ARCH & BARE — Privacy Policy

Draft for review before publication

ARCH & BARE respects your privacy. This Policy explains how we handle personal information when you visit our website, contact us, request an appointment, or receive our microblading, lip blushing, or brow lamination services.

1. Information we collect

Depending on how you interact with us, we may collect:

- Contact and enquiry information: your name, email address, phone number, and information you choose to include in a message.
- Booking and service information: appointment details, service preferences, communications, and records of services provided.
- Consultation information: relevant allergies, medications, skin conditions, previous treatments, and other information needed to assess suitability or provide your service. We explain the purpose of this collection and obtain appropriate consent.
- Consent and treatment records: consent forms, aftercare communications, and photographs where appropriate and separately agreed.
- Transaction information: amounts paid, payment status, and receipts. Payment providers may collect payment credentials under their own privacy terms.
- Website information: technical details such as IP address, browser type, device information, pages visited, and cookie identifiers, depending on the technologies enabled on our website and your choices.

Please do not include detailed health information or payment card details in a general website enquiry. We will explain an appropriate way to provide information needed for your consultation or payment.

2. Why we use your information

We use personal information for purposes explained at collection, including responding to enquiries, arranging appointments, assessing treatment suitability, delivering services, maintaining relevant records, providing aftercare, processing payments, and addressing concerns.

We may also use appropriate website information to maintain security, troubleshoot problems, and understand website performance. Optional analytics or advertising uses will be explained and handled with consent where required.

We will not use sensitive consultation information for unrelated advertising. Marketing communications require an appropriate legal basis and, where required, your consent.

3. Consent and your choices

We seek consent appropriate to the information and purpose involved. Sensitive information and identifiable promotional photographs require particular care and appropriate express consent.

You may withdraw consent for an optional use by contacting us. Withdrawal does not undo processing already lawfully completed, and some records may need to be retained to meet legal obligations. We will explain any effect on services if information essential to providing them is withheld.

4. Photographs

Consent to photographs for consultation or treatment records is separate from consent to promotional use. We will obtain specific permission before publishing identifiable client images on our website, social media, or advertising. You can decline promotional use without affecting your access to treatment.

Contact us if you wish to withdraw permission for future promotional use. We will address the request and explain any limits involving material already distributed or independently copied by others.

5. Sharing and service providers

We share only information reasonably necessary for the relevant purpose, with appropriate safeguards. Recipients may include authorized staff, website and hosting providers such as Wix, booking or communications providers, payment processors, and professional advisers where needed.

We may disclose information where required by law or where otherwise legally permitted to address a security incident, fraud, or a legal claim. We do not sell client personal information.

Some providers may process or store information outside Canada. Information processed in another country may be subject to that country's laws and lawful access requests. Contact us for information about the providers used for your interaction.

6. Cookies and similar technologies

Our website may use cookies and related technologies to support essential functions, security, preferences, analytics, or advertising, depending on the features enabled.

Where optional cookies require consent, we will provide a way to make that choice before enabling them. You can also manage cookies through your browser settings; blocking some cookies may affect website functionality. Any cookie choices presented on the website should describe the actual tools in use.

7. Marketing messages

Where you have opted in or another lawful basis applies, we may send updates or promotional messages. You can unsubscribe using the instructions in the message or contact us directly. Essential appointment and service messages are separate from promotional subscriptions.

8. Retention and safeguards

We keep personal information only as long as reasonably necessary for the stated purpose and applicable legal, accounting, or recordkeeping requirements. We then securely delete it or remove identifying details where appropriate.

We use safeguards appropriate to the sensitivity of the information, including restricting access to people who need it for their duties. No online system is completely risk-free. We will respond to a privacy or security incident in accordance with applicable law.

9. Access, correction, and complaints

You may request access to your personal information, ask for corrections, or raise a privacy concern through the ARCH & BARE Contact page. We may need to verify your identity using proportionate measures. We will respond within applicable legal time limits and explain any lawful restriction or refusal.

If a concern remains unresolved, you may contact the Office of the Privacy Commissioner of Canada or another applicable privacy authority. This Policy does not limit your legal rights.

10. External websites

Links to Instagram, external booking tools, payment services, or other websites may take you to services with their own privacy practices. Review their policies before providing information. ARCH & BARE remains responsible for its own handling of information.

11. Changes and contact

We may update this Policy to reflect changes in our practices or legal requirements. The published version will show its effective or last-updated date. A new purpose requiring consent will be explained before information is used for that purpose.

For privacy questions, requests, or complaints, contact ARCH & BARE through the contact details or enquiry form on our website and mark your message Privacy Request.