Privacy Policy

Effective Date: August 26, 2025

1. Introduction

Elviora Wellness Sanctuary ("we," "us," or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Book appointments or consultations
• Fill out contact forms or surveys
• Subscribe to our newsletter
• Create an account on our website
• Communicate with us via phone, email, or chat

This information may include:

• Name and contact information (email, phone, address)
• Health information relevant to spa treatments
• Payment and billing information
• Appointment preferences and history
• Communication preferences

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information through cookies and similar technologies:

• IP address and location data
• Browser type and version
• Device information
• Pages visited and time spent
• Referral sources

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Delivery

• Scheduling and managing appointments
• Providing personalized wellness treatments
• Processing payments
• Maintaining treatment records for continuity of care

3.2 Communication

• Sending appointment confirmations and reminders
• Responding to inquiries and requests
• Providing newsletters and wellness tips (with consent)
• Notifying you of promotions and special offers

3.3 Business Operations

• Improving our services and website functionality
• Conducting analytics and research
• Ensuring security and preventing fraud
• Complying with legal obligations

4. Legal Basis for Processing (PIPEDA Compliance)

Under Canadian privacy law, we process your personal information based on:

• Consent: For marketing communications and non-essential services
• Contract Performance: To deliver spa services you've requested
• Legal Obligations: To comply with health regulations and tax requirements
• Legitimate Interests: For business operations that don't override your privacy rights

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Payment processing
• Email marketing services
• Website hosting and maintenance
• Appointment scheduling software

All service providers are bound by confidentiality agreements and are only permitted to use your information for specified purposes.

5.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Respond to emergencies involving health and safety
• Investigate potential fraud or violations of our terms

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• SSL encryption for data transmission
• Secure servers with access controls
• Regular security audits and updates
• Staff training on privacy protection
• Limited access on a need-to-know basis

7. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Treatment Records: 7 years as required by Ontario health regulations
• Marketing Data: Until you withdraw consent or 3 years of inactivity
• Financial Records: 7 years for tax and accounting purposes
• Website Analytics: 26 months maximum

8. Your Privacy Rights

Under Canadian privacy law, you have the right to:

• Access: Request copies of your personal information
• Correction: Request corrections to inaccurate information
• Withdrawal of Consent: Opt out of marketing communications
• Complaint: File a complaint with the Privacy Commissioner of Canada
• Explanation: Understand how automated decisions affect you

To exercise these rights, contact our Privacy Officer at [email protected]

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your website experience. For detailed information about our cookie practices, please see our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

12. International Data Transfers

Your personal information is primarily stored and processed in Canada. If we transfer information outside of Canada, we ensure adequate protection through:

• Adequacy decisions by the Privacy Commissioner
• Standard contractual clauses
• Certified service providers with appropriate safeguards

13. Marketing Communications

With your consent, we may send you:

• Wellness tips and educational content
• Information about new services
• Special promotions and offers
• Event invitations and workshops

You can unsubscribe at any time using the link in our emails or by contacting us directly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying notices on our website

15. Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact:

Privacy Officer
Elviora Wellness Sanctuary
37 King St East
Toronto, ON M5C 1E9
Phone: +1 613-720-9823
Email: [email protected]

16. Regulatory Information

For complaints or concerns about our privacy practices, you may contact:

Privacy Commissioner of Canada
30 Victoria Street
Gatineau, QC K1A 1H3
Phone: 1-800-282-1376
Website: www.priv.gc.ca