Privacy Policy

Canada Facials (“Canada Facials”, “we”, “us”, “our”) operates the website canadafacials.ca as an online-only service in Canada. We do not operate a public physical office. Our designated Privacy Officer can be reached by email at help@canadafacials.ca.

This policy explains what personal information we collect, why we collect it, how we use and share it, and your rights under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector(Law 25).

We collect only what we need to run the service:

• Location data — the postal code, city or approximate coordinates you provide (or that your browser shares when you tap “use my location”) so we can match you with nearby clinics.
• Account & contact info — if you sign in or contact us: email address, name, and any message content.
• Order & cart info — items you add to your cart, deals you click, and any orders you place through our Shopify storefront.
• Technical & analytics data — IP address, device type, browser, pages viewed, referrer, approximate geolocation derived from IP, and basic interaction events. We use this to keep the site fast, secure, and to improve content.
• Cookies & local storage — small files used for session state, your cart, and aggregate analytics.

We do not knowingly collect personal information from children under 14. We do not collect medical records, health information, or sensitive identifiers (SIN, driver's licence, etc.).

• Match you with relevant facial clinics and treatments.
• Process and fulfill online deals or product orders.
• Respond to your questions and provide customer support.
• Send service-related emails (order confirmations, booking updates). Marketing emails are sent only with your consent and you can unsubscribe at any time.
• Detect, prevent and investigate fraud or abuse.
• Improve our content, search results, and site performance.
• Comply with legal obligations.

In Canada we rely on your consent to collect, use, and disclose your personal information. Consent may be express (e.g. you submit a form, you tap “use my location”) or implied where it is reasonable in context (e.g. browsing the site means you accept basic analytics cookies). You can withdraw consent at any time, subject to legal or contractual restrictions, by emailing help@canadafacials.ca.

We never sell your personal information. We share it only with service providers who help us operate the site, under contracts that require them to protect it:

• Hosting & database: Supabase / Lovable Cloud (data stored in Canadian/North-American regions where available).
• Search & mapping: Google Maps Platform (Places, Geocoding) — used to look up clinics you ask about.
• Online store & payments: Shopify, Inc. Payments are processed by Shopify Payments or the third-party gateway you choose at checkout. We never see or store your full card number.
• Email delivery: transactional email providers used to send order and account messages.
• Analytics & error monitoring: privacy- respecting analytics and crash reporting to keep the site stable.

Some of these providers are located outside Canada (notably the United States). When that's the case, your information may be subject to the laws of those jurisdictions, including lawful access by foreign authorities. We choose providers that offer industry-standard safeguards.

We may also disclose information if required by law, valid legal process, or to protect the rights, property or safety of Canada Facials, our users, or others.

We use cookies and similar technologies for essential site functionality (session, cart) and for aggregate analytics. You can disable cookies in your browser settings, but parts of the site (such as your cart) may stop working. We do not currently respond to “Do Not Track” signals, but we do not build cross-site advertising profiles.

Consent log. When you accept, reject, or customise your cookie preferences, we record an audit entry containing your chosen categories, the policy version in effect, the date and time, your IP address and browser user agent, and a browser-scoped anonymous ID. This lets us demonstrate compliance and re-ask for your consent if our policy changes materially. The log is restricted to our administrators and is never used for advertising.

We retain personal information only as long as needed for the purposes described above, or as required by law (for example, tax records for order history). Anonymous analytics may be retained longer in aggregated form.

We use technical and organizational measures appropriate to the sensitivity of the data — encryption in transit (HTTPS), encryption at rest with our infrastructure providers, role-based access controls, and Row-Level Security on our database. No system is 100% secure, but we work to keep risks low.

You have the right to:

• Access the personal information we hold about you.
• Ask us to correct information that is inaccurate or out of date.
• Withdraw consent to specific uses of your information.
• Request deletion of your account and associated data.
• Quebec residents (Law 25): request data portability and obtain information about any automated decision-making that produces effects concerning you.

To exercise any of these rights, email help@canadafacials.ca. We will respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada or, for Quebec residents, the Commission d'accès à l'information du Québec.

The site links to third-party clinics, articles, and stores. We are not responsible for the privacy practices of those sites — please review their own policies.

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be highlighted on the site.

Privacy Officer, Canada Facials — help@canadafacials.ca