Privacy Policy

Lumière Atelier Beauty Studio (“we,” “us,” “our”) respects your privacy and is committed to protecting your personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy legislation.

1. Introduction and Company Information

This Privacy Policy explains how Lumière Atelier Beauty Studio collects, uses, discloses, stores, and protects personal information when you visit our studio, contact us, book services, purchase products, subscribe to communications, or otherwise interact with us.

Business name: Lumière Atelier Beauty Studio
Address: 2142 Yonge Street, Toronto, ON M4S 2A7, Canada
Email: [email protected]
Phone: +1 (416) 782-9643

By using our services or providing us with your personal information, you acknowledge that your information will be handled as described in this Privacy Policy.

2. Data Collection and Processing

We collect personal information that is necessary to operate our beauty studio, provide services, manage appointments, process payments, communicate with clients, and improve our offerings.

The types of personal information we may collect include:

• Identification and contact information: name, email address, phone number, mailing address, and preferred contact details.
• Appointment and service information: booking details, service history, preferences, notes relevant to your treatment, and client intake information.
• Payment information: billing details, transaction records, and limited payment information processed through third-party payment providers. We do not intentionally store full credit card numbers unless required by a secure payment system.
• Health- or sensitivity-related information: information you voluntarily provide that may be relevant to beauty services, such as allergies, skin sensitivities, contraindications, or other treatment considerations.
• Communications: messages, inquiries, feedback, reviews, and correspondence with us.
• Technical and usage information: device and browser information, IP address, cookies, and website interaction data, where applicable.

We generally collect personal information directly from you, but we may also receive information from booking platforms, payment processors, analytics providers, or other service providers acting on our behalf.

3. Purpose of Data Processing

We process personal information for the following purposes:

• to schedule, confirm, reschedule, and manage appointments;
• to provide beauty and related studio services safely and effectively;
• to assess suitability for certain treatments and maintain service records;
• to process payments, refunds, and billing-related matters;
• to communicate with you about bookings, service updates, promotions, and customer support;
• to respond to inquiries and provide requested information;
• to maintain business records and comply with legal, tax, accounting, and regulatory obligations;
• to detect, prevent, and address fraud, misuse, or security incidents;
• to improve our services, operations, website, and customer experience;
• to send marketing communications where permitted by law and, where required, with your consent.

4. Legal Basis for Processing

Under Canadian privacy law, we collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances and, where required, with your knowledge and consent.

Depending on the context, our legal basis for processing may include:

• Consent: where you have given us express or implied consent to collect, use, or disclose your personal information.
• Contractual necessity: where processing is necessary to provide services you have requested or to take steps at your request before providing services.
• Legal and regulatory obligations: where processing is required to comply with applicable laws, tax rules, accounting requirements, or lawful requests.
• Legitimate business purposes: where processing is necessary for reasonable business purposes such as service management, security, fraud prevention, and recordkeeping, provided such use is appropriate and proportionate.

Where we rely on consent, you may withdraw it at any time, subject to legal or contractual restrictions and reasonable notice.

5. Data Sharing and Third Parties

We do not sell your personal information. We may share personal information only as necessary and only with trusted third parties, including:

• Payment processors: to process transactions securely;
• Booking and scheduling platforms: to manage appointments and reminders;
• IT, hosting, and cloud service providers: to store data and support our systems;
• Email and communication providers: to send service-related or marketing communications;
• Professional advisors: such as accountants, lawyers, auditors, and insurers;
• Government, regulatory, or law enforcement authorities: where required or permitted by law;
• Other service providers: who assist us in operating our business under appropriate confidentiality and data protection obligations.

We require third parties to protect personal information and to use it only for the purposes for which it was disclosed.

6. Data Transfer to Third Countries

Some of our service providers may store or process personal information outside Canada, including in the United States or other jurisdictions. As a result, your information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, or regulatory authorities there.

Where personal information is transferred outside Canada, we take reasonable steps to ensure it is protected by appropriate contractual, technical, and organizational safeguards consistent with the sensitivity of the information.

7. Storage Duration

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements.

Retention periods may vary depending on the type of information and the nature of the relationship. For example:

• appointment and client service records may be retained for a reasonable period to support service continuity and business administration;
• financial and tax records may be retained for the period required by applicable law;
• marketing preferences are retained until you unsubscribe or withdraw consent;
• security logs may be retained for a limited period for fraud prevention and system integrity.

When personal information is no longer required, we will securely delete, destroy, or anonymize it in accordance with our retention practices.

8. User Rights

Subject to applicable law, you may have the following rights regarding your personal information:

• Access: to request confirmation of whether we hold personal information about you and to obtain a copy of it;
• Rectification: to request correction of inaccurate, incomplete, or outdated information;
• Erasure: to request deletion of your personal information, subject to legal and legitimate retention requirements;
• Restriction: to request that we limit the use or disclosure of your information in certain circumstances;
• Data portability: where applicable, to request your information in a structured, commonly used, and machine-readable format;
• Objection: to object to certain uses of your personal information, including some forms of marketing or processing based on legitimate business purposes.

To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before responding to your request. We will respond within a reasonable time and in accordance with applicable legal requirements.

9. Withdrawal of Consent

Where our processing is based on your consent, you may withdraw that consent at any time by contacting us. For example, you may unsubscribe from marketing emails by using the unsubscribe link in the email or by contacting us directly.

Please note that withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal, and it may not prevent us from retaining information where required by law or necessary for legitimate business purposes.

10. Right to Complain

If you have concerns about how we handle your personal information, we encourage you to contact us first so we can try to resolve the issue.

You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or, where applicable, a provincial privacy regulator. If you are located in a province with its own private-sector privacy law, you may also contact the relevant provincial authority.

11. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification.

These safeguards may include:

• restricted access to personal information on a need-to-know basis;
• password protection and access controls;
• secure systems and reputable third-party service providers;
• staff awareness and confidentiality practices;
• reasonable measures to protect paper and electronic records.

No method of transmission or storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

12. Contact Information

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact:

Lumière Atelier Beauty Studio
2142 Yonge Street, Toronto, ON M4S 2A7, Canada
Email: [email protected]
Phone: +1 (416) 782-9643

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any updated version will be posted with a revised effective date, where applicable.

Your continued use of our services after changes are posted indicates your acceptance of the updated Privacy Policy, to the extent permitted by law.

Effective date: July 6, 2026