Privacy Policy

Reborn Aesthetic operates medical-aesthetic clinics in Quebec and a hair and makeup salon. This policy explains how we collect, use, share, and protect your personal information when you visit our website, book an appointment at one of our clinics, or contact us.

This policy is governed by Quebec's Act respecting the protection of personal information in the private sector (Law 25) and by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

In accordance with section 3.1 of Law 25, we have designated a Privacy Officer (the person in charge of the protection of personal information). You may contact this person for any question about this policy, to exercise your rights, or to report a privacy incident.

• Email: [email protected]
• Mail: Privacy Officer, Reborn Aesthetic, Montréal, Quebec, Canada
• Phone: (514) 492-0445

We collect only the personal information necessary for the purposes identified below. Depending on your interaction with us, this may include:

• Identity and contact details: first and last name, email, phone number, preferred language.
• Appointment details: chosen clinic, requested treatments, dates and times, notes you provide in our forms.
• Medical and aesthetic information (collected in clinic only, never via the website): relevant history, allergies, medications, before/after photographs when you give express consent.
• Payment information: handled directly by our booking providers (Square or GoRendezvous); we do not store full card numbers.
• Technical data: IP address, device type, browser, pages viewed, time spent, referral source, cookies (see our Cookie Policy).

We use your personal information only for the following purposes:

• Book, confirm, modify, and cancel your appointments.
• Provide the treatments you request and ensure clinical safety.
• Respond to your questions and inquiries sent via the contact form.
• Send you reminders and confirmations related to your appointments (transactional).
• Send you marketing communications only if you have given explicit consent (which you may withdraw at any time).
• Improve our website and services (aggregate analytics, technical troubleshooting).
• Comply with our legal and regulatory obligations.

We obtain your consent before collecting, using, or sharing your personal information, except where the law otherwise permits or requires.

Consent is requested separately for each non-essential purpose. You may withdraw your consent at any time by contacting our Privacy Officer. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

We never sell your personal information. We share it only with processors and service providers who need it to help us fulfill the purposes listed above, under written confidentiality agreements. The main categories are:

• Booking providers: Square Inc. (Montreal, Quebec City and Salon Reborn clinics) and GoRendezvous (Injection Montreal clinic) to manage appointments and payments.
• Website hosting and infrastructure: Vercel Inc. (United States), under compliant data-transfer agreements.
• Analytics: Google Analytics (Google LLC) — only with your consent.
• Advertising measurement: Meta Pixel (Meta Platforms, Inc.) — only with your consent.
• Transactional communications: our email and SMS providers for appointment reminders.
• Authorities, where required by law.

Some of our service providers are located outside Quebec, including in the United States (Square, Vercel, Google, Meta). Before any transfer we conduct a Privacy Impact Assessment as required by section 17 of Law 25 and ensure information receives adequate protection through written contractual clauses.

We retain your personal information only for as long as necessary for the identified purposes or to comply with a legal obligation:

• Messages submitted via the contact form: 24 months after the last interaction.
• Appointment records and clinical files: as required by applicable professional standards (up to 5 years after the last visit, or longer if required by law).
• Marketing consent: until you withdraw consent, then archived for 12 months for evidentiary purposes.
• Technical logs (security): 12 months maximum.

Beyond these periods, information is irreversibly destroyed or anonymized.

Under Law 25 and PIPEDA, you have the following rights:

• Right of access: obtain a copy of the information we hold about you.
• Right to rectify: have inaccurate, incomplete, or ambiguous information corrected.
• Right to withdraw consent at any time.
• Right to data portability (since September 2024): receive your information in a structured, commonly used technological format, or request its direct transfer to another organization.
• Right to de-indexation: request that hyperlinks to information about you no longer be disseminated where such dissemination causes you serious injury to reputation or privacy.
• Right to object to profiling and automated decision-making.
• Right to file a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

To exercise a right, write to us at [email protected] with a clear description of your request. We will respond within 30 days as required by law. We may ask for reasonable proof of identity before acting on your request.

We do not make decisions based exclusively on automated processing that produce legal or significant effects on you. Should such a decision ever be implemented, we will inform you in advance and offer you the opportunity to make submissions and request human review.

We maintain reasonable security safeguards proportionate to the sensitivity of the information, including: encryption in transit (HTTPS/TLS), role-based access control, access logging, regular backups, staff confidentiality training, and internal incident-management policies.

In the event of an incident involving your personal information that presents a risk of serious injury, we will notify you and the Commission d'accès à l'information du Québec without delay, in accordance with section 3.5 of Law 25. We maintain an incident register that may be reviewed by the Commission.

Our services are intended for adults. For minors under 14, consent must be given by the holder of parental authority. For minors 14 and older, consent may be given by the minor or by the holder of parental authority.

Our site uses cookies to function properly, measure audience, and, with your consent, measure advertising performance. You may manage your preferences at any time via our cookie banner or by reading our Cookie Policy.

We may update this policy to reflect legal or operational changes. The update date appears at the top of the document. For substantive changes we will display a prominent notice on the website.

For any question about this policy or the handling of your personal information, please write to us at [email protected].