top of page

Privacy Policies

Privacy Policy - the basics

1. Introduction

Velvet Myst (“we,” “our,” “us”) is committed to protecting your privacy and ensuring the security of your personal information.
This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website, create an account, or book services such as camouflage tattooing, PMU (lips, brows, freckles), consultations, or other aesthetic procedures.

By using this website, you consent to the practices described in this policy.

 

2. Information We Collect

We collect personal information only when necessary for booking, communication, service delivery, and compliance with Canadian and Québec privacy laws.

​

2.1 Information You Provide Voluntarily

  • Full name

  • Phone number

  • Date of birth

  • Address (optional)

  • Photos or videos for consultations

  • Login credentials (email + password)

  • Payment information (processed securely; we do not store full card numbers)

  • Medical or skin-related information for treatment eligibility

  • Signed consent forms

 

2.2 Information Collected Automatically

  • IP address

  • Device and browser information

  • Cookies and usage data

  • Pages accessed and actions taken

  • Booking and navigation behavior

 

2.3 Sensitive Information (Law 25 Compliance)

Some treatments require sensitive medical or skin information.
This is collected only with your explicit consent and stored securely.

 

3. How We Use Your Information

We use your data to:

  • Create and manage your user account

  • Process and confirm bookings

  • Communicate appointment updates and follow-ups

  • Evaluate treatment eligibility

  • Customize treatment plans

  • Process payments securely

  • Send optional marketing communications

  • Maintain safety, clinical, and procedural records

  • Improve website performance

  • Comply with legal or regulatory requirements

 

4. Legal Basis for Data Processing

We process your information based on:

  • Your consent

  • Contractual necessity (to deliver booked services)

  • Compliance with health and safety obligations

  • Legitimate interests (fraud prevention, security)

 

5. Sharing Your Information

We do not sell or rent personal information.

We may share information only with:

  • Booking and scheduling platforms

  • Secure payment processors

  • Website hosting and cloud storage providers

  • Communication systems (SMS, notifications)

  • Insurance or regulatory institutions when required

  • Legal authorities only if mandated by law

All third-party partners must comply with Canadian privacy regulations.

 

6. Data Protection Measures

We use strong security and privacy protections, including:

  • Encrypted servers and databases

  • Secure data transmission (HTTPS/SSL)

  • Access controls and authentication

  • Staff access limitations

  • Compliant data storage under Québec’s Law 25

Data Retention

  • Treatment and medical records: 7 years

  • Client accounts: retained until deletion request

  • Booking history: retained or anonymized for analytics

 

7. Cookies & Tracking Technologies

We use cookies to:

  • Enable login functionality

  • Support booking and account features

  • Improve user experience

  • Analyze website performance and traffic

Users may disable cookies in browser settings, but some features may not function properly.

 

8. Your Rights Under Canadian & Québec Privacy Laws

You may request:

  • Access to your personal information

  • Correction of inaccurate data

  • Deletion of certain information

  • Withdrawal of consent

  • Restriction of how some data is used

  • Portability of data (where applicable)

To exercise these rights, please contact us directly through the “Contact Us” section of the website.

 

9. Minors

Velvet Myst services are intended for individuals 18 years or older.
We do not knowingly collect data from minors without verified guardian consent.

 

10. International Data Transfers

Some third-party services may store data outside Canada.
We ensure all transfers comply with PIPEDA and Québec Law 25 standards.

 

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
Any changes will be posted on this page with an updated revision date.

 

12. Contact Information

For any privacy-related inquiries, requests, or questions, please use the Contact Us section on the Velvet Myst website.

bottom of page