Privacy Policy

1. The laws we follow

When Moti provides health care to you, she is the health information custodian of your personal health information under Ontario's Personal Health Information Protection Act, 2004 (PHIPA). Other personal information we handle in the course of our business is protected under the federal Personal Information Protection and Electronic Documents Act (PIPEDA). We also follow the College of Nurses of Ontario's standards on confidentiality and privacy.

2. Privacy contact

3. What we collect through this website

• Booking details: your first and last name, mobile number, email address, the treatment you're interested in, how you'd like to meet (phone or Google Meet), confirmation that you're 18 or older, and your consent choices.
• Technical information: our website host and the Google Ads tag collect technical data such as your IP address, browser and device type, the pages you view and, if you arrived by clicking one of our ads, an ad click identifier.

Please don't include health details in the booking form. We collect your health history directly from you during your consultation, and it becomes part of your confidential clinical record.

4. How we use your information

• To schedule, confirm and remind you about your consultation and any treatment you book.
• To contact you about your appointment by phone, email or text message.
• To assess whether a treatment is suitable for you and to provide and document your care.
• To process deposits and payments for treatments.
• To count how many consultations our Google ads produce. This uses booking events, never health information.
• To meet our legal and professional obligations.
• To send you clinic news, only if you have given separate, express consent.

We do not sell, rent or trade personal information. We do not use your health information for marketing, and we do not upload patient or contact lists to Google or any advertising platform, or use them to target ads.

5. Consent

By booking a consultation, you consent to us collecting and using your booking details for the purposes above. Consent to marketing messages is separate and optional. You can withdraw your consent at any time, subject to legal and professional limits, such as our duty to keep clinical records for a set period.

6. Electronic messages

We send appointment confirmations and reminders because you booked an appointment. Every message identifies Quartz Aesthetic Clinic and includes a way to opt out; for text messages, reply STOP. Message and data rates may apply.

7. Who we share information with

We use service providers who help us run the clinic and who may handle your information only to provide their services to us:

• HighLevel (LeadConnector): online booking calendar, forms, contact records, and appointment emails and texts.
• Google: Google Ads conversion measurement, Google Workspace email, and Google Meet for online consultations.
• Stripe: payment of treatment deposits.
• Our website hosting provider.

Some of these providers store or process information outside Canada, including in the United States, where it may be accessible to authorities under the laws of that country.

We may also disclose information when the law requires or permits it, for example to the College of Nurses of Ontario, in response to a court order, or to reduce a significant risk of serious bodily harm.

8. Cookies and ad measurement

This website uses the Google Ads tag, which sets cookies to record when a visit that began with a click on our ad ends in a booked consultation. We do not use these cookies to build audience lists or to show you ads based on your health. You can block or delete cookies in your browser settings and manage Google ad personalization at myadcenter.google.com.

9. How we protect information

We use reasonable administrative, technical and physical safeguards, including password-protected accounts with access limited to people who need it. No method of storage or transmission is completely secure. If your personal health information is stolen, lost, or used or disclosed without authorization, we will notify you at the first reasonable opportunity and notify the Information and Privacy Commissioner of Ontario where required.

10. How long we keep information

• Clinical records: at least 10 years after your last visit, in line with College of Nurses of Ontario guidance.
• Booking details of people who don't become patients: up to 2 years after your last contact with us, then deleted.
• Marketing consent records: while you remain subscribed and for as long afterward as we need to show that consent was given.

11. Your rights

You can ask to see or get a copy of your personal health information and ask us to correct it if it is inaccurate or incomplete. Send your request to our privacy contact. We will respond within the time limits set by PHIPA. A reasonable fee may apply for copies, as the law allows. You can also ask what personal information we hold about you, withdraw consent to marketing at any time, and ask questions about our privacy practices.

12. Complaints

Please contact us first. If you are not satisfied with our response:

• About personal health information: Information and Privacy Commissioner of Ontario, 2 Bloor Street East, Suite 1400, Toronto, ON M4W 1A8 | 1-800-387-0073 | www.ipc.on.ca
• About other personal information: Office of the Privacy Commissioner of Canada | 1-800-282-1376 | www.priv.gc.ca

13. Age

Our services and this website are intended for adults 18 and older.

14. Changes to this policy

We may update this policy. The effective date at the top shows the current version.