Privacy Policy.

Revelle Med Spa (referred to in this Privacy Policy as “we,” “us,” and “our”) is a medical aesthetics practice in Vaughan, Ontario.

Our website is revellemedspa.com.

The practice provides medical aesthetics services through a Registered Practical Nurse (RPN), together with any other regulated health professionals involved in your care as applicable.

Personal health information collected in connection with clinical services is handled in accordance with Ontario’s Personal Health Information Protection Act, 2004 (PHIPA) and the professional obligations applicable to the regulated health professionals involved in your care. Depending on the services provided and the role of the regulated health professionals involved in your care, responsibility for the custody or control of personal health information may rest with one or more regulated health professionals or entities involved in providing your care. Questions, access requests, correction requests, and privacy concerns relating to your personal health information may be directed to us using the contact information in Section 12.

For personal information that is not personal health information, such as general inquiries, newsletter signups, and information submitted through this website, we seek to handle that information in accordance with applicable Canadian privacy law, including PIPEDA where applicable.

We collect only the information reasonably necessary to provide safe and effective services, respond to inquiries, process consultation or booking requests, operate the practice, and meet applicable legal and professional obligations.

Personal information

• Name, date of birth, address, phone number, and email address
• Emergency contact information (if you choose to provide it)
• How you found us
• Information you submit through online booking, consultation, contact, or intake forms on revellemedspa.com
• Marketing preferences and consent choices (optional)

Personal health information

• Health history, allergies, current medications, prior treatments, and other information relevant to assessing suitability for treatment
• Assessment notes, contraindication screening, and treatment planning information
• Treatment records, which may include product details, batch or lot information, dosage, treatment site, and technique, where applicable
• Clinical photographs, where used for care purposes or collected with appropriate consent; please see Section 5
• Follow-up notes, outcomes, and communications relevant to your care

Payment information

Payments for clinic services are processed by our payment provider, Square. We do not store full credit card details on our own systems. We may retain limited transaction information, such as the amount, date, last four digits of the card, and the processor’s reference number, as provided to us.

If we later launch product sales through revellemedspa.shop, additional order, billing, shipping, and customer-service information may be collected and processed through that storefront and its service providers.

Website usage information

• IP address, browser type, pages visited, referring site, and approximate location information such as country or region

See Section 9 for details on cookies and analytics.

We use the information we collect to:

• Provide medical aesthetic consultations, treatment, and follow-up care
• Review, schedule, confirm, and remind you of consultations and appointments
• Maintain accurate and appropriate client and clinical records
• Process payments for treatments and deposits
• Communicate with you about your care, respond to inquiries submitted through our website, and, only if you choose to opt in, send you email updates, promotions, or other marketing communications
• Meet applicable legal, regulatory, and professional obligations, including obligations relevant to the College of Nurses of Ontario and PHIPA
• Detect and prevent fraud or misuse of our services

We do not sell your personal information. We do not use your information for purposes that are materially different from those described in this policy unless we are permitted or required to do so by law or we obtain any consent that may be required.

We share information only where reasonably necessary to provide services, operate the practice, or comply with legal and professional obligations, and we use contractual or other appropriate measures to protect information shared with service providers.

Other healthcare providers. We may share relevant information with another healthcare provider with your consent, or without consent where permitted or required by law, including where reasonably necessary to reduce a risk of serious harm or manage an adverse event.

Service providers. We may use service providers such as our website host, email provider, payment processor, and other vendors that help us operate the practice. These service providers are expected to protect information and use it only to provide services to us.

When required or permitted by law. We may disclose information where required or permitted by applicable law, including in response to a court order, lawful demand, or request from a regulatory body acting within its authority.

If we later launch revellemedspa.shop, purchases made through that storefront may be subject to separate or additional storefront terms, service providers, and payment processing arrangements applicable to that storefront.

Some of our service providers may process or store information outside Canada, including in the United States. When that happens, the information may be subject to the laws of the jurisdiction in which it is processed or stored, including lawful access by courts, law-enforcement agencies, or national-security authorities in that jurisdiction. We use service providers that we consider appropriate for the sensitivity of the information and the services being provided. Our current service providers include Microsoft 365 (Canada and the United States) and Square (Canada and the United States).

We may collect clinical photographs before, during, or after treatment where reasonably necessary for assessment, treatment planning, documentation, or follow-up care. Where clinical photographs form part of your care record, they are stored with the rest of your clinical information.

We will not use your image for marketing, advertising, social media, or other public-facing purposes without your separate, specific consent. Any such consent is voluntary, may be limited to particular uses, and may be withdrawn by contacting us using the information in Section 12. A withdrawal will apply going forward to uses within our control, but may not affect materials already published, shared, or redistributed by others.

If you opt in to receive marketing emails from us, you can unsubscribe at any time using the unsubscribe mechanism included in the message. Even if you withdraw your marketing consent, we may still send you service-related communications such as appointment confirmations, reminders, and information relevant to your care.

If you choose to communicate with us by email, those communications may not always be secure. Please avoid sending highly sensitive personal health information through unsecured email unless it is reasonably necessary to do so.

We retain personal health information for at least ten (10) years after the end of the client relationship or the date of the most recent visit, subject to any longer period required or permitted by applicable law and professional standards, including applicable record retention expectations relevant to the College of Nurses of Ontario.

We do not provide treatment to individuals under eighteen (18) years of age.

Personal information that is not personal health information, such as payment and transaction records, is kept for as long as reasonably necessary for business, tax, accounting, legal, and audit purposes, and then securely destroyed or de-identified where appropriate.

When information is destroyed, we use reasonable measures appropriate to its sensitivity, which may include secure shredding of paper records and secure deletion or de-identification of electronic records, subject to technical and backup limitations.

We use safeguards appropriate to the sensitivity of the information to help protect it against loss, theft, and unauthorized access, use, disclosure, copying, modification, or disposal.

• Clinical records are stored in systems with administrative, technical, and physical safeguards appropriate to the practice
• Paper records, if any, are kept in a secure location with restricted access
• Access to information is limited to persons who need it for care delivery, practice operations, or related professional responsibilities
• Our website is served over HTTPS
• We maintain business and professional protections that may include insurance coverage relevant to privacy or cyber incidents

No method of transmission or storage is completely secure. If personal health information is stolen, lost, or used or disclosed without authority, we will assess the incident and provide any notice required by PHIPA, including notice to affected individuals and to the Information and Privacy Commissioner of Ontario where required by law.

You have the right to:

• Request access to the personal health information we hold about you and receive a copy, subject to any limits or exceptions permitted by law
• Request correction of personal health information you believe is inaccurate or incomplete. If we do not make a requested correction, you may be entitled to ask that a statement of disagreement be attached to the record.
• Withdraw consent to certain collections, uses, or disclosures of your personal health information, subject to legal, clinical, and professional limitations
• Request information about certain disclosures of your personal health information, where applicable
• Make a complaint to us or to the Information and Privacy Commissioner of Ontario

We will respond to a written access or correction request within the time required by applicable law. We may require information sufficient to verify your identity before responding. A reasonable fee may apply where permitted. If so, we will tell you in advance.

This website uses cookies and similar technologies for site functionality, security, analytics, and marketing purposes. These technologies may help us understand how visitors use revellemedspa.com, improve website performance, and measure the effectiveness of our marketing.

We may use analytics tools and advertising or social-media pixels on revellemedspa.com. Where required, we will update our practices and disclosures to reflect the technologies in use.

You can manage cookies through your browser settings. Some website features may not function as intended if certain cookies are disabled, and some analytics or marketing features may not operate as expected.

Revelle Med Spa does not provide treatment to individuals under eighteen (18) years of age. We do not knowingly collect personal information directly from children through revellemedspa.com. If you believe a child has submitted personal information to us online, please contact us.

We may update this Privacy Policy from time to time to reflect changes in our practice, services, technology, or applicable law. The “Last updated” date indicates the most recent revision.

If we make material changes to this Privacy Policy, we may post an updated version on this website and take any additional steps we consider appropriate in the circumstances to bring the changes to the attention of active clients.

Privacy questions, access requests, correction requests, and consent changes should be directed to us by email at:

If you are not satisfied with our response, you may contact the Information and Privacy Commissioner of Ontario: