At Skin Kouture, your privacy is treated with the same care we bring to every treatment. This policy explains, clearly and honestly, what information we collect, why we collect it, and the choices you have. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy legislation.
01
Our Commitment
Skin Kouture is the data controller responsible for the personal information you share with us. We will never sell your information, and we collect only what we genuinely need to provide safe, effective and personalised service.
If a question about your privacy arises that this policy does not answer, please contact us — see Contact Us at the bottom of this page.
02
Information We Collect
Contact Information
Name, email address, phone number, postal address and emergency contact details that you provide when booking, signing up or contacting us.
Health & Treatment Information
Medical history, skin type, allergies, medications, prior treatments, photos used to monitor progress, and notes taken by your practitioner during consultation or service.
Payment Information
Payment is processed through a regulated third-party payment processor. We retain only a transaction reference, the amount, and the last four digits of the card. We do not store full card numbers on our systems.
Website Data
When you visit skinkouture.com we automatically collect limited technical information — browser type, device, pages viewed, time on site and approximate location based on IP. This is used for analytics and security only.
03
How We Use Your Information
- To schedule and deliver the treatments you've requested
- To assess suitability for treatment and ensure your safety
- To send booking confirmations, reminders and follow-up care notes
- To process payments and issue receipts
- To respond to your enquiries and provide customer support
- To send you marketing communications about offers and new treatments — but only if you opt in, and you can unsubscribe at any time
- To comply with legal, regulatory and professional-conduct obligations
- To improve our services and the security of our website
We do not use your health information for any form of advertising or marketing. Health records are treated with strict clinical confidentiality.
04
Sharing & Disclosure
We share your information only when necessary and only with parties bound by confidentiality:
- Our team: Licensed practitioners and authorised staff directly involved in your care.
- Service providers: Booking software, secure payment processors, email/SMS providers and IT support — each contracted to handle your data in line with this policy.
- Healthcare professionals: Only with your explicit consent (for example, sharing notes with your dermatologist or GP).
- Legal authorities: Where we are required to disclose information by law, court order, or to protect health or safety.
We never sell, rent, lease or trade your personal information to any third party for marketing purposes.
05
Storage & Security
Physical records are kept in locked storage at our clinic. Digital records are stored on encrypted, access-controlled systems hosted within Canada wherever possible. Access is limited strictly to staff who need it to perform their duties.
We use industry-standard safeguards — encryption in transit (HTTPS), encryption at rest, strong authentication, regular software updates and staff training. No system is perfectly secure; if we ever become aware of a breach affecting your information, we will notify you and the appropriate authority without undue delay.
06
How Long We Keep It
We keep your information only as long as needed for the purposes set out in this policy, or as required by law:
- Health and treatment records: Retained for a minimum of 10 years from your last treatment, in accordance with Ontario health-record requirements.
- Financial records: Retained for 7 years for tax and audit purposes.
- Marketing data: Retained until you withdraw consent, then deleted within 30 days.
- Website analytics: Aggregated and anonymised after 14 months.
07
Your Rights
Under PIPEDA and Ontario law, you have the right to:
- Access the personal information we hold about you
- Correct any information that is inaccurate or incomplete
- Withdraw consent for any non-essential processing (such as marketing) at any time
- Request deletion of your information, subject to our legal retention obligations
- Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe your rights have not been respected
To exercise any of these rights, email us at info@skinkouture.com. We will respond within 30 days.
08
Cookies & Website Data
Our website uses a small number of cookies to make it work properly and to understand, in aggregate, how visitors use it. These fall into three categories:
- Essential cookies: Required for the site to function (for example, remembering your preferences). These cannot be turned off.
- Analytics cookies: Help us understand which pages are most useful. Anonymised; you can disable these in your browser settings.
- Marketing cookies: Used only if you've opted in. Allow us to show you relevant content from our clinic on other websites.
Most browsers allow you to refuse or delete cookies through their settings. Refusing essential cookies may affect site functionality.
09
Third-Party Services
Our website may contain links to external sites — for example, our Instagram, Facebook or map providers. We are not responsible for the privacy practices of those sites; please review their policies before sharing your information.
Our embedded Google Map uses Google's services, which are subject to Google's Privacy Policy.
10
Children's Privacy
Our services are intended for clients aged 18 and over. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information without parental or guardian consent, please contact us and we will delete the information promptly.
For clients aged 16–17, we require written consent from a parent or legal guardian before providing any treatment.
11
Changes to This Policy
We may update this policy from time to time to reflect changes in our practices, services or legal requirements. The "Last Updated" date at the top of this page will always show the current version.
For material changes — such as new categories of data we collect or new purposes we use it for — we will notify you directly by email and, where required, ask for your renewed consent.