Privacy Policy

Introduction

Orchid + Sage Aesthetics and Wellness ("we," "us," or "our") is committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Nova Scotia, Canada.

This policy describes how we collect, use, and protect your personal information when you visit our website or contact us about our services.

Information We Collect

We collect personal information you provide directly, such as:

• Your name and contact information (email address, phone number) when you complete a contact form or book an appointment
• Information about the services you are enquiring about
• Your preferred appointment type (in-clinic or mobile)

We do not collect sensitive health information through our website contact form. Health details are discussed privately at your consultation.

We may also collect basic technical information automatically, including browser type, device type, pages visited, and IP address (anonymized where possible). This site does not currently use third-party analytics or tracking scripts. If analytics are added in future, this policy will be updated and you will be notified.

How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and help you find the right service or appointment
• Manage your appointment bookings (through our booking system, Jane)
• Send you appointment confirmations and follow-up communications you have requested
• Comply with legal and regulatory obligations applicable to a regulated healthcare practice in Nova Scotia

We do not sell your personal information to third parties, and we do not use it for unsolicited marketing.

Marketing Communications (CASL)

Under Canada's Anti-Spam Legislation (CASL), we will only send you commercial electronic messages if you have given your express or implied consent. You may withdraw your consent at any time by contacting us at kfletcher_nurseinjector@outlook.com or by using the unsubscribe link in any marketing email you receive from us.

Our basic contact form does not collect a marketing opt-in. If a newsletter or promotional communication is introduced in future, a separate, explicit consent mechanism will be provided.

Third-Party Services

Our website and operations may use the following third-party services that may collect or process data:

• Jane App (booking system): Appointment bookings are managed through Jane, a Canadian healthcare booking platform. Jane's own privacy policy governs how your booking data is handled.
• Contact form delivery: Messages sent through our website contact form are transmitted over HTTPS to a form-delivery service operated for us by our website provider and hosted on Amazon Web Services in the Canada (Central) region, which forwards your message to our email. Your submission is used only to respond to your enquiry.
• Hosting provider: Our website is hosted by a third-party provider. Standard server logs may be collected by the hosting environment.
• Google Maps: Our contact and location pages link to Google Maps (no iframe embedded). Clicking the link takes you to Google's platform, which is governed by Google's privacy policy.

This site does not currently embed Google Fonts (fonts are self-hosted), Google Analytics, or advertising scripts. We do not use cookies for tracking or analytics at this time. Functional session cookies, if set by the booking system, are governed by that system's privacy policy.

Data Storage and Security

Your data is stored securely. We use industry-standard HTTPS encryption for data in transit. How long we keep your information depends on what it is:

• Contact enquiries (email, phone, or this site's contact form): kept while we respond to your enquiry and for up to 12 months afterward, then deleted, unless your enquiry leads to an ongoing care relationship.
• Booking and appointment records: held within the Jane booking platform and governed by its retention practices and our clinical record obligations.
• Clinical and healthcare records: retained as required by Nova Scotia's regulated retention requirements for health records, which take precedence over the periods above.
• Server access logs: standard hosting logs are retained by our hosting provider for a limited operational period and are not used to identify visitors.

Your Rights Under PIPEDA

You have the right to:

• Request access to the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Request deletion of your personal information, subject to legal and regulatory requirements (healthcare records may be subject to mandatory retention periods)
• Withdraw consent to the use of your personal information, where consent is the legal basis for processing
• File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

To exercise any of these rights, contact us at kfletcher_nurseinjector@outlook.com or (902) 790-4152.

Children's Privacy

Our services are intended for adults. We do not knowingly collect personal information from individuals under the age of majority in Nova Scotia without parental or guardian consent.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

Contact Us

For questions about this privacy policy or how we handle your personal information, please contact: