Privacy Policy

1. Who we are

Illuminate Laser Clinic is a home-based laser hair removal clinic located at 6850 Newman Boulevard, Montreal, QC, H8N 0G6. You can reach us at (289) 259-8133 or [your-email@example.com].

2. The personal information we collect

We only collect information that is necessary to provide our services and communicate with you. This may include:

• Contact details. Your name, phone number and email address.
• Booking information. The service you select, the date and time of your appointment, your appointment history, and a record of any cancellations.
• Messages you send us. Through our contact form, by email, by phone or on social media.
• Health information relevant to treatment. Such as your skin type, hair colour, medications, or conditions affecting your suitability for laser treatment. We collect this in person at your appointment, on an intake and consent form. See the note below.

3. How we collect it

We collect personal information directly from you when you:

• Send a booking request through the form on our website;
• Fill out our contact form or email us;
• Call us, text us, or message us on social media;
• Attend an appointment and complete an intake or consent form.

When you book online, your appointment is stored in a database operated on our behalf by Neon, and the appointment is written into the clinic's Google Calendar so we know to expect you. Your confirmation email is sent through Resend.

4. Why we use your information

We use your personal information only for the following purposes:

• To schedule, confirm, reschedule and manage your appointments;
• To assess your suitability for treatment and deliver care safely;
• To respond to your questions and provide support;
• To send you appointment reminders and important service updates;
• To send you promotions or offers only if you have consented to receive them. You can opt out at any time;
• To meet our legal, regulatory, and health and safety obligations.

5. Consent

We collect and use your personal information with your consent. By booking an appointment, contacting us, or providing your information, you consent to the uses described in this policy. You may withdraw your consent at any time by contacting us, subject to legal or contractual limits and reasonable notice. Withdrawing consent may mean we can no longer provide certain services.

6. Who we share it with

We do not sell, rent or trade your personal information. We share it only with service providers who help us operate, and only to the extent necessary:

• Our website host, Vercel. Serves this website and processes form submissions.
• Our email provider, Resend. Delivers your booking confirmation and contact requests.
• Our database provider, Neon. Stores your booking records (name, email, phone, service and appointment time).
• Google Calendar. Confirmed appointments are written into the clinic's calendar, which means your name, phone number, email and appointment time are stored in Google Calendar. This is separate from, and additional to, the fonts and map described in section 10.
• Payment processors. To handle transactions securely, at the clinic.
• Legal or regulatory authorities. Where required by law.

Some of these providers store data outside Quebec and Canada, including in the United States. Where that is the case, we take reasonable steps to ensure your information receives a comparable level of protection.

7. How long we keep it

We keep your personal information only for as long as necessary to fulfil the purposes above, to maintain accurate treatment records, and to comply with our legal and professional obligations. When it is no longer needed, we securely destroy or anonymize it.

Booking records created through this website are deleted 24 months after the appointment date. You can ask us to delete your booking record sooner at any time, using the contact details below.

8. How we protect it

We use reasonable physical, organizational and technological measures to protect your personal information against loss, theft, and unauthorized access, use or disclosure. On this website that includes serving every page over HTTPS, restricting what our forms will accept, rate limiting submissions to deter abuse, and encrypting the credential that lets us write to the clinic's calendar. At the clinic it includes limiting access to those who need it. No method of transmission or storage is ever completely secure, but we work to protect your information at all times.

9. Your rights

Under Law 25 and PIPEDA, you have the right to:

• Access the personal information we hold about you;
• Correct information that is inaccurate or incomplete;
• Withdraw consent to our use of your information;
• Request deletion of your information, subject to legal limits;
• Request a copy of the information you provided, in a structured and commonly used technological format (data portability);
• Lodge a complaint with us, or with the Commission d'accès à l'information du Québec.

To exercise any of these rights, contact our Privacy Officer using the details below.

10. Cookies, fonts and the map

This website does not use tracking cookies, and we do not run analytics. We do not profile you, and we do not store anything on your device to follow you between visits.

Two features on this site are loaded from Google, and you should know what that means:

• Fonts. Our typefaces are served by Google Fonts. Your browser requests them from Google, which means Google receives your IP address.
• The map on our contact page is an embedded Google Map. Google receives your IP address and may set its own cookies in your browser. If you would rather not load it, you can simply avoid the map and use the address or phone number instead.

You can control or disable cookies through your browser settings. Some features may not work as intended if cookies are disabled.

11. Children's privacy

Our services are intended for adults. We do not knowingly collect personal information from individuals under the age of majority without the consent of a parent or guardian. Minors seeking treatment must be accompanied by, and consented for by, a parent or legal guardian.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The "Last updated" date at the top shows when it was last revised. We encourage you to review it periodically.

13. Contact us and our Privacy Officer

This policy is provided for general information and does not constitute legal advice. We recommend having it reviewed by a qualified legal professional before publication.