Privacy Policy

Privacy Policy
Effective Date: [August 10, 2025]

1. Introduction

At Beauty Diamond MediSpa & Aesthetics ("we," "our," or "us"), we are committed to protecting the privacy of our clients and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our online booking system, or receive our services.

We operate in Alberta, Canada, and handle your information in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable to your health and treatment information, Alberta's Health Information Act (HIA).

2. Information We Collect

We may collect the following types of information:

Personal Information: Your name, email address, phone number, date of birth, billing/payment information, and other information you provide when booking or receiving treatments.

Health & Treatment Information: Medical history, treatment preferences, skin/hair concerns, and other relevant details you voluntarily provide so we can safely and effectively deliver aesthetic or wellness services.

Payment Card Information: When you pay for a service or deposit online or in-clinic, your payment card details are collected and processed by our third-party payment processor. We do not store full card numbers, CVV codes, or magnetic stripe/chip data on our own systems (see Section 5).

Technical Data: Your IP address, browser type and version, device identifiers, locale settings, access times, pages viewed, and other analytic information collected when you visit our website or interact with our online booking system.

Tracking & Cookies: We may use cookies and similar technologies to monitor usage, improve your experience, and serve you more relevant content.

3. How We Use Your Information

We use your information for the following purposes:

To schedule and manage your appointments and provide the services you request.
To process payments securely and maintain billing records.
To personalize your experience, including recommending treatments or products relevant to your needs.
To communicate with you about your appointments, treatment follow-ups, promotions, and newsletters (with your consent where required).
To operate, improve, and analyze our website, mobile booking system, marketing campaigns, and overall user/client experience.
To comply with legal obligations, protect our rights or property, and enforce our policies.

4. Information Sharing & Disclosure

We do not sell or rent your personal information to third parties. We may share your data in the following limited circumstances:

With trusted third-party service providers (such as payment processors, appointment-booking software providers, and analytics services) who assist us in delivering our services and website operations. We take reasonable steps to confirm that any service provider handling payment card or health information maintains appropriate security safeguards before we share data with them.
When required by applicable law, regulation, legal process, or governmental request.
If we believe disclosure is necessary to protect our rights, property, or the safety of clients or others, investigate fraud, or respond to a security issue.
With your explicit consent (for example, if you opt in to receive partner or promotional offers).

5. Data Security

We implement physical, electronic, and administrative safeguards designed to protect your personal, health, and payment information from unauthorized access, disclosure, alteration, or destruction. These safeguards include:

Restricting access to client and payment information to staff who need it to do their jobs.
Requiring staff to complete privacy and data-security training.
Never storing full card numbers, CVV/CVC codes, or card magnetic stripe/chip data on our internal systems — payment card data is handled through PCI DSS–compliant, encrypted payment processing.
Securely disposing of paper and electronic records containing personal or health information once they are no longer required.
Maintaining a plan to respond promptly to any suspected data security incident, including notifying affected clients and relevant authorities as required by law.

No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security of your information.

6. Your Rights & Choices

Depending on your location and applicable law, you may have certain rights regarding your information, including the right to:

Access the personal/treatment information we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion or anonymization of your information (subject to our legal and record-keeping retention obligations, including any minimum health-record retention periods under Alberta law).
Opt out of receiving marketing or promotional communications from us at any time.
Restrict or object to certain processing of your information, or request data portability where applicable.

To exercise any of these rights, please contact us using the contact details in Section 11.

7. Cookies & Tracking Technologies

Our website uses cookies and other tracking technologies to enhance your browsing experience, analyze site traffic, and deliver content tailored to your interests. You may manage or disable cookies through your browser settings; however, doing so may affect certain functionalities of the website or booking system.

8. Third-Party Links

Our website may contain links to third-party websites, apps, or services (for example, social media platforms, payment gateways, booking software). These external sites have their own privacy policies and practices, and we are not responsible for their data handling. We encourage you to review the privacy policy of each site you visit.

9. Children’s Privacy

Our services are intended for adults. We do not knowingly collect personal information from children under 18 years of age without appropriate parental or guardian consent. If we become aware that we have collected personal information from a minor without consent, we will take steps to delete that information in accordance with applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we do, we will update the "Last Updated" date above. We encourage you to periodically review this page for the latest information on our privacy practices.