Privacy policy

Last updated: October 15, 2026

. About this policy

Clinique De Mode ("we," "us" or "our") respects your privacy. This policy explains how we collect, use, disclose

and protect personal information when you visit https://cliniquedemode.com, contact us, book appointments,

purchase products or services, or receive care from our clinic.

Personal information is information about an identifiable individual. Personal health information includes identifying

information relating to your health, health history or health care.

Our handling of information is subject to applicable Canadian and Ontario privacy laws, including the Personal

Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Ontario's Personal Health

Information Protection Act, 2004 (PHIPA). Additional treatment consent forms and clinical privacy notices may

apply to your care. This website policy does not replace consent to treatment.

2. Information we collect

Depending on how you interact with us, we may collect:

- Contact and identification information: your name, email address, telephone number, mailing address and

date of birth, where needed.

- Inquiries and communications: information you provide through forms, email, telephone, text messages,

reviews or other correspondence.

- Appointment information: booking details, requested services, appointment history and communication

preferences.

- Purchase and payment information: products or services purchased, billing and shipping details, transaction

records and information needed to process payments. Payment providers may collect payment card details

directly under their own privacy terms.

- Health and treatment information: information relevant to assessing and providing care, such as medical

history, medications, allergies, treatment goals, consent forms, clinical assessments, treatment records and

clinical photographs.

- Website information: IP address, browser and device information, pages visited, referral sources and

interactions with our website, collected through cookies and similar technologies as applicable.

- Marketing preferences: subscription status, consent records and interactions with marketing communications,

such as opens and clicks where enabled.

We collect information directly from you, through the services you use to interact with us and, where authorized or

permitted by law, from people involved in your care or acting on your behalf.

Please avoid sending detailed medical information or sensitive photographs through ordinary website inquiry

forms, social media or unencrypted email. Contact us for an appropriate way to provide that information.

3. How we use information

We use personal information for purposes relevant to your relationship with us, including to:

- Respond to questions and requests.

- Schedule appointments and send confirmations, reminders and follow-up communications.

- Assess suitability for services and provide, document and coordinate care.

- Process orders, payments, deliveries, refunds and other transactions.

- Maintain accurate client and business records.

- Send marketing communications where we have the required consent or another lawful basis.

- Operate, maintain, secure and improve our website and services.

- Understand website use and assess marketing performance, subject to applicable consent requirements.

- Prevent fraud, resolve disputes and meet legal and professional obligations.

We will explain new purposes and obtain additional consent where required before using information for those

purposes.

4. Consent and your choices

We obtain consent in a manner appropriate to the information and its intended use, except where the law permits

or requires collection, use or disclosure without consent. Visiting our website does not, by itself, constitute consent

to every use of your information.

You may withdraw consent for optional uses by contacting us, subject to legal or contractual restrictions and

reasonable notice. We will explain any consequences. For example, we may be unable to provide a treatment if

information necessary for safe care is unavailable.

Withdrawal of consent does not require us to delete records that we must retain or prevent uses or disclosures

authorized by law.

5. Booking, website and marketing providers

We use third-party services to support our operations, including:

- Shopify: to host and operate our website and support online commerce features where offered.

- Jane App: to support appointment booking and clinic management, including related client records and

communications where used.

- Klaviyo: to support marketing communications, subscription preferences and campaign measurement.

We may also use providers for payment processing, delivery, information technology and professional support.

We provide information relevant to the services they perform and require appropriate privacy and security

protections where they process information on our behalf.

These providers may also process certain information for their own purposes as described in their privacy notices.

Their involvement does not authorize unrestricted sharing of your clinical records for marketing.

6. Marketing emails and text messages

Where you have consented, or where otherwise permitted by applicable law, we may send promotions, clinic news

and information about products or services. Promotional emails include an unsubscribe option. Where promotional

text messaging is offered, follow the opt-out instructions in the message or contact us.

You may also request removal from marketing communications by emailing hello@cliniquedemode.com. We

honour unsubscribe requests within the time required by law.

Opting out of marketing does not prevent us from sending necessary appointment, purchase, safety or

care-related communications. We do not treat consent to treatment as automatic consent to promotional

messages.

7. Cookies and similar technologies

Our website and service providers may use cookies, pixels and similar technologies to operate website features,

remember preferences, measure usage and understand interactions with marketing communications. Where

advertising tracking is enabled, these technologies may also support advertising measurement or personalization,

subject to applicable consent requirements.

Some technologies are necessary for requested website functions. For optional technologies, we obtain consent

where required. You can manage cookies through your browser and through any privacy preference controls

made available on our website. Blocking cookies may affect certain features. Browser settings alone may not

control every tracking technology.

8. When we disclose information

We may disclose information:

- To authorized staff, practitioners and service providers who need it for their responsibilities.

- To other health care providers where authorized or otherwise permitted by law for your care.

- To a person you authorize to act on your behalf, after appropriate verification.

- With your consent for a specified purpose.

- Where required or permitted by law, including in response to valid legal process or to address circumstances in

which disclosure is legally authorized to protect health or safety.

- In connection with a proposed or completed business transaction, only subject to applicable legal requirements

and safeguards. Clinical records remain subject to applicable health privacy and professional requirements.

We do not disclose identifiable clinical information to unrelated businesses for their own marketing without your

express consent.

9. Clinical photographs and marketing images

Photographs taken for assessment, treatment planning or documentation form part of the clinical record where

applicable and are handled accordingly.

Permission to take or retain clinical photographs does not automatically authorize their use on our website, social

media, in advertising or in other promotional materials. We obtain separate express consent before using

identifiable client photographs or testimonials for those purposes. You may contact us to withdraw permission for

future promotional use; we will explain any practical limits concerning material already distributed.

10. Processing outside Ontario or Canada

Our service providers may store or process some information outside Ontario or Canada. Information processed in

another jurisdiction may be subject to that jurisdiction's laws and lawful access by its authorities. We remain

responsible for information handled on our behalf and use appropriate safeguards, subject to applicable

requirements for health information.

Contact us with questions about our use of service providers or processing locations.

11. Retention and security

We retain information for as long as reasonably needed for the purposes for which it was collected and to meet

legal, professional, accounting and recordkeeping obligations. Clinical records may need to be retained after your

last appointment or after you withdraw consent to optional uses.

When information is no longer required, we take reasonable steps to securely destroy it or render it

non-identifying, subject to applicable requirements.

We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the

information. No online transmission or storage system is completely secure. Where a privacy breach occurs, we

take steps to respond and provide notifications required by law.

12. Access, corrections and privacy concerns

You may contact us to request access to your personal information, request corrections, ask about our practices

or raise a privacy concern. We may verify your identity and request details needed to locate the relevant records.

Requests are handled within applicable legal timelines, subject to lawful exceptions. We will explain any applicable

fees or reasons for refusing a request, where required.

For clinical records held by an individual practitioner or another health information custodian, we will help direct

your request to the appropriate party.

You may also raise a concern with the appropriate regulator, including the Information and Privacy

Commissioner of Ontario for matters under PHIPA, or the Office of the Privacy Commissioner of Canada for

matters under PIPEDA.

13. Children and substitute decision-makers

Our website is intended for a general audience and is not designed to solicit personal information from young

children. Where we provide services to a minor or a person who requires a substitute decision-maker, we follow

applicable requirements concerning capacity, consent and authorized decision-making. Contact us if you believe a

child has provided information without appropriate authorization.

14. Third-party links

Our website may link to external websites and services. Their information-handling practices are governed by their

own policies. Please review those policies before providing personal information.

15. Changes to this policy

We may update this policy to reflect changes in our practices, services or legal obligations. We will post the

updated version with its effective date and provide additional notice or obtain new consent where required by law.

16. Contact us

For privacy questions, requests or complaints, contact:

Clinique De Mode - Privacy Inquiries

Email: hello@cliniquedemode.com

Website: https://cliniquedemode.com

Publication checks - remove this section before posting

This draft describes intended practices that must match actual operations. Before publication:

1. Confirm the legal entity operating the website and clinic, and identify the health information custodian(s)

responsible for clinical records. Add the applicable legal name, mailing address and privacy lead/contact details.

2. Confirm the Shopify features, Jane App functions and Klaviyo channels actually used, including whether online

purchases and promotional SMS are offered.

3. Have the website administrator confirm the actual cookies, pixels, analytics, advertising integrations and

consent controls. Adjust section 7 and implement any necessary controls; policy wording alone does not

implement consent.

4. Confirm provider processing locations, contractual safeguards, clinical record access, retention schedules and

breach-response practices.

5. Confirm that clinical photographs and marketing images use separate consent processes, and that clinical

information is not passed into marketing or advertising tools without appropriate authorization.

6. Check the legal scope and clinical privacy wording against the clinic's actual custodian/practitioner

arrangements. Add an effective date when approved for publication.