Skip to content
Security & Privacy

Privacy Policy

NEX MX site, operated by 9241-5025 Québec inc.

Last updated: October 27, 2026

1. Who we are

The website nexmx.com (NEX MX site) is operated by 9241-5025 Québec inc. We sell vintage motocross parts, new or used, in Canada only.

This policy explains what personal information we collect, why, who we share it with, how long we keep it, and how to exercise your rights. It follows Québec’s Act respecting the protection of personal information in the private sector.

2. Person responsible for the protection of personal information

The person responsible for the protection of personal information is the President of 9241-5025 Québec inc. You can reach them at info@nexmx.com with any question about this policy or to exercise your rights.

3. What we collect and why

We collect your information with your consent, or where the law allows it, for example to fulfil your order.

When you place an order: your name, delivery and billing address, email, phone number and the contents of your order. We use them to process and ship the order, invoice it, contact you about it and meet our legal and tax obligations.

If you create an account: the information above and your login credentials. We use them to manage your account and your orders.

When you pay: payment is processed by PayPal. We do not keep your card number. We receive confirmation of the payment.

When you write to us through the contact form: your name, email, subject and message. We use them to reply to you.

For site security: your IP address and login attempts, recorded by our security plugin, to detect and block attacks. This data may be shared with security services that help spot attacks.

4. Who we share it with

We do not sell your information. We share it only as needed for the purposes described, with the following recipients.

  • PayPal, for payment.
  • Canada Post, which receives your delivery address to calculate rates, then your name and address to ship your order.
  • Google, through the reCAPTCHA service that protects the contact form. Google receives technical data about your device and your browsing on that page, to tell humans from robots. This service is loaded only on the Contact page.
  • Automattic (WooCommerce and Jetpack), to calculate taxes automatically from your delivery address, in the cart and at checkout, and to protect against malicious login attempts, which uses IP addresses.
  • Wordfence, our security plugin, whose publisher is American and which may receive information about blocked attacks, including IP addresses.
  • Our technical providers: hosting, image delivery, shopping cart and security. They receive the technical data their service needs, such as your IP address.
  • A public authority, if the law requires it.

Some of these providers may process or store information outside Québec, including in the rest of Canada, in Europe and in the United States.

5. Cookies and tracking technologies

This site uses only cookies needed for it to work: the cart, the session, security and language choice. The site itself uses no audience measurement, marketing or advertising cookies.

At checkout, PayPal loads its own scripts and may set its own cookies, under its own privacy policy.

On the Contact page, Google’s reCAPTCHA service sets a security cookie, on Google’s own domain, that is used to tell humans from robots. It lasts about six months.

6. How long we keep it

  • Orders and invoices: six years after the end of the tax year concerned, as tax laws require.
  • Customer account: as long as the account is active. We delete it on request, or after three years of inactivity.
  • Contact form messages: 24 months after the last exchange.
  • Security logs: up to 30 days.

After that, we destroy the information or make it anonymous.

7. Your rights

By writing to info@nexmx.com, you can:

  • ask for access to the information we hold about you;
  • ask for it to be corrected;
  • withdraw your consent to its use or disclosure;
  • ask for it to be given to you in a structured, commonly used technological format.

We reply within 30 days of receiving your request. We may ask you to confirm your identity. If our reply does not satisfy you, you can file a complaint with the Commission d’accès à l’information du Québec.

8. Security

We take reasonable measures to protect your information, including encryption of the site’s communications and a security plugin. If a confidentiality incident presents a risk of serious harm, we notify the Commission d’accès à l’information and the people concerned.

9. Minors

The site is not intended for people under 14. We do not knowingly collect their information without the consent of the person with parental authority.

10. Changes

We may change this policy. The date of the last update appears at the top of the page. We announce significant changes on the site.