Must a Quebec Online Store Publish Its Street Address?

Executive Summary

For a Quebec online store that sells to consumers, the short answer is yes: an address must be disclosed before the sale, but it must be an establishment or office address, and it need not be a home address if the merchant genuinely operates from somewhere else. Section 54.4 of the Consumer Protection Act (CPA) lists the merchant's address among the information a merchant must disclose before a distance contract is entered into ^[1], and section 1 defines that address as the place of the merchant's establishment or office, expressly excluding a post office box ^[1]. The Office de la protection du consommateur (OPC, Quebec's consumer protection office) tells merchants that a transactional site must give the "adresse géographique" of the establishment before the purchase ^[2].

The consequences of omission are concrete. A consumer may cancel within seven days after receiving the contract copy if the section 54.4 information was not properly disclosed, subject to section 54.8's later starting points for defects discovered on performance of the merchant's principal obligation or, for payment by credit card or another prescribed payment instrument, on receipt of the account statement ^[1], and the window stretches to 30 days if no copy is sent on time ^[3]. Offences under sections 54.3 to 54.7 carry fines of $1,500 to $37,500 for a natural person, and the OPC states plainly that a consumer who buys anyway could cancel ^[2].

The article's main contribution is an address-role crosswalk. The same business can legitimately hold several different addresses: the consumer-law merchant address, a Registraire des entreprises du Québec (REQ) domicile or professional address ^[4], a Canada Revenue Agency (CRA) physical address that must be where day-to-day activities take place ^[5], a CRA mailing address that can be the home or an accountant ^[5], and a returns address. An address acceptable for one role is not automatically acceptable for another. PO boxes fail the consumer-law, REQ professional and CRA physical roles ^[4].

Whether a staffed coworking or virtual-office address qualifies as an "establishment or office" is fact-specific, and none of the official sources reviewed for this report addresses it directly. Provider terms, actual use of the space, ability to receive notices, written permission for public use and parcel policy must be verified, and the OPC or Quebec counsel is the right authority to ask. The 5 October 2026 changes concern the statutory warranty of good working order ^[6], add warranty-related items to the section 54.4 list, and leave the merchant-address item untouched; the 12 September 2026 amendments in Loi 10 do not alter the address definition either ^[7]. This is decision support, not legal advice.

Introduction and Background

Quebec home-based merchants, Shopify sellers and small e-commerce teams face a recurring question: what address must a customer see before checkout, and can it be something other than the kitchen table where the business runs? The answer depends on which legal role the address plays. Quebec's CPA treats the merchant's address as a pre-sale disclosure item. The REQ treats addresses as register entries with their own privacy rules. The CRA and Revenu Québec treat addresses as tax-administration contact points. Payment processors, marketplaces and email-marketing rules add further, platform-specific requirements.

This report examines those roles one by one and then tests five common address choices against them: the home, a staffed coworking or virtual-office address, a PO box, a carrier or third-party logistics (3PL) returns centre, and an accountant's or lawyer's mailing address. It relies on official statute text, regulator pages and vendors' own help pages, all opened on 20 October 2026, and says so where official sources are silent.

A disclosure about perspective: the publisher, 2727coworking.com, is a Montreal provider of desks, private offices, meeting rooms, virtual offices and business addresses, so it is a direct provider of one option discussed below. It appears as a row in the option matrix in the same register as the other choices, without any suitability claim, and no provider's marketing claims are used as evidence.

The scope is Quebec consumer distance contracts: sales concluded online by a consumer, meaning a natural person who does not buy for business purposes. A site that sells only to other businesses sits outside that definition, although other obligations (tax, registry, platform terms) still apply. The OPC states that the distance-contract rules generally apply to purchases made in Quebec from a merchant doing business there, wherever the merchant is located ^[8]. The law version read was the legisquebec consolidation of the CPA, which carried the currency line "À jour au 12 août 2026" when retrieved on 20 October 2026. Readers should confirm the in-force text on the day they act.

What Quebec Law Means by "Address"

The statutory definition

Section 1 of the CPA defines the merchant's "address" as the place of the merchant's establishment or office indicated in the contract ^[1]. The same paragraph adds that a new establishment or office, of which the merchant later notifies the consumer, also counts, and that a post office box is excluded ^[1]. The French text uses "le lieu de son établissement ou bureau indiqué dans le contrat". Three features of this wording matter for an online store.

• Place, not mailbox: the definition points to where the merchant is established or has an office, so the test is about a real place of business rather than any location where mail can be received.
• Indicated in the contract: the address that counts is the one shown in the contract, which for a distance contract means the written contract the consumer receives.
• Updatable by notice: a later establishment becomes the relevant address when the merchant notifies the consumer, which is the legal hook for changing addresses mid-relationship.

The OPC's merchant guidance for online commerce uses slightly stronger language than the statute's "address" in section 54.4. It says that before the consumer buys, the merchant must supply a list of contact details that includes the "adresse géographique de votre établissement" ^[2]. The OPC's separate pre-contract page lists "les nom, adresse, numéro de téléphone et, s'il y a lieu, numéro de télécopieur" without the word "géographique" ^[9]. The two phrasings are compatible, and the working reading is a street-level establishment address.

Who and what is covered

A "merchant" includes any person doing business in the course of that business, which reaches a sole proprietor selling from a home. The Act applies generally to contracts between a consumer and a merchant in the course of the merchant's business. A distance contract is one concluded without the parties being in one another's presence, and it is deemed to be entered into at the consumer's address. The OPC repeats that deemed-location rule ^[10].

Some contracts are carved out by regulation. The Regulation respecting the application of the CPA lists exclusions from the distance-contract division, and the list includes contracts entered into during an auction sale. Most ordinary online stores fall inside the regime.

Bilingual terms to search and publish

Quebec merchants often need the French wording, because the OPC's merchant pages and the REQ pages cited here are in French.

• Establishment or office: "établissement ou bureau" in section 1 of the French text.
• Geographic address: "adresse géographique", the OPC's phrase for what a transactional site must show ^[2].
• Post office box: "case postale", which the REQ says cannot serve as a professional address ^[4].
• Distance contract: "contrat conclu à distance", the OPC's term for an online sale ^[10].
• Professional address and domicile: "adresse professionnelle" and "domicile", the two register choices for an individual ^[4].

What the sources do not say

No official source opened for this report states whether a home may serve as the establishment of an online merchant, whether a coworking or virtual-office address qualifies, or whether a 3PL warehouse counts. The statute's test is factual (establishment or office), and the OPC's pages reviewed define neither term further. Anyone relying on a particular arrangement should ask the OPC, which runs a merchants' line for this purpose ^[11], or Quebec counsel. A virtual-office vendor is not a neutral authority.

The Address-Role Crosswalk

The central confusion for small merchants is treating "the business address" as a single object. Table 1 separates the roles. Each row identifies the authority, the PO-box rule, who can see the address, and what triggers an update. The cells draw only on the sources named.

The table shows that the PO-box rule is the one thread that runs through most of the roles: it fails the consumer-law, REQ-professional, CRA-physical and payment-processor roles, and only some mailing-type roles (CASL) accept it. It also shows that the REQ gives individuals a privacy tool, the professional address, which operates on the register and does not by itself change what the CPA requires a consumer to be told. The REQ guide for sole proprietors separately requires listing each Quebec establishment ^[12]. The sources reviewed do not explain how a masked domicile interacts with a separately declared establishment address, so a sole proprietor who operates from home should confirm with the REQ what will be visible after registration.

Where the Disclosure Must Appear and What Must Be Kept

Before the sale

Section 54.4 requires the merchant to disclose the listed information to the consumer before the distance contract is entered into. The English text places the merchant's name first, the merchant's address second, and the telephone number, fax number if any and technological address third. The merchant must present the information prominently and in a comprehensible manner ^[1], and must give the consumer an express opportunity to accept or decline the proposal and correct errors. The OPC describes this as information that must be provided before the consumer makes the purchase ^[2]. In practice that points to the product page, cart or checkout review step rather than a footer link, although the statute names no particular page.

In the contract and the confirmation

A distance contract must be evidenced in writing and must indicate the items section 54.6 lists, and the OPC's content page restates that the contract must be in writing ^[10]. The merchant must send a copy within 15 days, in a form the consumer can easily retain and print. The OPC says the same thing in its merchant guidance ^[10]. For a Shopify store this usually means the order confirmation email or an attached PDF, with the establishment address visible in it.

What happens if it is missing

• Seven-day cancellation: the consumer may cancel within seven days after receiving the copy if the merchant did not disclose the section 54.4 information before the contract ^[1]. The seven-day period instead begins when the merchant performs the principal obligation if the consumer then discovers the disclosure defect, or, where payment was by credit card or another prescribed payment instrument, when the consumer receives the account statement and then discovers the defect.
• Thirty-day extension: where no copy was sent in time, the consumer has 30 days from the contract date ^[1].
• Refund clock: after cancellation, the merchant must refund within 15 days ^[1].
• Offence provisions: section 277 lists sections 54.3 to 54.7 among those whose breach is an offence, with fines of $1,500 to $37,500 for a natural person ^[1] and a fine starting at $3,000 in any other case, doubled for a repeat offence.
• Advertising rule: section 243 separately bars giving a post office box as an address in an advertisement without also giving the merchant's address ^[1].

The OPC's own summary is simple: a merchant that omits required contact details risks the consumer buying anyway and then having the option to cancel ^[2]. It adds that missing, unclear or buried information can also allow cancellation ^[2]. Cancellation rights are the practical pressure on a small store, alongside the fines.

Testing Common Address Choices

Table 2 tests five choices against the roles that matter most to a Quebec online store. "Yes" means the sources reviewed support it for that role if facts hold; "No" means a reviewed source excludes it; "Verify" means the sources are silent or the answer turns on facts of the arrangement. None of the "Verify" cells can be resolved by this article.

No single choice is a clean "Yes" across all roles, so most merchants need a combination, for example a real office or the home for the consumer-law and CRA physical roles, an accountant for CRA mail, and a 3PL for returns. The strongest negatives are in the PO box row, where three separate authorities exclude it. The staffed virtual-office row is the most consequential "Verify": the same agreement that makes an address attractive (shared, staffed, mail-handling) is what raises the question of whether the merchant has an establishment or office there at all. Authorities answer differently: Google describes a rented mailing address where the business does not operate as ineligible for a Business Profile ^[25], a rule that says nothing about the CPA.

Notes on each option

Home. Publishing it is the privacy cost. Section 3.1 of Quebec's private-sector privacy Act requires only the title and contact information of the person in charge of personal information to be published on the website ^[26], not a home address. The CAI (Commission d'accès à l'information) confirms that the Act's enterprise concept covers the self-employed sole proprietorship ^[27]. The Act also excludes from some rules the work-place address and contact details of a person acting within an enterprise ^[26], but no source reviewed says whether a sole proprietor's home counts as a "place of work" under that wording, so the exclusion should not be relied on to treat a home address as freely publishable.

Staffed virtual office or coworking. The REQ professional address and the CPA address test both ask where the person works or the merchant is established. A private office or desk membership used regularly may support the argument; a mailbox-only plan is a weaker fit. Keep the agreement, the occupancy facts and any OPC or counsel opinion on file.

PO box. Canada Post rents boxes from its small-business page at "as low as $69 for 3 months" ^[28], and its January 2026 price list shows a small urban-core box at $82, $146 or $214 for 3, 6 or 12 months ^[29]. That is a mail solution, not a disclosure solution.

Implementation: Privacy-Safe Checklist and Provider Due Diligence

Website placement checklist

• Product or cart page: show name, establishment address, telephone number and email or technological address before the buyer commits, in line with section 54.4.
• Checkout review step: repeat the same block next to the accept button, since the consumer must have an express opportunity to accept or decline ^[1].
• Footer and contact page: keep the same address text everywhere; Shopify says contact information needs to be public-facing and easy to access ^[24] and customers can view the store address on the store and policy pages ^[19].
• Confirmation email: include the address and the section 54.4 information in the contract copy that must be sent within 15 days ^[1].
• Privacy policy page: publish a plain-language policy when collecting personal information by technological means, and publish the title and contact details of the person in charge ^[30].
• Email footers: Shopify includes the store address in email footers by default ^[31], so a different CASL mailing address needs a deliberate setting.
• Returns page: state the return address separately from the merchant address, and say which one the buyer should use.

Privacy-safe choices for a home-based merchant

1. Decide the role first. If the home is the actual establishment, the law's wording points to disclosing it; if the business is genuinely run from an office, that office is the address.
2. Use the REQ professional address for the register. An individual's domicile is mandatory in registration ^[4], but a professional address can be declared in its place, and the domicile then cannot be consulted ^[13]. A person can have only one ^[4].
3. Ask for safety-based non-publication where it applies. A person can ask the Registrar to withhold personal information where publication poses a serious threat to their safety ^[4].
4. Separate mail from place. Use an accountant or other agreed address for CRA mail and a returns point for parcels.

Provider due diligence scorecard

Table 3 lists what to request from any provider of an address, including coworking operators. It contains no fees; ask each provider for current pricing in writing.

Any "concern" in the first four rows is a reason to pause before publishing the address.

Address-change cost worksheet

The worksheet below lists cost lines without inventing amounts. Fill each from a written quote or official fee page.

• Provider fees: setup, monthly, mail forwarding, parcel handling, termination (ask the provider).
• REQ update: a routine update declaration carries no fee ^[33] and has a 30-day deadline ^[33]; priority processing is separate.
• Tax files: report the change to Revenu Québec after a REQ change ^[16] and to the CRA as soon as possible.
• Platform and processor: edit the Shopify store address; note it does not alter the billing address ^[22]; budget time for processor re-verification.
• Packaging and labels: reprint return labels, inserts and invoices; Canada Post notes that undeliverable parcels return to the shipper's label address and that return fees fall to the shipper ^[34].
• Customer notices: notify consumers of a new establishment, which is the mechanism in section 1.

Scenario decision tree

• Service-only seller (no stock): establish where you actually work. If at home and you do not want it public, decide whether a genuine office arrangement exists; if it does, document it and verify with the OPC.
• Stocked goods: the stock location is a separate question from the merchant address. Keep the pre-sale address on the establishment and the returns address on the depot.
• Third-party fulfilment: the 3PL ships and receives returns; the merchant address remains the merchant's own establishment, and the 3PL address appears only where the returns policy needs it.

Data Analysis and Evidence

The evidence is mostly legal, but market and regulator figures show the scale of the question.

Market scale. Statistics Canada reported retail e-commerce of $73.7 billion in 2024 within total retail operating revenue of $865.2 billion ^[35], which implies roughly 8.5% by simple division (this ratio is the analyst's calculation, not a published Statistics Canada share). Quebec accounted for 22.3% of Canadian retail operating revenue, second to Ontario's 37.7% ^[35]. Monthly seasonally adjusted series use a different basis: e-commerce was 6.1% of retail trade in December 2025 ^[36], 6.8% in May 2026 ^[37] and 7.5% in July 2026 ^[38]. The annual and monthly series should not be compared directly. On the business side, 32% of Canadian businesses with five or more employees reported receiving e-commerce orders in the 2023 reference year ^[39].

Quebec shoppers. The Académie de la transformation numérique's NETendances 2025 report, whose respondents included non-internet users added from its annual telephone survey ^[40], found online purchasing rising from 74% in 2024 to 82% in 2025 ^[41]. It also reported that 55% of online shoppers had bought from Quebec merchants ^[41].

Small-business base. Innovation, Science and Economic Development Canada counted 228,622 small employer businesses in Quebec as of December 2024, behind Ontario's 410,154 ^[42]. These counts exclude businesses without paid employees, including home-based sellers without employees ^[43]. They do not measure the population of online merchants affected by the address-disclosure question.

Regulator workload. The OPC's 2024-25 annual report records 74,142 information requests ^[44] and 29,589 complaints ^[44]. The report does not break out distance contracts, so no figure can be attributed to address disclosure.

Statutory consequence figures. The relevant fine range is $1,500 to $37,500 for a natural person under section 277 ^[1]. The ordinary cancellation window is seven days after receiving the contract copy ^[1] and 30 days if no copy was sent ^[1]. The seven-day period instead begins when the merchant performs the principal obligation if the consumer then discovers the disclosure defect, or, where payment was by credit card or another prescribed payment instrument, when the consumer receives the account statement and then discovers the defect. The refund deadline is 15 days ^[1].

Cost anchors. The REQ routine update declaration has no fee ^[33]. Small-supplier status for GST/HST and QST purposes ^[45] does not remove the consumer-law address duty, which attaches to the contract rather than to tax registration.

Two limits apply. No Quebec-specific retail e-commerce sales figure was found in the sources opened, and no source quantifies how many Quebec online stores publish a street address. Search-volume data for this question were unavailable, so demand is treated as unquantified rather than absent.

Case Studies and Real-World Examples

The three scenarios below are illustrative and describe no real merchant.

Solo service seller (Hypothetical Example)

A consultant in Laval sells fixed-price online workshops to individuals and works from a spare room. The workshops are sold through a website, so the sale is a consumer distance contract. The consultant first checks whether the home is the establishment indicated in the contract. If the room is the real place of work, the statutory wording points to disclosing it. If the consultant instead holds a genuine office or desk arrangement used for client work, the consultant can show that address after confirming with the OPC. Either way, the REQ domicile can be shielded with a professional address, the CRA mailing address can go to an accountant, and section 3.1 requires publication of the privacy officer's title and contact details without expressly specifying a street address ^[26]. Separately, if the business collects personal information through technological means, section 8.2 requires a substantive confidentiality policy in clear and simple language describing its personal-information practices, including collection methods and purposes ^[46]. Officer contact details alone do not satisfy that separate policy obligation.

Inventory-light Shopify merchant (Hypothetical Example)

A merchant sells printed goods made to order by a local printer and shipped from the printer. The merchant works from home and wants to keep it private. The Shopify store address is customer-facing and visible on store and policy pages, and Shopify's own terms ask for a physical business address in contact information ^[24]. Shopify Payments for Canada wants a physical business address that matches the registry and no PO box. The checks are where the establishment really is, whether a rented office meets the establishment test, whether the processor accepts the suite, and whether returns go to the printer or a depot. Table 2 suggests the office route only after written verification.

Marketplace seller using FBA or a 3PL (Hypothetical Example)

A seller lists goods on a marketplace and also runs an own-brand website, using a fulfilment centre for stock and returns. As an Amazon.com example, Amazon's announcement said that it would display sellers' business names and addresses on their Amazon.com Seller Profile pages beginning on 1 September 2020 ^[47]. Check the applicable marketplace's current country-specific policy before choosing an address. As a practical check, reconcile marketplace, own-site and registry details by address role, documenting legitimate differences rather than assuming every address must be identical. The fulfilment centre is the returns point, but this report found no official source that treats it as the merchant's establishment. The own-site must still disclose the merchant's address under section 54.4, and a PO box would not qualify.

October 2026 Update Box

Verify before you rely on it. Two 2026 changes sit near the distance-contract rules, and neither changes the address definition on the sources reviewed.

• 5 October 2026, warranty of good working order. Décret 1459-2025 of 3 December 2025 enacted a regulation amending the Regulation respecting the application of the CPA ^[6], and it enters into force on 5 October ^[6]. Law-firm summaries confirm the 5 October 2026 date ^[48]. The OPC says the warranty applies automatically to covered goods bought or leased from that date ^[49].
• Section 54.4 list. The legisquebec text carries "In force: 2026-10-05" markers and shows a new item on the duration of the warranty of good working order ^[1]. The OPC adds that merchants of goods that may need maintenance must indicate availability of spare parts, repair services and information ^[49]; the OPC's pre-contract page flags these additional disclosures for sellers of appliances, electronics and similar goods ^[9]. The address item is not among the marked changes.
• 12 September 2026, Loi 10. The bill was assented on 12 June 2026 ^[50] and takes effect on 12 September 2026 subject to exceptions ^[50]. Its only touch on section 54.4 is an insertion into paragraph d.1 ^[7]. It adds an online cancellation button for successive-performance contracts concluded online ^[49] and a price-display rule for remote services ^[7].

Consequently, a store should add the new warranty fields to its pre-checkout block if it sells covered goods, and should leave its address logic unchanged. The consolidation read was current to 12 August 2026, so later amendments should be checked.

Frequently Asked Questions (FAQs)

Does a Quebec online store have to publish its street address?

For sales to consumers, the merchant's address must be disclosed before a distance contract ^[2], and that address is an establishment or office, not a PO box. The OPC describes it as the geographic address of the establishment ^[2].

What is the Quebec online store business address requirement for B2B-only sites?

The CPA protects consumers, defined as natural persons who do not buy for business purposes ^[1]. A site that sells only to businesses sits outside that definition, though tax, registry and platform rules still apply.

What legal notices should an ecommerce website in Quebec carry?

At minimum, the section 54.4 information before the sale, the written contract copy within 15 days ^[10], a privacy policy in plain language ^[26], the privacy-officer contact details ^[30], and, for email marketing, a valid mailing address ^[17].

Can I use a virtual office address for my online store in Quebec?

Possibly, but only after verification. The test is whether the address is the merchant's establishment or office ^[1], and the sources reviewed do not decide that for virtual offices. A mailbox-only arrangement is a weak fit; a real office used for the business may fit better. Ask the OPC or counsel, and get the provider's public-use and mail terms in writing.

Can a home-based seller hide the home address?

Not by simply omitting it if the home is the establishment. The REQ offers a professional address on the register ^[4], and a PO box does not qualify ^[4]. Whether the home can be replaced on the website depends on whether a genuine office exists.

Does a REQ professional address protect my privacy on the register?

It replaces the domicile for consultation ^[13], but only one professional address is allowed per person ^[4] and it must be updated if it becomes invalid, else the home address is published ^[4].

Does Law 25 force me to publish my address?

No source reviewed says so. It requires publishing the privacy officer's title and contact details ^[30] and a privacy policy. Law 25's obligations were phased in from September 2022 ^[51] to September 2024 ^[52].

Is a virtual office address for ecommerce in Montreal acceptable to Google, Stripe and Shopify?

Each answers differently. Google Business Profile treats a virtual office as ineligible ^[25]; Google Merchant Center asks only for at least one contact element such as a business address ^[53]; Stripe checks addresses against registries and rejects PO boxes ^[21].

Implications and Future Directions

Three implications follow. First, merchants should treat address decisions as role-based and document each role separately, because the REQ, the CRA, the OPC, processors and platforms apply different tests. Second, the main unsettled question, whether a coworking or virtual-office address is an "establishment or office" for the CPA, will likely stay fact-specific. Until an official interpretation or published decision addresses it, merchants should seek written guidance from the OPC, whose merchants' line exists to help businesses comply ^[11]. Third, the 2026 reforms show a regulatory direction toward more disclosure, not less, on distance contracts: the warranty items and the Loi 10 cancellation button ^[49].

For providers, the practical implication is transparency. Written statements on public-use permission, entity count, registered mail and parcel handling reduce the verification burden on merchants. For merchants, the practical implication is to test any new address against each role before printing it on labels or registering it, since changes ripple across the REQ ^[33], tax files and platforms.

Conclusion

A Quebec online store selling to consumers must disclose its merchant's address before the sale, and that address is an establishment or office, never a PO box. The obligation sits in sections 1 and 54.4 of the Consumer Protection Act, and its enforcement mechanism is the consumer's right to cancel together with offence provisions. The same business can use different addresses for different roles: a REQ professional address to protect a home address on the register, an accountant for CRA mail, a depot for returns, and a platform address that must match processor checks. Which address satisfies the consumer-law role is a factual question that official sources reviewed do not resolve for homes, virtual offices or 3PL warehouses.

The sensible path is sequential: identify where the business actually operates, choose the address for each role, collect written provider terms, verify the consumer-law question with the OPC or Quebec counsel, and implement one consistent pre-checkout block. This report is decision support, not legal advice. Official contacts: the OPC for merchants, the REQ via Quebec.ca, and the CRA address page ^[5]. Consult a Quebec lawyer for the consumer-law question and an accountant for tax-address consequences.