Privacy policy

1. Information We Collect

We may collect personal information directly from clients, automatically through technology, or through third-party systems used to operate our business.

Information collected may include:

• Full name
• Email address
• Phone number
• Billing information
• Appointment history
• Service preferences
• Consent forms
• Medical or allergy disclosures relevant to cosmetic services
• Lash, brow, or skin-related information
• Photographs or videos where consent has been provided
• Social media usernames
• IP address
• Device information
• Browser information
• Website interaction data
• Payment transaction details
• Communication records
• Marketing preferences

We collect only information that is reasonably necessary for legitimate business operations, safety, legal compliance, and service delivery.

2. Sensitive Information

Certain services may require the collection of limited sensitive personal information relating to:

• Allergies
• Medical conditions
• Skin sensitivities
• Eye sensitivities
• Contraindications
• Medications
• Cosmetic treatment history

This information is collected strictly for:

• Safety purposes
• Service suitability
• Risk reduction
• Client care
• Legal documentation
• Insurance protection

Clients acknowledge that failure to provide accurate or complete information may:

• Affect service outcomes
• Increase the risk of complications
• Limit our ability to safely perform services

Sensitive information is handled with heightened confidentiality and restricted internal access where reasonably possible.

3. How Information Is Collected

We may collect information through:

• Booking forms
• Consent forms
• Intake forms
• Website forms
• Email communications
• Text messages
• Social media interactions
• Payment platforms
• Automated website technologies
• In-person consultations
• Appointment records
• Third-party booking software

Information may be collected:

• Directly from clients
• Automatically through website technologies
• Through integrated third-party service providers
  
  

4. Purpose of Collection

We collect and use personal information for legitimate business purposes including:

• Scheduling appointments
• Providing cosmetic services
• Maintaining client records
• Contraindication and safety screening
• Processing payments
• Client communication
• Appointment reminders
• Customer support
• Improving services
• Marketing communications where permitted
• Fraud prevention
• Chargeback dispute responses
• Legal compliance
• Recordkeeping
• Business analytics
• Website functionality and security

We do not collect personal information for purposes unrelated to legitimate business operations.

5. Consent

By submitting information to Thalyria Beauty & Co., clients consent to the collection, use, disclosure, and retention of information as outlined in this Privacy Policy.

Consent may be provided through:

• Booking appointments
• Completing forms
• Signing waivers
• Purchasing products
• Using our website
• Communicating with us
• Opting into communications

Clients may withdraw consent where legally permitted by contacting us in writing.

However, withdrawing consent may:

• Limit available services
• Prevent appointment bookings
• Restrict our ability to safely provide services
• Limit customer support functionality
• Prevent continued access to certain systems or features

We reserve the right to retain information where:

• Legally required
• Operationally necessary
• Relevant to disputes, fraud prevention, or policy enforcement
• Required for tax, insurance, or record-keeping purposes
  
  

6. Photography, Media & Marketing Content

Where consent has been provided, Thalyria Beauty & Co. may collect and use:

• Photographs
• Videos
• Treatment images
• Before-and-after content

for purposes including:

• Portfolio use
• Marketing
• Social media
• Website content
• Educational content
• Promotional materials

Clients may request removal of identifiable content where reasonably possible and where materials have not already been:

• Published
• Distributed
• Archived
• Printed
• Incorporated into advertising or promotional campaigns

Withdrawal requests do not guarantee removal from previously distributed or archived materials.

7. Website Data, Cookies & Analytics

Our website may use:

• Cookies
• Analytics tools
• Pixels
• Tracking technologies
• Embedded content
• Session tracking technologies

These technologies may collect information including:

• Browser type
• Device information
• IP address
• Geographic region
• Pages visited
• Time spent on pages
• Website interactions
• Referral sources

This information helps us:

• Improve website performance
• Understand user behaviour
• Enhance marketing efforts
• Improve user experience
• Maintain website functionality
• Support website security

Clients may adjust browser settings to limit cookies; however, portions of the website may not function properly if cookies are disabled.

8. Third-Party Service Providers

We may use trusted third-party providers for:

• Booking systems
• Payment processing
• Website hosting
• Analytics
• Email marketing
• Messaging services
• Cloud storage
• Business management software

These providers may process, transmit, or store information on our behalf.

While we make reasonable efforts to use reputable providers, Thalyria Beauty & Co. is not responsible for:

• Independent third-party privacy practices
• External platform breaches
• System outages
• Unauthorized access occurring outside our reasonable control
• Failures caused by third-party infrastructure

Clients acknowledge that information shared with third-party systems may also be governed by those providers’ own:

• Privacy policies
• Terms of service
• Security standards
  
  

9. Payment Information

Payment information may be processed through third-party payment processors.

Thalyria Beauty & Co. does not intentionally store complete:

• Credit card numbers
• Debit card details
• Full payment credentials

Payment providers maintain their own privacy and security standards.

Clients are responsible for reviewing applicable third-party payment provider policies where relevant.

10. Information Sharing & Disclosure

We do not sell personal information to third parties.

We may disclose information where reasonably necessary to:

• Process transactions
• Operate business systems
• Enforce policies
• Prevent fraud
• Respond to chargebacks
• Protect legal rights
• Comply with legal obligations
• Respond to lawful requests from authorities
• Protect client or business safety

Information may also be disclosed:

• To legal advisors
• To insurance providers
• To payment processors
• To software or service providers operating on our behalf

Disclosure will be limited to information reasonably necessary for the applicable purpose.

11. Fraud Prevention, Chargebacks & Disputes

Clients acknowledge that Thalyria Beauty & Co. may retain and use records for:

• Fraud prevention
• Chargeback disputes
• Legal protection
• Policy enforcement
• Business security

Records may include:

• Signed agreements
• Consent forms
• Booking confirmations
• IP logs
• Communication history
• Appointment records
• Photographs
• Payment confirmations
• Cancellation records
• Timestamped acknowledgements

Where reasonably necessary, this information may be submitted to:

• Financial institutions
• Payment processors
• Legal representatives
• Insurance providers
• Collections agencies
• Regulatory authorities

for purposes relating to:

• Dispute resolution
• Fraud prevention
• Legal enforcement
• Financial recovery
  

12. Data Retention

We retain personal information only for as long as reasonably necessary for:

• Business operations
• Legal compliance
• Tax obligations
• Insurance requirements
• Dispute resolution
• Safety documentation
• Fraud prevention
• Recordkeeping purposes

Retention periods may vary depending on:

• Service history
• Applicable legal obligations
• Ongoing disputes or investigations
• Business and operational needs

We reserve the right to retain records where reasonably necessary to protect our:

• Legal interests
• Financial interests
• Operational integrity
• Business security
  

13. Data Security

We implement reasonable:

• Administrative safeguards
• Technical safeguards
• Organizational safeguards

intended to protect personal information against:

• Unauthorized access
• Misuse
• Disclosure
• Alteration
• Loss
• Theft

However, no method of electronic transmission, cloud storage, website operation, or digital system can be guaranteed completely secure.

Clients acknowledge and accept the inherent risks associated with:

• Online communications
• Electronic records
• Internet-based systems
• Digital storage technologies
  
  

14. Client Rights

Subject to applicable Canadian laws, clients may have the right to:

• Request access to certain personal information
• Request correction of inaccurate information
• Withdraw consent where legally permitted
• Request clarification regarding data practices

Requests may be denied or limited where:

• Information relates to legal proceedings
• Information contains third-party data
• Retention is legally required
• Requests are excessive, repetitive, or abusive
• Disclosure would compromise fraud prevention or business protections

Reasonable identity verification may be required before processing requests.

15. Marketing Communications

Clients may receive:

• Promotional emails
• Marketing messages
• Service announcements
• Special offers
• Business updates

where consent has been provided or where otherwise permitted under applicable Canadian anti-spam laws, including CASL (Canada’s Anti-Spam Legislation).

Clients may unsubscribe from marketing communications at any time using available unsubscribe methods.

Operational, transactional, or legally required communications may still be sent where necessary.

16. Minors

We do not knowingly collect unnecessary personal information from minors without appropriate parental or guardian involvement where required by law.

Parents or guardians may contact us regarding information associated with minors where legally applicable.

17. External Links & Third-Party Content

Our website, communications, or social platforms may contain links to third-party websites, software, or services.

We are not responsible for:

• Third-party privacy practices
• External content
• Security standards
• Independent policies or procedures

Clients access third-party services at their own discretion and risk.

18. Business Transfers & Operational Changes

In the event of:

• A merger
• Sale
• Reorganization
• Asset transfer
• Ownership transition
• Business restructuring

client information may be transferred as part of legitimate business operations, subject to applicable legal requirements and reasonable confidentiality protections.

19. Policy Updates

Thalyria Beauty & Co. reserves the right to:

• Modify
• Update
• Revise
• Amend

this Privacy Policy at any time without prior notice.

Updated versions become effective immediately upon posting, publication, or implementation.

Continued use of our services, systems, website, or communications constitutes acceptance of revised policies.

20. Limitation of Liability

To the fullest extent permitted under applicable law, Thalyria Beauty & Co. shall not be liable for:

• Unauthorized third-party access
• Cyberattacks
• Data interception
• Technical failures
• Service interruptions
• Third-party platform breaches
• Delays in communications
• Information loss caused by external systems
• Damages arising from circumstances beyond reasonable control

Nothing within this Privacy Policy excludes liability that cannot legally be excluded under Canadian law.

21. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with:

• The laws of the Province of British Columbia
• Applicable federal laws of Canada

Any disputes relating to privacy matters shall be handled within the appropriate jurisdiction of British Columbia unless otherwise required by law.

22. Client Acknowledgement

By interacting with Thalyria Beauty & Co., including through:

• Bookings
• Purchases
• Communications
• Forms
• Website usage
• Consultations
• Digital interactions

clients acknowledge and agree that they:

• Have read and understood this Privacy Policy
• Consent to the collection and use of information as outlined above
• Understand that digital systems carry inherent security risks
• Accept the reasonable business practices described herein
• Understand that certain information may be retained for legal, operational, safety, fraud-prevention, and recordkeeping purposes
• Agree to all associated Terms, Policies, Conditions, and Consent Requirements maintained by Thalyria Beauty & Co.

Continued use of our services constitutes acceptance of this Privacy Policy.