Privacy Policy.

We collect personal information that is necessary to provide you with safe, effective aesthetic treatments. This may include:

• Identity information: your full name, date of birth, and gender.
• Contact information: email address, phone number, and mailing address.
• Health information: medical history, current medications, allergies, skin conditions, photographs of treatment areas, and treatment records.
• Financial information: payment details processed through our secure payment provider. We do not store full credit card numbers on our systems.
• Technical information: IP address, browser type, device information, and website usage data collected through cookies and analytics tools.

Your personal information is used for the following purposes:

• To assess your suitability for treatments and develop a personalized care plan.
• To communicate with you regarding appointments, treatment instructions, and follow-up care.
• To process payments and maintain accurate billing records.
• To send you appointment reminders and clinic updates via email, using our email service provider Brevo.
• To improve our website and services through aggregated, anonymized analytics data.
• To comply with legal and regulatory obligations, including record-keeping requirements for healthcare providers.

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

• With your explicit consent, such as when referring you to another healthcare provider.
• With trusted third-party service providers who assist in our operations (see Section 7), under strict confidentiality agreements.
• When required by law, regulation, legal process, or enforceable governmental request.
• To protect the rights, safety, or property of Kamal Injectables Clinic, our clients, or the public.

We obtain your informed consent before collecting, using, or disclosing your personal information. Consent may be expressed (written or verbal) or implied, depending on the sensitivity of the information and the context in which it is collected.

For health-related information, we obtain your explicit written consent during your initial consultation. You may withdraw your consent at any time, subject to legal or contractual restrictions, by contacting us at care@kamalinjectablesclinic.com. Please note that withdrawing consent may affect our ability to provide certain services.

We take the protection of your personal information seriously and employ appropriate physical, organizational, and technological safeguards, including:

• Encrypted data transmission (SSL/TLS) for all information submitted through our website.
• Secure storage of physical and electronic records with restricted access.
• Regular review and updating of our security practices and protocols.
• Staff training on privacy obligations and data handling procedures.

While no method of transmission or storage is completely secure, we strive to use commercially reasonable means to protect your personal information.

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. These include:

• Essential cookies: required for the website to function properly, such as maintaining your session.
• Analytics cookies: used by Google Analytics to collect anonymized data about how visitors interact with our site, helping us improve content and user experience.

You may control or disable cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

We use the following third-party services in the operation of our clinic and website:

• Google Analytics: used to analyze website traffic and user behaviour in aggregated, anonymized form. Google Analytics may use cookies to collect this data. You can learn more about how Google uses your data and opt out at Google's Privacy Policy.
• Brevo (formerly Sendinblue): used for sending transactional emails, appointment reminders, and clinic newsletters. Your email address and name may be shared with Brevo for this purpose. You can review Brevo's Privacy Policy for more information.

These third-party providers are contractually bound to protect your information and use it only for the purposes we specify.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specifically:

• Health and treatment records are retained for a minimum of ten (10) years from the date of your last visit, in accordance with Ontario healthcare record-keeping requirements.
• Financial records are retained for the period required by Canadian tax legislation.
• Marketing and communication preferences are retained until you unsubscribe or request deletion.
• Website analytics data is retained in aggregated, de-identified form and is not linked to individual users.

When your information is no longer needed, it is securely destroyed or anonymized.

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the following rights:

• Right to access: you may request access to the personal information we hold about you.
• Right to correction: you may request that we correct any inaccurate or incomplete personal information.
• Right to withdraw consent: you may withdraw your consent to the collection, use, or disclosure of your personal information, subject to legal or contractual limitations.
• Right to complain: if you believe your privacy rights have been violated, you may file a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within thirty (30) days.

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.