Privacy Policy

1. Who We Are

Grand LV Nails & Spa (“we”, “our”, or “us”) operates this website and booking service. We are committed to protecting your privacy in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25).

2. Information We Collect

When you book an appointment, we collect:

• Name — to identify your appointment
• Phone number — to confirm and communicate with you
• Email address (optional) — to send confirmations
• Notes — any special requests you provide

We do not collect payment card details, government IDs, or health information.

3. Why We Collect It

We use your information solely to:

• Confirm and manage your appointment
• Send confirmation and reminder messages
• Follow up if needed
• Maintain a record of your history for future visits

We will never sell, rent, or share your personal information with third parties for marketing purposes.

4. How We Protect Your Information

• All data is transmitted over encrypted HTTPS connections
• Access to customer records is restricted to authorized staff only
• Your contact details are masked by default in our management tools
• Our platform provider maintains SOC 2 Type II compliance

5. How Long We Keep Your Data

We retain your personal information for as long as necessary to provide our services — typically no longer than 3 years after your last appointment. You may request deletion at any time (see Section 7).

6. Cookies

This website uses only essential cookies necessary for the booking process. We do not use advertising or tracking cookies.

7. Your Rights

Under PIPEDA and Quebec Law 25, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate information
• Deletion — request that we delete your personal information
• Portability — receive your data in a structured format
• Withdraw consent — opt out of future communications

To exercise any of these rights, contact us at the email address on our contact page. We will respond within 30 days.

8. Data Breach Notification

In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada within 72 hours of becoming aware of the breach.

9. Manually Added Records

In some cases, our staff may enter your contact details directly on your behalf — for example, when you provide your information by phone or in person. We collect only what you provide voluntarily, and use it solely to manage your appointments. All rights in Section 7 apply equally to these records.

10. Contact Us

For privacy-related questions or requests, please contact us:

If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.