Last Updated: March 2, 2026

Bardöt Beauty Boutique Ltd. (“Bardöt Beauty,” “we,” “us,” or “our”) is committed to protecting your privacy with discretion and care.

As a provider of medical aesthetic services in Alberta, Bardöt Beauty operates as a custodian under Alberta’s Health Information Act (“HIA”) and complies with its requirements respecting the collection, use, disclosure, retention, and safeguarding of health information.

This Privacy Policy explains how we collect, use, disclose, and protect personal and health information when you:

• Visit our website (bardotbeauty.ca)
  
• Book or receive services
  
• Purchase products
  
• Communicate with us
  

By using our website or services, you agree to the practices described below.

1. Interpretation and Definitions

Personal Information means information about an identifiable individual.

Health Information means diagnostic, treatment, and medical history information as defined under Alberta’s Health Information Act.

Service refers to our website and clinic services.

Service Providers means third parties who assist us in operating our business (e.g., electronic medical record systems, payment processors, analytics tools).

2. Information We Collect

A. Personal and Health Information (Collected Directly From You)

We collect personal and health information when necessary to:

• Assess your suitability for treatment
  
• Provide medical aesthetic services
  
• Maintain clinical records
  
• Arrange appointments
  
• Process payments
  
• Respond to inquiries
  
• Comply with legal and regulatory requirements
  

Information may include:

• Name
  
• Email address
  
• Phone number
  
• Address
  
• Date of birth
  
• Medical history
  
• Treatment records
  
• Before-and-after photography (with consent where required)
  
• Payment and transaction details
  

We limit collection to what is reasonably necessary for these purposes.

B. Website Usage Data (Automatically Collected)

When you visit our website, we may collect limited technical information such as:

• IP address
  
• Browser type and version
  
• Pages visited
  
• Time and date of visit
  
• Device identifiers
  
• Referring URLs
  

This information helps us:

• Maintain website security
  
• Improve performance
  
• Analyze usage trends
  
• Evaluate marketing effectiveness
  

Website usage data does not include medical records and is not used to identify you unless required for security or legal purposes.

C. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable essential website functionality
  
• Remember preferences
  
• Analyze traffic
  
• Improve marketing performance
  

Cookies may be:

• Session cookies (deleted when browser closes)
  
• Persistent cookies (remain until deleted)
  

You may disable cookies in your browser settings. Some features of our website may not function properly if cookies are declined.

We may use analytics and marketing tools that utilize pixel tags or tracking scripts for website performance and advertising measurement.

3. Use of Information

We use your personal and health information to:

• Provide safe and appropriate medical aesthetic care
  
• Communicate about appointments and treatments
  
• Process transactions
  
• Send service-related notifications
  
• Improve services and client experience
  
• Meet regulatory obligations
  

We do not sell, trade, or rent your health information.

Marketing communications are sent only where permitted by law, and you may unsubscribe at any time.

4. Text Messaging

Bardöt Beauty sends text messages related to:

• Appointment confirmations
  
• Reminders
  
• Booking updates
  
• Service or product inquiries
  

Mobile numbers are used solely for communication regarding your care or inquiries.

We do not share mobile numbers for third-party marketing purposes.

You may opt out at any time by replying “STOP” to any message or contacting us directly.

5. Electronic Systems and Service Providers

We use secure third-party systems to support clinic operations, including:

• Jane App for appointment scheduling and clinical record management
  
• Secure payment processors (e.g., Shopify and PCI-compliant providers)
  
• Email marketing platforms
  
• Website analytics services
  

These providers are contractually required to:

• Maintain confidentiality
  
• Use information only for authorized purposes
  
• Implement appropriate safeguards
  

We do not store full payment card details on our servers.

6. Disclosure of Information

We may disclose information:

• To regulated health professionals involved in your care
  
• To service providers supporting clinic operations
  
• During business transactions (e.g., merger, acquisition)
  
• When required by law
  
• To protect safety or prevent fraud
  

Health information is disclosed only as permitted or required under Alberta’s Health Information Act.

7. Safeguards

We implement appropriate physical, administrative, and technical safeguards, including:

• Secure electronic medical record systems
  
• Access controls and authentication
  
• Staff confidentiality agreements
  
• Controlled data retention
  
• Secure destruction practices
  

While no system can guarantee absolute security, we take reasonable steps to protect your information from unauthorized access, loss, or misuse.

8. Retention

Health information is retained in accordance with:

• Alberta’s Health Information Act
  
• Professional regulatory requirements
  
• Applicable legislation
  

When information is no longer required, it is securely destroyed.

9. Transfers Outside Alberta or Canada

Information may be processed in jurisdictions outside Alberta or Canada when using secure service providers. When this occurs, we ensure appropriate safeguards are in place consistent with legal requirements.

10. Your Rights

Under Alberta’s Health Information Act, you have the right to:

• Request access to your health information
  
• Request correction of factual errors
  

Requests must be made in writing. We will respond within legislated timelines.

You may also:

• Withdraw consent for marketing communications
  
• Request information about how your data is handled
  

11. California Privacy Rights

California residents may request information regarding disclosure of personal information under California Civil Code Section 1798.

Residents under 18 may request removal of publicly posted content in accordance with California Business and Professions Code Section 22581.

12. Links to Third-Party Websites

Our website may contain links to external websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The updated version will be posted on this page with a revised “Last Updated” date.

14. Contact Information

If you have questions or wish to make a request regarding your information, please contact:

Privacy Officer

Bardöt Beauty Boutique Ltd.

2207 4 St SW #130

Calgary, Alberta

Email: Info@bardotbeauty.ca

If your concerns are not resolved, you may contact:

Office of the Information and Privacy Commissioner of Alberta