Privacy policy

Updated: November 2nd, 2026 Privacy and confidentiality are a fundamental concern for DECATHLON CANADA INC. and its related entities, notably the DECATHLON GROUP* (hereinafter "DECATHLON", "we", "us", or "our"). This is why we are committed to continuously re-evaluating our practices to keep them up to date and to implement effective control and governance measures aimed at protecting the personal information we hold about you. Furthermore, we formally commit to never sell or rent your personal information. DECATHLON GROUP includes DECATHLON SE and its related entities such as the companies and subsidiaries owned directly or indirectly by it, including DECATHLON CANADA INC.

This Privacy Policy (the "Policy") transparently explains how we collect, use, communicate, retain, and protect your personal information when you use our website www.decathlon.ca or its affiliated websites in Canada (the "Websites"), our mobile applications, our connected devices, when you communicate with us by phone, answer our surveys, participate in our contests, draws, or events, purchase our products, or use our services (collectively, the "Products and Services"), whether online or physically in our stores. It also describes the categories of personal information collected, the specific purposes for which it is collected, the rights you have under applicable laws (notably the right of access, rectification, portability, de-indexing, and deletion), as well as the means made available to you to contact us.

The Policy and DECATHLON's processing of your personal information are subject to applicable Canadian and provincial laws, notably Quebec's Act respecting the protection of personal information in the private sector, Canada's Personal Information Protection and Electronic Documents Act, as well as the European Union's General Data Protection Regulation where applicable

By accessing our Websites or using our Products and Services, online or in-store, you consent to the collection, use, and communication of your personal information in accordance with the Policy. Your consent must be clear, free, informed, and given for specific purposes. For any sensitive personal information (such as banking or biometric data), your express consent will be requested. Default privacy settings When you use our technological products or services (such as our Website or mobile applications) that have privacy settings, DECATHLON ensures that, by default, these settings guarantee the highest level of privacy, without any intervention on your part. Optional features requiring the collection of additional data are only activated if you choose to activate them voluntarily (with the exception of connection cookies strictly necessary for the operation of the site). If you do not agree with this Policy, we invite you to refrain from using our Websites or our Products and Services. Please note that the collection of certain information is mandatory to execute a contract or provide you with a requested service (for example, home delivery or equipment repair).

This Policy applies to any natural person who communicates or interacts with us, whether they are customers, visitors to our Websites, our stores, our warehouses, or our event sites. Our employees, consultants, and job applicants are subject to a separate internal privacy policy. Protection of information concerning minors In accordance with applicable laws, we never knowingly collect personal information from children under 14 years of age without having obtained prior consent from the holder of parental authority or the tutor, except when the collection is clearly for the minor's benefit. If we discover that we have collected data on a child under 14 without this consent, we will delete it immediately.

Personal information is any information concerning a natural person that allows them, directly or indirectly, to be identified (for example, your name, email address, phone number, purchase history, or IP address). Business contact information (name, title, business address, work email, and work phone of an employee within a company) is not subject to the same consent restrictions. Furthermore, information that is irreversibly anonymized according to recognized best practices is no longer considered personal information.

We only collect personal information that is strictly necessary for the purposes determined before collection. It is collected primarily from you, or from authorized third parties: Information provided voluntarily: When you create a DECATHLON account, place an order, participate in a contest, a survey, or an event, or when you communicate with our customer service (name, email, shipping and billing address, phone, date of birth, payment information). Information collected automatically: During your visits to our Websites (IP address, browser type, pages viewed, date and time of access, operating system). Video and telephone recordings: For security and theft prevention reasons, our stores and warehouses are equipped with video surveillance cameras (images kept on average 30 days). Our customer service phone conversations may be recorded for quality and training purposes, after prior notice. Identification, geolocation, and profiling technologies: If we use technologies allowing you to be identified, located (for example via access to the in-store WiFi network or your MAC address), or to profile your preferences and behaviors, we will inform you beforehand. These features are deactivated by default. We provide you with clear means for voluntary activations.

Your personal information is used for the following legitimate and specific purposes: Order execution and services To create and manage your member account, process and deliver your orders, manage returns and refunds, process payments, and provide after-sales service. Operational and security communications To send you order confirmations, product recall notices, security updates, and to ensure fraud detection. Marketing and electronic communications With your consent, to send you newsletters, promotions, and event invitations. You can unsubscribe at any time. Transparency on decisions based exclusively on automated processing If DECATHLON uses your personal information to render a decision based exclusively on automated processing (by algorithm or artificial intelligence, without human intervention), we will inform you no later than at the time the decision is communicated. You will have the right to know the information used, the main reasons and parameters of the decision, and to submit your observations to a member of our staff who is able to review it.

We only share your personal information with authorized third parties and within the limits of the law. DECATHLON GROUP entities For the centralized management of member files, product improvement, and statistical analysis, subject to equivalent protection guarantees. Partners, service providers, and agents (authorized third parties) Our service providers and agents in payment processing, delivery, cloud hosting, data analysis, and IT support. These third parties are bound by strict written contracts requiring them to preserve confidentiality, use the data only for the entrusted mandate, destroy it at the end of the contract, and notify us without delay of any security incident. Our partners are also bound by strict contracts obliging them to respect the confidentiality of your personal information. Business transactions In the context of a merger, sale of assets, or business reorganization, subject to a confidentiality commitment in accordance with the law. Categories of personnel with access to data Within DECATHLON, access to your personal information is strictly limited to employees and roles that need it in the performance of their duties (notably the customer service team, logistics and delivery team, IT and security department, and marketing team).

Your personal information may be communicated or hosted outside Quebec (in other Canadian provinces or in the European Union). Privacy Impact Assessment (PIA) In accordance with the requirements of applicable laws, before communicating your personal information outside Quebec (in other Canadian provinces or in the European Union), DECATHLON conducts a PIA beforehand. This assessment takes into account the sensitivity of the personal information, the intended purposes, the contractual protection measures, and the legal regime of the receiving jurisdiction. The communication is only carried out if the assessment demonstrates that the personal information will benefit from adequate protection and is subject to a written contract providing for risk mitigation measures.

DECATHLON applies rigorous physical, organizational, and technological security measures to protect your personal information against loss, theft, unauthorized access, or disclosure: Strict access controls and data encryption in transit and at rest. Appointment of a Privacy Officer. Continuous employee training on information security. Privacy incident management: We keep a register of privacy incidents. If an incident presenting a risk of serious injury occurs, DECATHLON will diligently notify the Canadian government authorities, including the Commission d'accès à l'information du Québec, as well as the individuals concerned.

Under applicable laws, you have the following rights: Right of access and information: to confirm the existence of your information and to obtain communication of it. Right of rectification: to require the correction of any inaccurate, incomplete, or ambiguous information. Right to data portability: you have the right to require that computerized personal information, which you have provided to us yourself, be communicated to you in the form of a written and intelligible transcript, in a structured and commonly used technological format. You can also request that this information be transmitted directly to a third party authorized by law. Right to deletion and withdrawal of consent: to request the deletion of outdated or unjustified data, or to withdraw your consent at any time. Right to de-indexing (right to be forgotten): to require the cessation of the dissemination of your information or the de-indexing of any hyperlink attached to your name if the dissemination causes serious prejudice to your reputation or privacy. Terms of exercise Any request must be sent in writing to the Privacy Officer. Access is free (reasonable reproduction fees may apply upon prior notice). We will respond within a maximum of 30 days.

We only retain your personal information for the time necessary to fulfill the purposes for which it was collected, or in accordance with legal retention periods. When the purposes are fulfilled, DECATHLON securely destroys the information or proceeds to anonymize it to use it for serious and legitimate purposes (applying regulatory criteria making re-identification irreversibly impossible).

We may update this Policy to reflect changes in laws and our practices. Any significant modification will be posted on our Websites with its revision date.

To exercise your rights, to ask questions, or to file a complaint regarding our management of your personal information, you can contact our Privacy Officer: Office of the Privacy Officer Decathlon Canada Inc. 5781 Notre-Dame East Street, Montreal, Quebec, H1N 2C6 Email: privacy@decathlon.ca By phone (Monday to Friday from 10 am to 6 pm EST) to our customer service at: 1 (844) 533-3322