Privacy Policy

Effective date: August 14, 2026
Last updated: August 14, 2026

1. About This Privacy Policy

Skin Worthy (“Skin Worthy,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains:

• What personal information we collect;

• How and why we collect, use, and disclose it;

• How we protect and retain it;

• The choices and rights available to you; and

• How to contact us with questions or concerns.

This policy applies to personal information collected through our website, booking and intake processes, in-clinic interactions, telephone calls, email, text messaging, and other interactions with Skin Worthy.

Personal health information may also be subject to Ontario’s Personal Health Information Protection Act, 2004 (“PHIPA”). Other personal information may be subject to applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”), where applicable.

2. Personal Information We Collect

Depending on how you interact with Skin Worthy, we may collect the following categories of personal information:

Contact and identification information

• First and last name;

• Mailing address;

• Email address;

• Telephone or mobile number;

• Date of birth; and

• Other information used to identify or communicate with you.

Appointment and service information

• Appointment dates and times;

• Booking, cancellation, and attendance history;

• Services requested or received;

• Communication preferences; and

• Information you provide when contacting our team.

Personal health information

When necessary to assess your eligibility for, recommend, or provide services, we may collect information concerning your health, medical history, medications, allergies, previous treatments, photographs, treatment plans, consent forms, and clinical outcomes.

Personal health information is collected, used, disclosed, retained, and protected in accordance with applicable health privacy requirements.

Payment and transaction information

We may collect information about purchases, deposits, refunds, payment status, and transaction history. Payment-card information may be processed by our payment service providers. Skin Worthy does not necessarily receive or retain complete payment-card details.

Communications and consent records

We may retain:

• Emails and messages exchanged with you;

• Telephone or in-person communication records;

• SMS and email consent records;

• The date, time, source, and method of consent;

• Unsubscribe and communication-preference requests; and

• Customer-service inquiries.

Website and technical information

When you visit our website, we and our service providers may automatically collect limited technical information, including:

• Internet Protocol address;

• Browser and device information;

• Pages viewed and links selected;

• Date and time of access;

• Referring website;

• Approximate location derived from an IP address; and

• Cookie, analytics, and similar technology data.

3. How We Collect Information

We may collect personal information:

• Directly from you;

• Through our website and online forms;

• Through online or in-clinic booking and intake processes;

• During consultations, appointments, and treatments;

• Through telephone, email, or text-message communications;

• When you subscribe to marketing communications;

• When you provide written or verbal consent;

• Through patient-management, booking, payment, communications, and website service providers; or

• From another person authorized by you or otherwise permitted by law.

4. How We Use Personal Information

We may use personal information to:

• Schedule, confirm, manage, cancel, or reschedule appointments;

• Provide appointment reminders and scheduling updates;

• Respond to questions and provide customer support;

• Assess suitability for services and provide treatment;

• Create and maintain patient and client records;

• Process payments, deposits, refunds, and transactions;

• Provide information you request;

• Operate and improve our website, services, and business;

• Maintain the safety, security, and integrity of our systems;

• Manage consent and communication preferences;

• Send marketing or promotional communications where we have the necessary consent or are otherwise permitted by law;

• Detect, investigate, and prevent fraud, misuse, or unlawful activity;

• Establish, exercise, or defend legal rights;

• Comply with professional, regulatory, tax, accounting, insurance, and legal obligations; and

• Fulfil other purposes disclosed to you at or before the time of collection.

We limit our collection, use, and disclosure of personal information to purposes that a reasonable person would consider appropriate in the circumstances.

5. Consent

We obtain consent for the collection, use, and disclosure of personal information when required by law. Consent may be express or implied depending on the circumstances, the sensitivity of the information, and your reasonable expectations.

Where personal information is sensitive or is used for a purpose that is not necessary to provide a requested service, we will seek express consent when required.

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may affect our ability to provide certain services or communicate with you. Withdrawal does not affect collection, use, or disclosure that occurred lawfully before consent was withdrawn.

Consent to receive promotional email or SMS messages is not a condition of purchasing a product or service.

6. SMS and Mobile Messaging Privacy

When you provide your mobile number and consent to receive text messages from Skin Worthy, we may use that information to send appointment confirmations, reminders, scheduling updates, responses to your inquiries, and other messages covered by your consent.

Message frequency varies. Message and data rates may apply. You may reply HELP for assistance or STOP to unsubscribe at any time.

No mobile information will be sold or shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent will not be shared with third parties, except messaging service providers and telecommunications carriers solely as necessary to operate and deliver the SMS program.

All other disclosure categories in this Privacy Policy exclude text-messaging originator opt-in data and consent. This information will not be provided to third parties for their independent marketing or promotional purposes.

For additional information, please review our SMS Terms and Conditions.

7. Email and Marketing Communications

Where required, Skin Worthy obtains consent before sending commercial electronic messages.

Marketing emails contain an unsubscribe mechanism. You may withdraw your consent by selecting the unsubscribe link in an email or contacting us using the information below.

Unsubscribing from marketing communications does not prevent us from sending non-promotional communications necessary to administer an appointment, respond to a request, complete a transaction, or meet a legal obligation.

8. How We Disclose Personal Information

We do not sell personal information.

We may disclose personal information in the following limited circumstances:

Employees and authorized representatives

Information may be available to Skin Worthy employees, health professionals, contractors, and authorized representatives who require it to perform their duties. Access is limited according to role and operational need.

Service providers

We may use service providers to support activities such as:

• Website hosting;

• Appointment booking;

• Patient and client record management;

• Payment processing;

• Email and text-message delivery;

• Data storage and backup;

• Analytics;

• Information technology and security; and

• Professional, accounting, insurance, or legal services.

Service providers are permitted to process personal information only for authorized purposes and are expected to protect it appropriately.

As stated above, mobile information and SMS opt-in consent will not be shared with third parties or affiliates for their marketing or promotional purposes.

Health-care purposes

Where permitted by PHIPA or other applicable law, personal health information may be disclosed to health-care providers or other authorized persons for purposes connected with providing or assisting in the provision of health care.

Legal and regulatory purposes

We may disclose information when reasonably necessary to:

• Comply with a subpoena, court order, regulatory requirement, or applicable law;

• Respond to a lawful request from a government, regulator, law-enforcement agency, or professional body;

• Investigate suspected fraud, misuse, or unlawful activity;

• Protect the rights, safety, or property of Skin Worthy or another person; or

• Establish, exercise, or defend legal claims.

Business transactions

Personal information may be disclosed as permitted by law in connection with a proposed or completed business transaction, such as a financing, sale, reorganization, merger, or transfer of all or part of the business. Appropriate confidentiality and privacy protections will be required.

Mobile information and SMS opt-in consent will not be transferred for the recipient’s independent marketing or promotional use.

9. Processing Outside Canada

Some service providers may process or store personal information outside Ontario or Canada. When information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies, or government authorities in accordance with those laws.

We use contractual, organizational, and technical measures appropriate to the circumstances to protect information handled by our service providers.

You may contact us for additional information about our use of service providers outside Canada.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

• Enable website functionality;

• Remember preferences;

• Understand website traffic and usage;

• Maintain security;

• Improve website performance; and

• Support analytics or advertising where permitted.

You can manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

Where required, we will obtain consent before using non-essential cookies or similar technologies.

11. Retention and Disposal

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected and to satisfy applicable legal, regulatory, professional, accounting, insurance, and operational requirements.

Retention periods vary depending on the nature and sensitivity of the information and the requirements that apply to it. When information is no longer required, we securely delete, destroy, or anonymize it, subject to applicable retention obligations.

12. Safeguards

Skin Worthy uses reasonable administrative, technical, and physical safeguards appropriate to the sensitivity and volume of the information in our custody or control. These measures may include:

• Role-based access controls;

• Password and account-security measures;

• Encryption where appropriate;

• Secure storage and disposal procedures;

• Confidentiality obligations;

• Staff privacy and security training;

• System monitoring and maintenance; and

• Policies for responding to privacy and security incidents.

No system or method of transmission is completely secure. While we take reasonable steps to protect personal information, we cannot guarantee absolute security.

If a privacy breach occurs, we will investigate, contain, document, and provide notifications where required by applicable law.

13. Accuracy

We take reasonable steps to keep personal information accurate, complete, and current for the purposes for which it is used.

Please contact us if your personal information changes or if you believe information in our records is inaccurate.

14. Access and Correction

Subject to applicable legal restrictions, you may request:

• Access to personal information held about you;

• Information about how it has been used or disclosed; or

• Correction of inaccurate or incomplete information.

We may need to verify your identity before processing a request. In some circumstances, the law permits or requires us to refuse access to all or part of a record. If we refuse a request, we will explain the reason when legally permitted.

Requests involving personal health information will be handled in accordance with PHIPA and other applicable requirements.

15. Children and Capacity

We do not knowingly collect personal information from children through our website without appropriate authorization.

Where an individual is unable to provide legally valid consent, consent may be obtained from a parent, guardian, or other authorized substitute decision-maker in accordance with applicable law.

16. Third-Party Websites and Services

Our website may contain links to websites, booking platforms, payment services, social networks, or other services operated by third parties.

This Privacy Policy does not govern the privacy practices of independent third parties. We encourage you to review their privacy policies before providing personal information.

17. Complaints and Questions

You may contact our Privacy Officer with questions, concerns, access or correction requests, consent withdrawals, or privacy complaints.

We will review and respond to privacy concerns in accordance with applicable law. If you are dissatisfied with our response, you may have the right to contact the Information and Privacy Commissioner of Ontario or the Office of the Privacy Commissioner of Canada, depending on the circumstances.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices, services, technologies, or legal obligations.

The updated version will be posted on this page with a revised “Last updated” date. Where required, we will provide additional notice or obtain consent before applying a material change to previously collected information.

19. Contact Information

Privacy Officer
Skin Worthy
648 The Queensway
Etobicoke, Ontario M8Y 1K7
Canada

Email: management@skinworthy.ca
Telephone: (647) 350-7546