Privacy Policy

01Who we are

Afsoon Beauty Lounge ("we", "us") is a beauty studio at 10165 Yonge St., Richmond Hill, ON L4C 1T5. This Privacy Policy explains how we collect, use, share and protect personal information when you visit afsoonbeauty.com, contact us, book an appointment or receive a treatment at the studio.

We follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair information principles. Afsoon is responsible for privacy at the studio and is the person to contact with any question about this policy.

02Information we collect

Information you give us

• Contact form: your name, email address, phone number and the message you send.
• Online booking: your name, email address, phone number, the treatment, date and time you choose, and any notes you add.
• Consultation and treatment records: details needed to treat you safely, such as relevant health information, allergies, medication, skin type, consent forms, treatment notes and aftercare advice.
• Photos: before and after photos taken to plan and track your treatment, only with your consent.
• Payment: payment is taken at the studio. If online payment is offered in future, card details are handled by a secure payment provider and are never stored on our website.

Information collected automatically

• Technical data such as your IP address, browser, device type, pages viewed and how you arrived at the website.
• Cookies and similar technologies, explained in the cookies section below.

03How we use your information

• To confirm, remind you of, reschedule or cancel your appointments.
• To answer your questions and messages.
• To assess whether a treatment is suitable for you and to provide it safely.
• To keep accurate treatment records and follow up on your aftercare.
• To understand how the website is used so we can improve it.
• To meet our legal, tax and insurance obligations.

We only send marketing emails or messages, such as offers and event news, if you have agreed to receive them, as required by Canada's Anti-Spam Legislation (CASL). Every marketing message includes a way to unsubscribe. Booking confirmations and reminders are service messages and are not marketing.

04Consent

By contacting us, booking or receiving a treatment, you consent to the collection and use of your information as described in this Privacy Policy. We ask for your express consent before collecting health information or taking photos.

You can withdraw your consent at any time by contacting us, subject to legal or contractual limits. If you withdraw consent for information we need to treat you safely, we may not be able to provide that treatment.

05Photos and social media

Before and after photos stay in your private client record unless you give separate written consent for us to share them. We only post client photos on our website or Instagram with that consent, and we never post your name without permission. You can ask us to remove a shared photo at any time, and we will remove it from the accounts we control.

06Cookies and analytics

Cookies are small files stored by your browser. We use:

• Essential cookies that keep the website, booking calendar and forms working securely.
• Security and performance cookies set by Cloudflare, which protects and speeds up the website.
• Analytics cookies from Google Analytics, which tell us how visitors use the website. This information is grouped and is not used to identify you personally.

You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with the Google Analytics opt-out add-on. Blocking essential cookies may stop parts of the website, such as online booking, from working.

07Who we share information with

We do not sell or rent your personal information. We share it only when needed to run the studio and the website, with service providers who must protect it and use it only for the service they provide to us:

• Our website hosting provider and Cloudflare, which host, protect and deliver the website.
• Google, for website analytics and the map shown on our contact page.
• Our email delivery provider, which sends booking confirmations and replies.
• A payment provider, only if you choose to pay online when that option is offered.
• Professional advisers such as our accountant or insurer, when required.

We may also disclose information when required by law, for example in response to a court order.

08Where your information is stored

Our website and some of our service providers may store or process information outside Canada, for example in the United States. When that happens, your information is subject to the laws of that country and may be accessed by its authorities. We choose providers that protect information to a standard comparable to Canadian law.

09How long we keep it

We keep personal information only as long as we need it for the purposes above, or as long as the law requires. Treatment records are kept so we can see your history if you return and to meet legal and insurance requirements. Messages and booking details that are no longer needed are deleted or securely destroyed.

10How we protect it

We use reasonable physical, organisational and technical safeguards, including a secure HTTPS connection, restricted admin access, strong passwords, regular software updates and locked storage for paper records. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the Office of the Privacy Commissioner of Canada of any breach that creates a real risk of significant harm, as the law requires.

11Your rights

You have the right to:

• Ask what personal information we hold about you and get a copy of it.
• Ask us to correct information that is inaccurate or incomplete.
• Withdraw your consent, including to marketing messages.
• Ask us to delete information we no longer need to keep.

To make a request, email [email protected]. We will reply within 30 days. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

12Children

Our website and online booking are intended for adults. We do not knowingly collect personal information from children through the website. If you believe a child has sent us information, contact us and we will delete it.

13Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version is always on this page, with the date it was last updated. This version was last updated on October 29, 2026.