Legal
Privacy Policy
Last updated: April 2026
1. Information We Collect
When you book an appointment or contact us, we collect personal information you provide, including your name, email address, phone number, and any notes related to your appointment. We also collect payment information through our secure payment processor, Stripe, which handles your financial data directly — we do not store credit card numbers.
2. Health Information
Booking notes may include health-related information — such as allergies, skin sensitivities, or medications — that you choose to share with us so we can deliver your services safely. We treat this information with particular care: it is used only to provide your services safely and comfortably, it is never shared with anyone, and it is retained only for as long as it is needed. You may ask us to remove health-related notes from your record at any time.
3. How We Use Your Information
We use your personal information to: schedule and manage your appointments, process deposits and payments, send booking confirmations and reminders, respond to your inquiries through our contact form, and improve our services. We will never sell, rent, or share your personal information with third parties for marketing purposes.
4. Data Storage & Security
Your data is stored securely using Supabase, an enterprise-grade database platform with row-level security and encryption at rest. All data transmitted between your browser and our servers is encrypted using TLS/SSL. Payment processing is handled entirely by Stripe, which is PCI DSS Level 1 certified.
5. Third-Party Services
We use the following third-party services to operate our business: Stripe for secure payment processing, Supabase for database hosting, and Gmail SMTP for transactional emails (booking confirmations, contact form notifications). Each service has its own privacy policy and handles data in accordance with industry standards.
6. Cookies & Analytics
Our website uses essential cookies required for the site to function properly. We do not use tracking cookies or third-party advertising cookies. We may use privacy-respecting analytics to understand how visitors use our site and improve the experience.
7. PIPEDA Compliance
Enhanced Beauty handles personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We collect personal information only with your consent and only for the purposes described in this policy, we limit collection to what is necessary to provide our services, and we take reasonable steps to keep your information accurate and protected. To request access to, or correction of, the personal information we hold about you, contact us at Enhancedbeautybyfatima@gmail.com.
8. Your Rights
You have the right to: access the personal information we hold about you, request correction of inaccurate information, request deletion of your personal information, and withdraw consent for communications at any time. To exercise any of these rights, please contact us at Enhancedbeautybyfatima@gmail.com.
9. Data Retention
We retain your booking and contact information for as long as necessary to provide our services and comply with legal obligations. If you request deletion of your data, we will remove it within 30 days, except where we are required by law to retain it.
10. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
11. Contact Us
If you have any questions about this privacy policy or how we handle your personal information, please contact us at Enhancedbeautybyfatima@gmail.com or through our contact form.