Privacy Policy

1. Introduction

At BeautyArtSurrey ("we", "us", "our"), we are committed to protecting the privacy and security of our clients' personal information. This Privacy Policy is designed to comply with British Columbia's Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Information We Collect

To provide high-quality beauty services, we collect the following personal information:

• Contact Details: Name, email address, and phone number for booking and reminders.
• Health Information: Allergy details, skin conditions, and relevant medical history to ensure safe treatment application.
• Account Data: encrypted password and profile preferences for registered users.
• Transaction Data: Payment history and service records. Note: We do not store full credit card numbers on our servers; payments are handled by secure, PCI-compliant third-party processors.

3. Purpose of Collection

We collect and use your personal information for the following purposes:

• To schedule and confirm appointments.
• To tailor beauty treatments to your specific health needs and preferences.
• To manage our loyalty rewards and service packages.
• To communicate regarding salon news, promotions, or emergency scheduling changes (CASL compliant).

4. Consent and Disclosure

By providing your information via our booking system, you consent to its use as described. We do not sell or lease client lists to third parties. We only disclose your information:

• To service providers who assist our operations (e.g., hosting, SMS reminders).
• When required by law or health regulations in British Columbia.

5. Your Rights & Access

Under PIPA, you have the right to access the personal information we hold about you. You may:

• Request a copy of your records.
• Request corrections to inaccurate or incomplete information.
• Withdraw consent for marketing communications at any time.

6. Data Security

We employ industry-standard security measures (SSL encryption, secure databases) to protect your data. In the event of a data breach, we follow the mandatory reporting guidelines provided by the Office of the Information and Privacy Commissioner for British Columbia.