Beauty & Laser (“Beauty & Laser”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit or use our website, beautyandlaser.ca (the “Website”), including when you submit an enquiry, request an appointment or otherwise communicate with us through the Website.
Depending on the nature of the information and how it is collected, used or disclosed, our privacy practices may be subject to applicable Canadian and Ontario privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Ontario’s Personal Health Information Protection Act, 2004 (PHIPA).
This Privacy Policy does not replace any separate privacy notice, consent form or policy that may apply to clinical or treatment records.
1. Information We Collect
Information You Provide
When you voluntarily submit information through our Website, we may collect:
your name;
telephone number;
email address;
age range, where requested and provided;
the treatment or service you are interested in;
appointment or consultation information;
information contained in your message or enquiry; and
any other information you choose to provide.
We only request information that is reasonably necessary for the purpose for which it is collected.
You are not required to use our online forms. You may contact us by telephone or email instead.
Personal Health Information
If you provide information about your health, medical history, medications, allergies, medical conditions, treatment history or other information relating to your physical or mental health, that information may constitute personal health information under applicable Ontario law.
Where PHIPA applies, personal health information will be collected, used, disclosed, retained and protected in accordance with PHIPA and other applicable law.
We ask that you do not submit detailed medical or health information through a general website enquiry form unless it is specifically requested or necessary for the purpose of your enquiry.
Clinical and treatment records are maintained separately from general website enquiries and may be subject to separate privacy notices, consent requirements and retention obligations.
Information Collected Automatically
When you visit our Website, certain information may be collected automatically, including:
IP address;
browser type and version;
device type;
operating system;
pages viewed;
approximate time spent on pages;
referring website or source;
campaign or referral information;
Website usage information; and
information collected through cookies and similar technologies.
The information collected automatically depends on the technologies and services currently used on our Website.
2. How We Use Personal Information
We may use personal information to:
respond to enquiries and requests;
provide information about our services;
arrange consultations or appointments;
communicate with you about an appointment or enquiry;
maintain records of communications;
provide and administer services you request;
improve our Website, services and customer experience;
understand how visitors use our Website;
measure the effectiveness of advertising and marketing campaigns;
maintain the security and functionality of our Website;
detect, prevent or investigate fraud, misuse or security incidents; and
comply with legal, regulatory or professional obligations.
We do not use information collected through a general Website enquiry for unrelated purposes unless permitted or required by applicable law or you have provided the appropriate consent.
3. Marketing Communications
We do not use information submitted through our Website to send promotional or marketing communications unless we have the appropriate consent or another lawful basis to do so.
If you separately choose to receive marketing communications from us, we may send information about services, promotions, events or other commercial activities.
Where Canada’s Anti-Spam Legislation (CASL) applies, commercial electronic messages will be sent in accordance with CASL, including applicable requirements concerning consent, identification and unsubscribe mechanisms.
You may withdraw your consent to receive marketing communications at any time by using the unsubscribe mechanism provided in the message or by contacting us.
4. Consent
Where consent is required by applicable law, we will obtain consent for the collection, use or disclosure of personal information.
Depending on the circumstances and the applicable law, consent may be express or implied.
For example, when you voluntarily submit an enquiry through our Website, we may use the information you provide to respond to that enquiry and arrange a consultation or appointment you have requested.
Where consent is required for a particular use or disclosure, we will seek consent in a manner that is appropriate to the circumstances and will provide information reasonably necessary for you to understand the purpose of the collection, use or disclosure.
Where PHIPA applies, consent to the collection, use or disclosure of personal health information will be handled in accordance with PHIPA. PHIPA generally requires consent to be knowledgeable and related to the information and purpose involved, subject to circumstances where the law permits or requires collection, use or disclosure without consent.
You may withdraw consent where permitted by applicable law. Withdrawal of consent may not affect processing that has already occurred or information that we are legally required or permitted to retain.
5. Cookies and Similar Technologies
Our Website may use cookies and similar technologies.
Cookies are small data files stored on your device that can help websites function and provide information about how visitors use them.
We may use the following categories of cookies:
Strictly Necessary Cookies
These cookies support essential Website functionality, security and operation. Where permitted by applicable law, these cookies do not require consent.
Analytics Cookies
Analytics technologies, such as Google Analytics, may be used to understand how visitors interact with our Website, including information such as pages viewed, approximate visit duration and referral sources.
Advertising and Measurement Technologies
We may use advertising or conversion-measurement technologies, such as Google Ads, to understand whether our advertising campaigns are effective and how visitors arrive at our Website.
The specific cookies and technologies used on our Website may change from time to time.
Where consent is required for non-essential cookies or similar technologies, we will seek consent through an appropriate cookie consent mechanism.
You may also control or delete cookies through your browser settings. Disabling certain cookies may affect Website functionality.
For information about Google’s privacy practices and available controls, please refer to Google’s applicable privacy documentation.
6. Third-Party Service Providers
We may use third-party service providers to operate our Website and provide services to you.
These providers may process personal information on our behalf for purposes such as website hosting, communications, analytics, advertising measurement and appointment scheduling.
Depending on the services currently used by Beauty & Laser, these providers may include:
We may update this list as our technology providers change.
Third-party service providers are expected to use personal information only as necessary to provide services to us, subject to their contractual or other legal obligations.
We do not sell your personal information.
No mobile opt-in or text message consent will be shared with third parties or affiliates.
We do not provide your personal information to third parties for their own independent marketing purposes unless you have provided the appropriate consent or disclosure is otherwise permitted by law.
7. Information Processed Outside Canada
Some of our service providers may store or process personal information outside Canada, including in the United States.
When personal information is processed outside Canada, it may be subject to the laws of the country in which it is processed. This may include lawful access by courts, law enforcement or government authorities in accordance with applicable laws.
We take reasonable steps to select service providers and contractual arrangements appropriate to the nature of the information being processed.
8. When We May Disclose Personal Information
We may disclose personal information:
to service providers who process information on our behalf;
when you have requested or authorized the disclosure;
where necessary to provide or assist in providing services you have requested;
where required or permitted by applicable law;
in response to a valid legal process, court order, warrant or other lawful request;
where necessary to protect our legal rights or property;
to prevent, investigate or address fraud, security issues or unlawful activity; or
in other circumstances permitted or required by applicable privacy legislation.
Where PHIPA applies to personal health information, we will only collect, use or disclose that information as permitted or required by PHIPA. We will take reasonable steps to limit the information disclosed to what is reasonably necessary for the applicable purpose.
9. Retention of Personal Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, to maintain appropriate business records, to resolve disputes, to enforce agreements, or to comply with legal, regulatory or professional obligations.
Unless a longer retention period is required or permitted by law:
general Website enquiry information may be retained for approximately 24 months after your last contact with us;
marketing consent records may be retained for as long as reasonably necessary to demonstrate compliance with applicable marketing and privacy requirements; and
analytics information is retained according to the settings of the applicable analytics provider.
Clinical and treatment records are maintained separately and may be subject to different retention requirements under applicable Ontario law and professional obligations.
When personal information is no longer required, we take reasonable steps to securely delete, destroy or de-identify it.
10. Security
We take reasonable physical, technical and organizational measures appropriate to the nature of the information to protect personal information against theft, loss, unauthorized access, use, disclosure, copying, modification or disposal.
These measures may include:
restricting access to personal information to individuals who require it for legitimate business purposes;
using HTTPS and other appropriate technical safeguards;
maintaining appropriate access controls;
keeping Website software and security measures reasonably current;
using reputable service providers;
securely disposing of information when it is no longer required; and
maintaining procedures for responding to privacy and security incidents.
No method of transmission or storage is completely secure. Accordingly, we cannot guarantee absolute security of information transmitted through the Internet.
11. Privacy Breaches
If we become aware of a privacy or security incident involving personal information, we will take reasonable steps to:
contain and investigate the incident;
assess the nature and potential impact of the incident;
take appropriate steps to reduce the risk of harm;
notify affected individuals and regulators where required by applicable law; and
take reasonable steps to prevent a similar incident from occurring again.
Where PHIPA applies, we will follow applicable requirements relating to privacy breaches involving personal health information.
12. Your Privacy Rights
Depending on the applicable law and circumstances, you may have rights including:
requesting access to personal information we hold about you;
requesting correction of inaccurate or incomplete information;
withdrawing consent where permitted by law;
asking questions about our privacy practices;
requesting deletion or disposal of personal information where appropriate and where we are not required or permitted to retain it; and
making a privacy complaint.
Requests relating to clinical records or personal health information may be subject to different rights, procedures and retention requirements under Ontario’s health privacy legislation.
Under PIPEDA, organizations generally must respond to an access request within 30 days, subject to limited circumstances in which an extension is permitted by law.
Under PHIPA, individuals generally have a right to request access to and correction of their personal health information, subject to the exceptions and procedures provided by the legislation. Depending on the circumstances, a PHIPA access request may have a response period of 30 to 60 days.
Withdrawal of consent does not necessarily require us to delete information that we are legally required or permitted to retain.
13. How to Make a Privacy Request or Complaint
To make a privacy request, ask a question about our privacy practices, withdraw consent, or make a privacy complaint, please contact us:
Beauty & Laser
1286 Eastlawn Avenue
Windsor, Ontario
Canada
Email: info@beautyandlaser.ca
Phone: +1 (226) 739-3855
Please provide enough information for us to identify the information or issue involved. We may need to verify your identity before providing access to personal information.
We will investigate and respond to privacy requests and complaints within the time required by applicable law.
If you are not satisfied with our response, you may contact the appropriate privacy regulator.
For matters governed by PIPEDA, you may contact the Office of the Privacy Commissioner of Canada.
For matters involving personal health information governed by Ontario’s PHIPA, you may contact the Information and Privacy Commissioner of Ontario.
14. Photographs and Images
We may use photographs or other images of clients for purposes such as our Website, social media, promotional materials or advertising only where we have obtained appropriate consent.
Consent to the use of a client’s photograph is separate from consent to receive treatment and is not a condition of receiving treatment.
Where appropriate, photographic consent will identify the intended purposes and channels of use.
You may contact us to withdraw consent for future use of your photograph. Withdrawal will not necessarily require removal of material that has already been published or distributed where removal is impracticable or where another legal basis permits continued use.
15. Children and Minors
Our services are intended for adults.
We do not knowingly request personal information from individuals under 18 through our general Website enquiry forms.
If we learn that personal information has been submitted by a minor in circumstances where we should not have collected it, we will take reasonable steps to address the information in accordance with applicable law.
Where PHIPA applies, special rules may apply to individuals under 16 and their substitute decision-makers.
16. Third-Party Websites
Our Website may contain links to third-party websites, including social media platforms, booking services or other external websites.
This Privacy Policy applies only to information collected or processed by Beauty & Laser through our Website and services.
We are not responsible for the privacy, security or information practices of third-party websites. We encourage you to review the privacy policies of those websites before providing them with personal information.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, technology, service providers or applicable legal requirements.
The Last Updated date at the beginning of this Privacy Policy indicates when it was most recently revised.
If we make material changes, we may provide additional notice where appropriate or required by law.
18. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact:
Beauty & Laser
1286 Eastlawn Avenue
Windsor, Ontario
Canada
Privacy Officer: Beauty & Laser Management
Email: info@beautyandlaser.ca
Phone: +1 (226) 739-3855
We welcome questions about how your personal information is collected, used, disclosed and protected.