some situations, Canadian law may allow us to process personal information without consent, such as when:
We may also share de-identified information for research or statistical purposes, subject to appropriate safeguards.
In Short: We share information only when necessary, and with specific third parties that help us run our business.
We may share your personal information with:
We may work with third parties who perform services on our behalf and require access to personal information to do their work, such as:
We require these third parties, by contract, to:
If we are involved in a merger, sale of assets, financing, restructuring, acquisition, or similar transaction, your information may be transferred as part of that process, where allowed by law. We will take appropriate steps to protect your information.
In Short: Yes, we may use cookies and similar technologies for security, analytics, and marketing purposes.
We may use:
These help us:
Third-party providers may also use these technologies on our website for analytics and advertising, and may use information to show you more relevant ads.
In some US states, certain uses of tracking technologies can be considered a “sale” or “sharing” of personal information for targeted advertising. Where applicable, you may have the right to opt out (see Section 12).
If we maintain a separate Cookie Notice on our website, it will provide additional detail about specific cookies and your options for managing them.
We may use Google Analytics to understand how visitors use the Services. For more information or to opt out:
In Short: Your personal information may be processed outside your country of residence.
Our servers are located in the United States and Canada, and some of our service providers may be located in other countries. This means your information may be processed in jurisdictions with different data protection laws than those in your home country.
If you are in the EEA, UK, or Switzerland, this may involve transfers to countries that are not considered to provide the same level of protection. Where required, we use safeguards such as Standard Contractual Clauses (SCCs) and other legally recognised mechanisms to help protect your information.
Where appropriate, we may provide additional detail about specific safeguards upon request.
In Short: We keep your information only as long as needed or required by law.
We retain personal information for as long as:
When we no longer have a legitimate need to process your information, we will delete or anonymise it. If that is not immediately possible (for example, in backup systems), we will securely store and isolate it until deletion is feasible.
In Short: We use appropriate security measures, but no system is completely secure.
We use reasonable technical and organisational measures to protect the personal information we process. These may include:
However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security or that unauthorised parties will never defeat our safeguards.
Any transmission of personal information is at your own risk. Where possible, you should use secure networks and devices to access the Services.
In Short: Our Services are not directed to children under 18.
We do not knowingly collect or market personal information from children under 18 (or the age of majority in your jurisdiction).
By using the Services, you confirm that:
If we become aware that we have collected information from a child without appropriate consent, we will take reasonable steps to delete that data and, if applicable, close the associated account.
If you believe a child’s data may have been collected, please contact us at hello@simplysandrayvonne.ca.
In Short: Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, and to object to some processing.
In certain regions (including the EEA, UK, Switzerland, and Canada), you may have rights such as:
If we ever rely solely on automated decision-making in a way that has significant effects on you, we will explain the logic involved and provide a way to request human review.
You may also have the right to object to some processing, especially where it is based on our legitimate interests or used for direct marketing.
We will respond to your request in line with applicable laws.
If you believe we are processing your personal information unlawfully, you may lodge a complaint with your local supervisory authority:
When we rely on consent to process your information, you can withdraw that consent at any time by contacting us (see Section 14). This does not affect the lawfulness of processing that took place before withdrawal.
You can opt out of marketing emails by:
We may still send non-marketing emails, such as purchase confirmations or important updates.
Most browsers accept cookies by default. You can usually remove or reject cookies through your browser settings. If you choose to disable cookies, some features of the Services may not work as expected.
If you have questions about your rights, email hello@simplysandrayvonne.ca.
Some web browsers and mobile operating systems offer a Do-Not-Track (DNT) setting. There is currently no widely accepted standard for how websites should respond to DNT signals, and we do not respond to DNT signals at this time.
If standards for DNT are adopted in the future and we are required to follow them, we will update this Privacy Policy accordingly.
California law requires us to tell you that, due to the lack of a standard, we do not currently recognise or respond to DNT signals.
In Short: Certain US states provide additional rights regarding personal information.
Residents of some US states (including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia) may have specific rights, such as:
These rights may be subject to exceptions and limitations under state law.
In the past twelve (12) months, we have collected the following categories of personal information (examples are illustrative):
We may also collect additional information when you:
We retain personal information for as long as necessary to provide the Services or as otherwise outlined in Section 7.
We may use technologies such as beacons, pixels, and tags, but we do not sell or share personal information for monetary value. We have not sold or shared personal information with third parties for a commercial purpose in the past 12 months.
We have disclosed Category A – Identifiers to third parties for business purposes, as described in Section 4.
Under some state laws, you may have the rights to:
Some states provide additional rights, such as:
You can exercise your rights by:
You may also authorise an agent to act on your behalf where permitted by law. We may request proof of the agent’s authority and take steps to verify your identity.
We may request information necessary to verify your identity before acting on your request. Any additional information provided will be used only for verification and security purposes.
If we cannot verify your identity, we may be unable to fulfil your request.
If we decline your request, you may have the right to appeal our decision under certain state laws. To appeal, email us at hello@simplysandrayvonne.ca. We will respond with an explanation and, where applicable, details about how to contact your state attorney general.
California residents may request information once per year, free of charge, regarding:
If you wish to make this request, please contact us using the details in Section 14.
In Short: Yes, we may update this Privacy Policy as needed.
We may update this Privacy Policy from time to time. When we do:
We encourage you to review this Privacy Policy regularly to stay informed about how we handle your personal information.
If you have questions or comments about this Privacy Policy, you can contact us:
By email:
hello@simplysandrayvonne.ca
By post:
Sandra McMahon
396 Berkshire Drive
London, Ontario N6J 3S1
Canada
Depending on where you live, you may have rights to:
These rights may be subject to limitations under applicable law.
To exercise these rights, please email hello@simplysandrayvonne.ca with the subject line “Data Request” and a clear description of what you are requesting.