PRIVACY POLICY

At Sunshine Cosmetic Clinic & Medi Spa, your privacy is important to us. We are committed to protecting the personal information and health-related information you provide to us when you visit our clinic, use our website, book an appointment, purchase products or services, join our membership program, or communicate with our team.

This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have regarding your personal information.

Collection of Personal Information

We only collect personal information that is reasonably necessary for us to provide our services, treatments, products, client support, and business operations.

The types of personal information we may collect include:

• Your name, phone number, email address, mailing address, and date of birth
• Appointment booking details and service history
• Medical history, treatment consent forms, intake forms, allergies, medications, and other health-related information relevant to your treatment
• Before-and-after photos, treatment photos, or videos, where applicable and with appropriate consent
• Payment information, purchase history, invoices, gift card records, prepaid package records, and membership details
• Information related to financing applications or payment plans, where applicable
• Website usage information, such as IP address, browser type, device information, pages visited, and general analytics data
• Communication preferences, including email, SMS, phone, and marketing subscription choices
• Video surveillance footage collected for safety and security purposes

We collect personal information directly from you when you fill out forms, book appointments, purchase products or services, communicate with us, visit our clinic, subscribe to our promotions, or use our website.

Use of Personal Information

We may use your personal information for the following purposes:

• To book, confirm, reschedule, and manage appointments
• To provide consultations, treatments, services, and follow-up care
• To personalize treatment recommendations and skincare plans
• To review your medical history and determine treatment suitability
• To verify your identity
• To process payments, invoices, refunds, gift cards, prepaid packages, memberships, and financing-related requests
• To maintain client records, consent forms, treatment history, and before-and-after documentation
• To communicate with you regarding appointments, treatment reminders, follow-ups, clinic updates, and client service matters
• To send newsletters, promotions, special offers, or marketing messages only where permitted by law and where you have provided consent or where we otherwise have a lawful basis to do so
• To manage our website, improve user experience, monitor website performance, and understand how visitors interact with our content
• To maintain the safety and security of our clients, employees, property, equipment, products, and premises through video surveillance
• To comply with legal, regulatory, insurance, professional, and business recordkeeping requirements

Health Information and Treatment Records

Because we provide medical aesthetic, wellness, and related services, some of the information we collect may include health-related information. This may include medical history, allergies, medications, treatment suitability, consent forms, clinical notes, treatment records, photos, and follow-up information.

We use this information only for appropriate purposes, including treatment planning, safety screening, client care, documentation, follow-up, and compliance with applicable professional, legal, and regulatory obligations.

Access to health-related information is limited to authorized team members and service providers who require access for legitimate business, treatment, or administrative purposes.

Photos, Videos, and Marketing Use

We may take photos or videos for treatment documentation, before-and-after comparison, education, internal records, or marketing purposes.

Photos or videos used for marketing, advertising, social media, website content, or promotional materials will only be used with your consent. Where possible, we may use images in a way that does not disclose your identity unless you have specifically agreed otherwise.

You may withdraw your consent for future marketing use of your photos or videos by contacting us. However, materials already published or distributed may not always be fully removable from third-party platforms, printed materials, or previously shared content.

Marketing Communications

If you subscribe to receive newsletters, promotions, special offers, or updates from us, we may contact you by email, SMS, phone, or other electronic communication methods.

You may unsubscribe from marketing emails or text messages at any time by using the unsubscribe method provided in the message or by contacting us directly. Appointment reminders, transaction-related messages, treatment follow-ups, and other service-related communications may still be sent where necessary.

For Canadian commercial electronic messages, CASL generally requires consent, identification information, and a working unsubscribe mechanism.

Disclosure of Personal Information

We do not sell, rent, or trade your personal information.

We may share limited personal information with trusted third-party service providers or business partners when necessary for clinic operations, including:

• Appointment booking platforms
• Payment processors
• Financing providers
• Website hosting providers
• Email and SMS communication platforms
• Marketing and analytics service providers
• IT support providers
• Professional advisors, insurers, legal representatives, or regulatory bodies where required

These service providers are only permitted to use the information as needed to provide services to us and are expected to protect your information appropriately.

We may also disclose personal information where required or permitted by law, regulation, court order, professional obligation, insurance requirement, or government authority.

Payment, Financing, and Third-Party Platforms

When you make a payment, purchase a product or service, use a gift card, join a membership, purchase a package, or apply for financing, your information may be processed through third-party platforms such as payment processors, booking systems, or financing providers.

These third parties may have their own privacy policies and terms of use. We encourage you to review their policies when using their services.

Website, Cookies, and Analytics

Our website may collect certain technical information automatically, such as your IP address, browser type, device type, pages visited, time spent on the website, referral source, and general website usage patterns.

We may use cookies, tracking tools, analytics tools, or similar technologies to improve website performance, understand visitor behaviour, measure marketing effectiveness, and enhance user experience.

You may disable cookies through your browser settings; however, some website features may not function properly if cookies are disabled.

Video Surveillance

For the safety and security of our clients, employees, property, equipment, and products, we may use video surveillance in certain areas of our clinic.

Video surveillance is used for security, loss prevention, incident review, and safety-related purposes. Surveillance footage is not used for unrelated purposes and is only accessed by authorized individuals when necessary.

Video surveillance is not used in private treatment areas where clients have a reasonable expectation of privacy, unless clearly disclosed and legally permitted.

Security and Confidentiality

Sunshine Cosmetic Clinic & Medi Spa takes reasonable steps to protect personal information against loss, theft, unauthorized access, misuse, disclosure, copying, modification, or destruction.

We use commercially reasonable physical, administrative, and technical safeguards to protect personal information. However, no method of electronic storage, transmission, or online communication is completely secure. While we do our best to protect your information, we cannot guarantee absolute security.

Retention of Personal Information

We keep personal information only for as long as reasonably necessary to provide services, maintain client records, comply with legal and regulatory obligations, resolve disputes, support insurance or professional requirements, and operate our business.

When personal information is no longer required, we will securely delete, destroy, or anonymize it, unless we are required or permitted to retain it by law.

Accessing, Correcting, or Deleting Your Personal Information

You may request access to the personal information we hold about you. You may also request that we correct, update, or delete your personal information, subject to legal, professional, regulatory, insurance, and business recordkeeping requirements.

In some cases, we may not be able to delete certain records, such as treatment records, invoices, consent forms, or information we are legally required to keep. To make a request, please contact us directly.

Consent

By providing your personal information to us, using our website, booking an appointment, receiving services, purchasing products, joining a program, or communicating with us, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

You may refuse to provide certain personal information or withdraw your consent at any time, subject to legal or contractual restrictions. Please note that if you refuse or withdraw consent, we may not be able to provide certain services, treatments, products, memberships, financing options, or appointment-related support.

Updates to This Privacy Policy

We may update or revise this Privacy Policy from time to time. Any changes will be posted on this webpage and will become effective once posted.

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal information is handled, please contact us.