Privacy Policy

When you use our website, we may collect the following personal information:

• Contact & Booking Forms: Name, email address, phone number, preferred service, preferred date and time, and any notes you provide.
• Gift Card Purchases: Buyer name, email, and phone (optional). Recipient name and email (optional), personal message, and occasion.
• Gift Card Balance Check: Email address and a one-time verification code sent to that email.
• Automatically Collected: IP address (used solely for rate limiting to protect against abuse), pages visited, and interaction data via Google Analytics.

We use your personal information solely to:

• Process and confirm your bookings
• Deliver gift card certificates and receipts via email
• Respond to your inquiries
• Protect our website from spam and abuse (rate limiting)

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Gift card purchases are processed through Stripe, a PCI-compliant payment processor. We do not store, transmit, or have access to your credit card number. Stripe may collect payment card details, billing address, and related information in accordance with their own privacy policy: stripe.com/privacy.

All card payments are processed in Canadian Dollars (CAD) and require 3D Secure authentication.

Booking and contact form submissions are sent to us via email and are not stored in a database. We retain email correspondence as part of our normal business records.

Gift card data (card codes, balances, buyer/recipient names, emails, messages, and transaction history) is stored securely in encrypted cloud infrastructure (Upstash Redis) with automatic expiry:

• Abandoned gift card purchases: auto-deleted after 30 days
• Active gift cards: retained for up to 20 years (monetary value does not expire under Quebec law)

Rate limiting data (IP addresses) is stored temporarily and auto-deleted.

Google Analytics data is retained by Google according to their data retention policies.

We use the following third-party services that may collect or process data:

• Stripe — Payment processing (stripe.com/privacy)
• Resend — Transactional email delivery (resend.com/privacy)
• Upstash Redis — Secure data storage for gift cards and rate limiting
• Google Analytics — Website usage analytics (policies.google.com/privacy)
• Google Maps — Location display on our contact page
• Sanity CMS — Content management for our website
• Google Fonts — Font delivery for website typography

Each third-party service operates under its own privacy policy. We encourage you to review their policies for details on how they handle data.

Our website uses the following cookies:

• Google Analytics cookies (_ga, _ga_*): Used to understand how visitors interact with our website. These cookies are set by Google Analytics and last up to 2 years.
• Locale preference (localStorage): Stores your language preference (French or English) for a better browsing experience.

We do not use advertising or remarketing cookies.

Under Quebec's Act respecting the protection of personal information in the private sector (Law 25) and applicable privacy legislation, you have the right to:

• Access the personal information we hold about you
• Correct any inaccurate information
• Request deletion of your personal information
• Withdraw consent for the use of your data

To exercise any of these rights, please contact us at the email address below.

We take reasonable measures to protect your personal information:

• All data transmissions are encrypted via HTTPS/TLS
• Payment data is handled exclusively by Stripe (PCI DSS compliant)
• Gift card data is stored in encrypted infrastructure with access controls
• We do not store credit card information on our servers

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Our services are not directed to individuals under the age of 14. We do not knowingly collect personal information from children.

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

If you have questions about this privacy policy or wish to exercise your rights, please contact us:

Email: contact@soinbeauterosa.com

Website: soinbeauterosa.ca