Effective date: May 14, 2026
Last updated: May 14, 2026
This Privacy Policy describes how Younica (“Younica”, “we”, “us”, “our”) collects, uses, discloses, and protects personal information when you visit younica.ca (the “Site”), book an appointment, or receive aesthetic services from us.
Younica is established in the Province of Quebec, Canada. We comply with the Act respecting the protection of personal information in the private sector (Quebec, “Law 25”) and the federal Personal Information Protection and Electronic Documents Act (“PIPEDA”).
1. Person responsible for the protection of personal information
The person responsible for the protection of personal information at Younica is:
Selena Loreto
Email: selena@younica.ca
2. Information we collect
We collect the following categories of personal information:
• Identification and contact information: name, email address, phone number, postal code, date of birth.
• Health and treatment-related information: skin type, medical history relevant to treatments (e.g., medications, pregnancy, photosensitivity, prior procedures), contraindications, allergies, and treatment records. This information is necessary to provide aesthetic services safely.
• Photographs: before/after photos taken at the clinic, when you consent in writing.
• Booking and service information: appointment history, services received, preferences, notes from your technician.
• Payment information: processed by Square. We do not store full credit-card numbers on our systems; we receive a transaction confirmation and partial card details from Square.
• Communications: messages you send us through the contact form, intake form, email, SMS, or social media.
• Technical information: IP address, browser type, device information, pages visited, referring URL, and similar data collected automatically when you use the Site (see Section 8 — Cookies).
3. Purposes for which we use your information
We use personal information only for the purposes for which it was collected, including to:
• schedule, confirm, modify, and remind you of appointments;
• assess your eligibility and safety for treatments (intake/contraindications);
• deliver the services you have requested;
• process payments via Square;
• maintain a treatment record as required by professional and legal standards;
• respond to inquiries submitted through our contact and intake forms;
• send you transactional messages (booking confirmations, reminders, follow-ups);
• send you marketing communications, only with your express consent, which you can withdraw at any time;
• operate, secure, and improve the Site;
• comply with our legal obligations.
4. Legal basis and consent
We collect and use your personal information with your consent. By using the Site, submitting a form, or receiving services, you consent to the practices described in this Policy. For sensitive information (health information, photographs), we request your express consent. You may withdraw your consent at any time, subject to legal and contractual restrictions; withdrawing consent may prevent us from providing certain services safely.
5. Disclosure to third parties
We do not sell your personal information. We share personal information only with service providers that help us operate, and only to the extent necessary:
• Square, Inc. — online booking and payment processing. Square Privacy Notice.
• Google LLC (Google Workspace, Calendar, Gmail) — business email and scheduling. Google Privacy Policy.
• Web hosting provider — hosting and maintenance of the Site (Hostinger).
• Analytics providers — if enabled, to understand Site usage (see Section 8).
• Professional advisors — accountants and legal counsel, where required.
• Authorities — when required by law, court order, or to protect rights and safety.
Some of these providers may store or process information outside Quebec or Canada (for example, in the United States or the European Union). Before disclosing your information outside Quebec, we perform a privacy impact assessment as required by Law 25 and put in place reasonable contractual safeguards.
6. Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations. In particular, treatment records may be retained for at least the period required by applicable Quebec professional and civil-liability rules. When personal information is no longer needed, we securely destroy or anonymize it.
7. Security
We use reasonable physical, technical, and organizational measures to protect personal information, including access controls, encryption in transit (HTTPS), strong authentication on third-party tools, and limiting access to authorized personnel on a need-to-know basis. No system is 100% secure, but we strive to protect your information and to respond promptly to any incident.
8. Cookies and tracking technologies
The Site uses cookies and similar technologies to make the Site function and, where you consent, to measure traffic. Categories include:
• Strictly necessary — required for the Site to function (e.g., session, security).
• Functional — remember your preferences (e.g., language).
• Analytics — only with your consent (e.g., Google Analytics, if enabled).
• Embedded content — third-party content such as Square booking, maps, or social-media widgets may set their own cookies.
You can manage cookies in your browser settings. Blocking cookies may affect parts of the Site.
9. Your rights
Subject to applicable law, you have the right to:
• access the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• withdraw your consent;
• request that we cease disseminating your information or de-index a link, in the conditions provided by law;
• request information about the use of automated decision-making, if any;
• receive a copy of your computerized personal information in a structured technological format (portability), where required by law;
• file a complaint with the Commission d’accès à l’information du Québec (cai.gouv.qc.ca) or the Office of the Privacy Commissioner of Canada.
To exercise these rights, contact our person responsible (Section 1). We will respond within 30 days.
10. Confidentiality incidents
If a confidentiality incident occurs that presents a risk of serious injury, we will notify the Commission d’accès à l’information and the affected individuals as required by Law 25, and we will keep an internal incident register.
11. Minors
Services that involve health information are not offered through the Site to individuals under 14 without parental consent. We do not knowingly collect personal information from children under 14 without parental consent. Treatments for minors require the consent of the parent or legal guardian.
12. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be communicated on the Site.
13. Contact
For any question or request related to your personal information, contact:
Younica — Person responsible for the protection of personal information
Selena Loreto
Email: selena@younica.ca