1. Introduction
At DIVAMAZE (hereinafter "we", "our" or "the Company"), protecting your personal information is a priority. This privacy policy describes the types of information we collect, how we use, share and protect it when you use our website, beauty services, online shop or digital platforms.
By accessing our website or using our services, you consent to the practices described in this policy. If you do not accept these terms, please do not use our services.
2. Information We Collect
2.1 Information You Provide Directly
- Identity: name, email address, phone number
- Client account: login credentials, password (encrypted), language preferences
- Booking: appointment date and time, chosen service, preferred provider, special notes
- Payment: payment information is securely processed by our payment processor Stripe. We never store your credit card numbers on our servers
- Waiver forms: electronic signature, health information relevant to the service
- Online shop: shipping address, order history
- Advertising forms: name, email, phone submitted through our lead generation forms on TikTok, Meta (Facebook/Instagram) or other advertising platforms
2.2 Information Collected Automatically
- Browsing data: IP address, browser type, operating system, pages visited, visit duration
- Cookies and similar technologies: session cookies, analytics cookies, tracking pixels (Google Analytics, TikTok Pixel, Meta Pixel)
- Geolocation data: approximate region based on IP address
2.3 Information from Third Parties
- Advertising platforms: lead data from TikTok, Meta, Google Ads
- Social media: public profile information if you sign in through Google or a social network
- Payment processor: transaction confirmation from Stripe
3. How We Use Your Information
- Provide our services: manage your bookings, process your orders, send confirmations and reminders
- Client account: create and manage your account, rewards program, appointment history
- Communication: send service notifications, order confirmations, updates and marketing communications (with your consent)
- Service improvement: analyze usage trends, optimize our website and personalize your experience
- Marketing and advertising: serve relevant ads on third-party platforms (TikTok, Meta, Google), measure campaign effectiveness
- Security: protect against fraud, unauthorized access and malicious activities
- Legal obligations: comply with applicable regulations, respond to legal requests
4. Sharing Your Information
We never sell your personal information. We may share it with:
- Service providers: Stripe (payments), SendGrid (emails), Twilio (SMS), Amazon Web Services (hosting)
- Analytics and advertising platforms: Google Analytics, TikTok Ads, Meta Ads — to measure and optimize our campaigns
- Legal obligations: competent authorities if required by law
All our service providers are bound by contractual confidentiality obligations and may only use your data for the specified purposes.
5. Cookies and Tracking Technologies
We use the following types of cookies:
- Essential cookies: necessary for the website to function (session, shopping cart, language preference)
- Analytics cookies: Google Analytics — to understand how visitors interact with our site
- Advertising cookies: TikTok Pixel, Meta Pixel — to measure campaign effectiveness and display relevant ads
You can manage your cookie preferences at any time by clicking on "Manage Cookies" in the footer of our website.
6. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services and maintain your active account
- Comply with our legal and accounting obligations (generally 7 years for tax data)
- Resolve disputes and enforce our agreements
You may request deletion of your account and data at any time by contacting us.
7. Data Security
We implement appropriate technical and organizational security measures, including:
- SSL/TLS encryption for all communications
- Password encryption with secure hashing algorithms
- Payments processed by Stripe, PCI DSS Level 1 certified
- Restricted access to personal data to authorized personnel only
- Regular backups and disaster recovery plan
8. Your Rights
In accordance with Quebec's Law 25 (Act respecting the protection of personal information in the private sector) and applicable laws, you have the right to:
- Access: obtain a copy of the personal information we hold about you
- Rectification: correct inaccurate or incomplete information
- Deletion: request the erasure of your personal data
- Withdrawal of consent: withdraw your consent to the processing of your data at any time
- Portability: receive your data in a structured and commonly used format
- Objection: object to the processing of your data for direct marketing purposes
- Complaint: file a complaint with the Commission d'accès à l'information du Québec (CAI)
To exercise any of these rights, please contact us using the information provided below.
9. Marketing and Unsubscription
We may send you marketing communications by email or SMS with your consent. You can unsubscribe at any time:
- By clicking the unsubscribe link in our emails
- By replying STOP to our SMS messages
- By contacting us directly
10. Links to Third-Party Websites
Our website may contain links to third-party websites (Instagram, TikTok, Facebook, etc.). We are not responsible for the privacy practices of these sites. We encourage you to read their respective privacy policies.
11. Protection of Minors
Our services are not intended for persons under 16 years of age. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.
12. Changes to This Policy
We reserve the right to modify this privacy policy at any time. Changes will be posted on this page with a revised update date. Your continued use of our services after changes are posted constitutes your acceptance of the revised policy.
13. Contact Us
For any questions regarding this privacy policy or to exercise your rights, please contact us:
DIVAMAZE