Privacy Policy

London & Glow (“we”, “us”, “our”) is committed to protecting the privacy of every individual who visits our website or uses our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Alberta privacy legislation.

By using our website at londonandglow.ca or booking an appointment with us, you consent to the practices described in this policy.

1. What Personal Information We Collect

We may collect the following categories of personal information:

• —Contact details: name, email address, and phone number — collected when you submit a booking or contact form.
• —Payment information: booking deposits and treatment payments are processed by Stripe. We do not store your full card number, CVV, or banking details on our systems. Please review Stripe's Privacy Policy for details of how payment data is handled.
• —Technical data: IP address and browser type, collected automatically via analytics tools when you visit our website.
• —Cookie data: see the Cookie Policy section below.
• —Health and treatment information: information you voluntarily provide during a consultation, including medical history, current medications, allergies, and aesthetic treatment preferences. This information is collected solely to provide safe and appropriate treatment.

2. How We Collect Personal Information

We collect personal information through:

• —Online booking and contact forms on our website
• —Our appointment booking and clinic management system
• —Analytics tools that record how visitors use our website
• —Cookies and similar tracking technologies (with your consent where required)
• —In-person consultations and treatment intake forms

3. Why We Collect Personal Information

We collect and use personal information for the following purposes:

• —To schedule and confirm appointments
• —To communicate with you about your treatments, including pre- and post-care instructions
• —To process deposits and payments securely
• —To improve our services and website experience
• —To send marketing communications about offers, new treatments, and clinic news — only with your explicit consent, and you may withdraw consent at any time
• —To comply with legal and regulatory obligations

4. Who We Share Your Information With

We do not sell your personal information to third parties. We share information only where necessary with the following trusted service providers:

• —Stripe — payment processing for deposits and treatments. Please review Stripe's Privacy Policy.
• —Resend — transactional and marketing email delivery. Resend processes email addresses on our behalf to send appointment confirmations and communications.
• —Google Analytics 4 — website analytics. Data is anonymised before transmission and used to understand how visitors use our website. IP anonymisation is enabled.

We may also disclose information where required by law or to protect our legal rights.

5. How Long We Retain Your Information

• —Booking and treatment records are retained for a minimum of 7 years in accordance with Alberta healthcare records retention requirements.
• —Analytics datais retained in accordance with Google Analytics' own data retention policy, which you can review in your Google Analytics account settings or Google's documentation.
• —Marketing communications — we will continue to send marketing emails until you unsubscribe. Every marketing email contains an unsubscribe link.

6. Your Rights Under PIPEDA

Under PIPEDA, you have the following rights regarding your personal information:

• —Right of access: you may request access to the personal information we hold about you.
• —Right to correction: if your information is inaccurate or incomplete, you may request that we correct it.
• —Withdrawal of consent: you may withdraw consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Note that withdrawal may affect our ability to provide services to you.

To exercise any of these rights, please contact us at hello@londonandglow.ca. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

7. Privacy Breach Notification

In the event of a breach of security safeguards involving your personal information that creates a real risk of significant harm, we will notify you as soon as reasonably practicable, in accordance with PIPEDA's mandatory breach reporting requirements. We will also report the breach to the Office of the Privacy Commissioner of Canada. Breach notifications will be provided via email to the address you have registered with us, and will include a description of what occurred, the type of information involved, and steps you can take to protect yourself.

8. Cookie Policy

Our website uses cookies and similar browser storage. We use the following categories:

• —Strictly necessary cookies: session cookies required for the website to function (e.g., maintaining your session when navigating pages). These do not require consent.
• —Consent preference storage:we store a single entry in your browser's local storage (key: lg_cookie_consent) to remember whether you have accepted or declined analytics cookies. This record is stored locally on your device and is not transmitted to our servers.
• —Analytics cookies (Google Analytics 4): these cookies help us understand how visitors use our website. They are only activated after you explicitly accept analytics cookiesvia the consent banner shown on your first visit. IP anonymisation is always enabled. You may withdraw consent at any time by clearing your browser's local storage for this site, or by installing the Google Analytics Opt-out Browser Add-on.
• —Advertising cookies: we do not use advertising or tracking cookies for targeted advertising purposes.

9. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at hello@londonandglow.ca and we will delete it promptly.

10. Cross-Border Transfer of Data

Some of our third-party service providers (including Stripe and Google) operate outside Canada, which means your personal information may be transferred to, stored in, or processed in countries other than Canada — including the United States. These countries may have different privacy laws than those in Canada. By using our services, you acknowledge and consent to the transfer of your information to these service providers for the purposes described in this policy. We take reasonable steps to ensure our service providers maintain appropriate safeguards.

11. Privacy Inquiries & Contact

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal information, please contact us: