Privacy Policy

Updated September 2025

A health care website's privacy policy in Ontario, Canada, is primarily governed by the Personal Health Information Protection Act (PHIPA). This law outlines how health information can be collected, used, and disclosed by health information custodians and their agents. Key aspects include obtaining consent, limiting information use, and providing mechanisms for individuals to access their information and inquire about privacy concerns with the Information and Privacy Commissioner of Ontario.

Lips N Lines Plus Medical Esthetics (abbreviated as LNL hereafter) are committed to ensuring the confidentiality and security of your personal information. We also believe in transparency. This policy describes how we treat your personal data. Please read it carefully to learn more about our management of personal information and the rights you have under applicable laws.

When does this policy apply? This policy describes our practices with respect to personal information for which we are “responsible” under applicable law. This includes information collected when you visit our website.

If you provide personal information while using our website in accordance with this Privacy Policy, we will assume that you have consented to the collection, use and disclosure of that personal information in accordance with the terms set out in this Privacy Policy, unless you advise us otherwise.

Except as otherwise provided in this Privacy Policy, LNL will not sell, rent, trade, transfer or otherwise disclose your personal information, including email addresses, to third parties.

Privacy law generally requires that we obtain your consent to collect, use or disclose your personal information. Depending on the circumstances, your consent may be express or implied. Express consent would be if you have agreed to a specific action with respect to your personal information. Express consent may be given orally, electronically or in writing. Implied consent may be inferred depending on the circumstances. For example, if we indicate that we may send certain correspondence to your home address and you then provide us with your home address for that purpose, we will not normally obtain your express consent to use your home address to send you that correspondence. In these circumstances, your consent would be implied.

We will assume that you consent to the collection, use or disclosure of your personal information for a particular purpose if you voluntarily provide it for that purpose.

In addition, certain collections, uses and disclosures we wish to make of your personal information are expressly set out in this policy. Please be sure to read this policy because if you provide us with your personal information, we will assume that you consent to its collection, use and disclosure in accordance with the terms set out in this privacy policy.

You may change or withdraw your consent at any time upon reasonable notice, subject to pre-existing legal or contractual obligations, by contacting our Privacy Officer as set out below. Withdrawing consent may limit your use of the Websites and other interactions with LNL. For clarity, your ability to change or withdraw your consent is not absolute. LNL reserves the right to continue to process your personal information where required or permitted by law despite the change or withdrawal of your consent.

LNL collects personal information, including your name, date of birth, mailing address, email address, telephone number and other permanent medical data, which will be used to provide you with services or process your order and notify you as needed for additional services.

Below are some of the circumstances in which we may use your personal information without your consent. If you provide us with your personal information, we assume that you consent to these uses, unless you tell us otherwise. These circumstances include:
– using your personal information and contact information, such as your name and email address, to provide you with information about LNL and its web platforms when you request it;
– using your personal information and contact information, such as your name and email address, so that we can identify you and provide you with the products and services you request, including in connection with our websites, and to communicate with you about these products and services;
– using information about your preferences to provide you with our products and services, including in connection with our website, in accordance with those preferences;
– using information about your interactions with us, such as your service requests, instructions, comments and feedback, to help us provide products and services, including in connection with our websites, in accordance with your wishes;
– use your address to ship your order to you;
– use your personal information for the purposes for which it was provided to us and for other activities reasonably related to these purposes. For example, if you send us a question or comment by email, LNL will use your email address to respond to you. In addition, LNL may retain your message and email address as well as a copy of its response for future reference;
– analyze your personal information to help us design and improve our products and services and our websites;
– analyze your personal information to help us conduct market research and strategic planning.

Additionally, by providing your email address as part of a purchase or appointment, you authorize LNL to contact you via email in the future to inform you of special offers, new products or services, or changes to this privacy policy. You may opt out of receiving these emails at any time by clicking the unsubscribe link at the bottom of each email or message.

LNL is committed to protecting your personal information in accordance with applicable Ontario privacy laws. This section explains how we obtain, use, and manage your consent for SMS communication.

By providing your mobile phone number to LNL—whether directly, during an appointment, when making a purchase, or during account registration—you will be asked to separately provide explicit consent for:

1. Transactional SMS – Appointment confirmations, reminders, service updates, and notifications related to your existing services or account.
2. Marketing and Promotional SMS – Special offers, discounts, new service announcements, invitations to events, and other promotional communications.

Consent for marketing and promotional SMS is optional and will not affect your ability to receive services or transactional communications.

At the time your phone number is collected, you will be presented with a clear and separate consent option for marketing and promotional SMS.

• We will document your consent in our records.
• You will be informed of the purpose of the communication, the type of messages you will receive, and the possibility of withdrawal at any time.

• You may withdraw your consent for marketing and/or promotional SMS at any time by replying “STOP” to any marketing message or by contacting us using the details provided in this policy.
• Withdrawal of consent will be processed without delay, and you will receive confirmation once it is completed.
• Transactional SMS related to appointments, services, or account activity may still be sent where permitted by law and where you have not opted out of such communications.

• LNL will not share or sell your mobile phone number to third parties for their marketing purposes without your separate, explicit consent.
• All SMS communications are protected using reasonable security safeguards to prevent unauthorized access, disclosure, or misuse, in compliance with our security policies.

At LNL, we take precautions to protect your information. LNL has implemented appropriate security mechanisms to protect your information online and offline at our LNL clinic when you submit information (such as your name and email address) through the Website.

When we collect certain sensitive information (like credit card data), it is encrypted and transmitted to us over a secure channel. You can check this by looking for a closed padlock at the bottom of your browser or “https” at the beginning of the web page address.

Please note that we do not alter the Site’s data collection and use practices when your browser sends us a “Do Not Track” signal.

Our Privacy Policy may change from time to time, and any updates will be posted on this page. Unless otherwise stated, our current Privacy Policy applies to all personal information we hold about you. Your continued use of the Site will be deemed to have accepted any changes.

Before using the appointment scheduling feature of the LNL Jane website, the user must complete the registration form. During registration, the user must provide certain information (such as name and email address). This information is used to send you appointment confirmations and reminders and to inform you about products and services offered on our website and in which you have expressed an interest.

When you visit our Site, we may collect certain device-related information through technologies such as “cookies,” “log files,” “web beacons,” “tags,” and “pixels.” These technologies help us operate, improve, and personalize your browsing experience.

• Cookies are small data files stored on your device that allow us to recognize you as a returning visitor, remember your preferences (such as location), and provide a more efficient user experience.
• Log files automatically record details such as your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
• Web beacons, tags, and pixels are electronic files that help us understand how you interact with our Site and measure the effectiveness of our content and marketing.

We collect and use this information for the following purposes:

1. Functionality: To remember your settings and preferences, and to provide consistent and reliable access to the Site.
2. Analytics and Optimization: To analyze browsing patterns, measure performance, and improve the Site’s design, functionality, and content.
3. Security and Fraud Prevention: To detect and prevent fraudulent or unauthorized activity.
4. Marketing (with consent): To personalize advertising and promotional content in accordance with the preferences you have provided.

• We will request your express consent before storing or accessing non-essential cookies and similar technologies on your device.
• You can withdraw your consent or adjust your cookie preferences at any time by using our cookie management tool or adjusting your browser settings.
• You have the right to request access to, correction of, or deletion of your personal information collected through these technologies, as well as the right to know how this information is used and disclosed.

LNL may monitor your use of the Websites to ensure that they are being used and operated properly and that you are complying with the terms of use associated with them.

In addition, in certain circumstances, the law permits or requires the collection, use and disclosure of personal information without the knowledge or consent of the individual in question. We reserve the right to collect, use and disclose your personal information in these circumstances without your knowledge or consent as permitted or required by law.

When we collect, use or disclose personal information, we will make a reasonable effort to ensure that it is accurate, up-to-date and complete. To do this, we may need to ask you for additional information or verify your information. If your personal information changes, you are responsible for notifying us of these changes so that the personal information we hold remains accurate.

For legal and business purposes, we may retain your personal information for as long as is reasonably necessary. Once the appropriate retention period has expired, taking into account our reasonable legal and business requirements, your personal information will be securely destroyed or made anonymous. Please be aware that the law provides for required minimum retention periods, which LNL is required to adhere to.

From time to time, the LNL Site may request information through surveys. Participation in these surveys is entirely voluntary, and you may choose whether or not to participate and thereby disclose personal information. The information requested may include contact information (such as your name and mailing address) and demographic information (such as your postal code and age range). The data collected through surveys may be used to monitor or improve the use of and satisfaction with this Site and LNL clinic.

Upon your written request, we will provide you with:
– access to your personally identifiable information (if any) in our custody or control;
– information about the purposes for which we have used and are using your personally identifiable information in our custody or control;
– the names of the persons to whom we have disclosed or are disclosing your personal information and the circumstances in which we have disclosed or are disclosing it.

All requests may be subject to reasonable fees or charges. Where appropriate, we may require advance payment of a deposit or the full amount of the fees associated with processing a request for access to your personal information.

All requests for access must be made in writing and signed by the requester. We require sufficient information and details from the requester to verify their identity, properly locate the information, and respond to the request.

An individual’s ability to access personally identifiable information under our control is not absolute. LNL reserves the right not to disclose personal information in certain circumstances. For example, we may not disclose personal information when:
– disclosure could reasonably be expected to threaten an individual’s physical or mental health or safety;
– disclosure would reveal personal information about another individual;
– disclosure would reveal confidential business information;
or – we collected the personal information in connection with an investigation or legal proceeding.

Upon your request, we will correct errors or omissions in your personal information while it is in our custody or control. Such requests must be made in writing and signed by you. We may need sufficient information and details from the individual in question to verify their identity, correctly locate the information and respond to the request.

If you make such a request, we will do one of two things:
– correct the personal information and, if it is reasonable to do so, send a notice of correction to the third parties to whom we have transmitted the inaccurate information;
– not correct the personal information, but accompany it with a note indicating that a request for correction was requested but not made.

Corrections or edits will rarely, if ever, be made to opinions, including the opinions of experts or professionals, unlike factual information, which may be corrected if erroneous.

Please allow us 30 days to respond to any request to access your data or to modify and correct your data.

For any questions, concerns or complaints regarding our privacy policy, please write by email to Claire Warren or Jennifer Dawson, Clinic Directors, Privacy Officers at np@lipsnlines.ca

This Privacy Policy has been drafted in accordance with Canadian federal and provincial laws.