Privacy policy
Privacy Policy
Last updated: November 10, 2025
1. Introduction
BE beauty + wellness Ltd. (“BE beauty + wellness,” “we,” “our,” or “us”) operates this website and associated online store (the “Services”).
Our Services are powered by Shopify Inc. (“Shopify”), which enables us to process transactions securely and provide a curated online shopping experience.
This Privacy Policy describes how we collect, use, disclose, and protect personal information obtained through the Services or other communications with you.
In the event of any inconsistency between this Policy and our Terms of Service, this Policy shall govern with respect to the collection, processing, and disclosure of personal information.
By accessing or using any part of the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein.
2. Definitions
For the purposes of this Policy:
- “Personal Information” means information about an identifiable individual, including information that can reasonably identify you directly or indirectly.
- “Personal Health Information (PHI)” means identifying information about an individual that relates to physical or mental health, health history, care provided, or payment for care, as defined under the Personal Health Information Protection Act, 2004 (ON) (“PHIPA”).
- “Processing” includes any collection, use, storage, disclosure, or retention of Personal Information.
3. Scope and Application
This Policy applies to Personal Information collected:
- through our e-commerce website, social channels, and communications; and
- in connection with our in-clinic services, including PHI managed through our electronic medical record system (Jane EMR).
BE beauty + wellness is the data controller for information collected through our website and the health information custodian under PHIPA for PHI collected in connection with clinical care.
4. Categories of Information Collected
We may collect or process the following categories of information:
a. Identification and Contact Details – Name, address, phone number, and email address.
b. Account and Order Information – Login credentials, order history, preferences, cart and wishlist contents.
c. Payment Information – Payment method, billing address, and transaction confirmations (processed securely via Shopify Payments or other gateways; full card data is not retained by us).
d. Communications – Messages, inquiries, feedback, and related correspondence.
e. Device and Usage Data – IP address, browser type, operating system, referring URLs, and on-site interactions collected automatically through cookies and similar technologies.
f. Personal Health Information (PHI) – Medical history, treatment details, images, consents, and related health documentation collected through Jane EMR when you become a patient.
5. Sources of Information
We collect information:
- Directly from you, when you complete forms, create an account, make a purchase, or contact us;
- Automatically, when you navigate the Services (cookies, analytics, pixels);
- From service providers, including Shopify, Jane EMR, Mailchimp, and shipping or payment partners; and
- From third parties, where you have given consent or where otherwise permitted by law.
6. Purposes for Collection and Use
We use Personal Information solely for legitimate business and clinical purposes, including:
-
Provision of Services – to process orders, deliver products, schedule appointments, and maintain accounts.
-
Clinical Care – to deliver safe and effective healthcare in accordance with professional standards and PHIPA.
-
Customer Support – to respond to inquiries, fulfill requests, and resolve issues.
-
Marketing and Communications – to send newsletters, promotional materials, and service updates, subject to your consent under Canada’s Anti-Spam Legislation (CASL).
-
Security and Fraud Prevention – to authenticate users, detect fraudulent or unauthorized activity, and protect our assets.
-
Legal and Regulatory Compliance – to satisfy statutory, tax, accounting, and record-keeping obligations, and to respond to lawful requests from authorities.
-
Business Development – to evaluate, enhance, and improve our products, services, and user experience.
7. Disclosure of Information
We may disclose Personal Information only as reasonably necessary for the above purposes or as required by law, including:
- Shopify, for hosting, payment, and order fulfillment functions;
- Jane EMR, for secure storage and management of PHI;
- Service Providers and Contractors, under written confidentiality obligations, for shipping, analytics, IT, marketing, or customer-support services;
- Professional Advisers and Insurers, subject to confidentiality;
- Regulatory or Law Enforcement Authorities, where disclosure is required by applicable law or court order; and
- Successor Entities, in connection with a merger, reorganization, or sale of assets, subject to comparable safeguards.
We do not sell or lease your Personal Information.
8. International Transfers
Shopify, Jane EMR, and certain third-party processors may store or process Personal Information on servers located outside of Canada. Where such transfers occur, we ensure contractual and technical safeguards consistent with PIPEDA and PHIPA, including reliance on Standard Contractual Clauses or equivalent mechanisms ensuring comparable protection.
9. Cookies, Analytics, and Advertising
We use cookies and similar technologies to:
- maintain secure sessions and cart functionality;
- analyze site performance; and
- display tailored advertisements.
You may adjust cookie preferences through your browser settings or applicable consent banner.
Some advertising and analytics activities are conducted via Shopify’s network and third-party partners; to learn more or opt out, visit https://privacy.shopify.com.
10. Retention of Information
Personal Information is retained only for as long as reasonably necessary to fulfill the purposes described in this Policy, including compliance with legal, tax, and professional-practice requirements. Clinical PHI is retained in accordance with PHIPA and the College of Nurses of Ontario record-retention standards.
11. Security Measures
We employ administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption, access controls, and secure authentication protocols. While we maintain a robust security program, no system is infallible. Transmission of data over the Internet is at your own risk.
12. Your Rights
Subject to applicable law, you may:
- Access or request a copy of your Personal Information;
- Request correction of inaccurate or incomplete information;
- Withdraw consent to marketing communications at any time (unsubscribe links are provided in every promotional message);
- Request deletion of information, subject to legal or professional-retention obligations; and
- File a complaint with the Office of the Privacy Commissioner of Canada or the Information and Privacy Commissioner of Ontario.
Requests may be submitted by email to info@bebeautywellness.com. We may require verification of identity before responding.
13. Children’s Privacy
Our Services are intended for adults. We do not knowingly collect Personal Information from individuals under the age of majority. Parents or guardians who believe a minor has provided information may contact us to request deletion.
14. Changes to This Policy
We may amend this Privacy Policy periodically to reflect changes in law or practice. Updates will be posted on this page with a revised “Last Updated” date. Material changes will be communicated where legally required. Continued use of the Services constitutes acceptance of the revised Policy.
15. Contact Information
For all inquiries, requests, or complaints regarding this Privacy Policy or our privacy practices, please contact:
BE beauty + wellness Ltd.
Attn: Privacy Officer
150 Dunlop Street East, Suite 201
Barrie, Ontario L4M 6H1 Canada
📧 info@bebeautywellness.com 📞 (705) 503-7823
Legal Notice
This Privacy Policy is intended to comply with the Personal Information Protection and Electronic Documents Act (S.C. 2000, c. 5), Personal Health Information Protection Act, 2004 (S.O. 2004, c. 3, Sched. A), and all other applicable privacy laws of Canada and the Province of Ontario. Nothing herein limits BE beauty + wellness’s rights or obligations under those statutes.