Privacy Policy
Last updated November 8, 2026
Who we are
Atefeh Skin Lab is operated by Atefeh Sadri, operating as Atefeh Skin Lab (“we”, “us”), in British Columbia, Canada. This policy explains what personal information we collect, how we use and protect it, and the choices you have. We handle personal information in line with British Columbia's Personal Information Protection Act (PIPA).
What we collect
- Booking and contact details: your name, email address, mobile number, the treatment and time you book, and any notes you share with your booking.
- Your client record: details you give us to provide safe, appropriate care, such as your preferred name, date of birth, address, emergency contact, and information about your health and skin.
- Consent forms: your answers to health questions, your signature, and the date, time, IP address and browser used when you sign.
- Treatment records: notes and files your practitioner records about your sessions.
- Billing: invoices, payments, and insurance details when you ask us to bill your insurer or provide receipts for a claim.
- Messages: a record of the emails and text messages we send you, and anything you send us through our contact form.
- Reviews: if you write one, your rating, what you wrote, the name you chose to show with it, and whether you agreed to have it shown on this website.
How we use it
- To book, confirm, remind you of, reschedule and cancel your appointments.
- To send booking confirmations, appointment reminders, cancellation notices and consent-form links by email, and appointment reminders by text message if you agree to texts.
- To provide treatment safely, based on the health information you share.
- To invoice you, record payments, and prepare insurance receipts or claims you ask for.
- To answer questions you send us.
- To email you the day after a visit, at most once every 90 days, to ask how it went. Each email has a link to stop them.
- To show reviews you agree to share on this website, with the name you chose. Ask us any time and we'll take yours down.
- To meet our legal, tax and professional record-keeping obligations.
We only send marketing emails if you have agreed to receive them. We never use text messages for marketing, and never ask for reviews by text.
Text messages
We text you only if you agree to receive texts, by ticking the text-message box when you book online or by telling us yes when you book by phone or in person. Texts are reminders for appointments you have booked, with links to manage your booking and sign consent forms. Up to 4 messages per booking. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help. See our Terms for the full text-message terms.
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Sharing with service providers that support our messages, such as our text-messaging provider, is permitted. Apart from that, text-message opt-in data and consent are never shared with any third parties.
Who we share it with
We never sell your personal information. We share it only:
- With service providers that help us run the practice: website hosting, secure database and file storage, email delivery (Postmark) and text-message delivery (Twilio). They may use your information only to provide their service to us.
- With your insurance provider, when you ask us to submit a claim or bill them directly.
- When the law requires it, or to protect someone's health or safety in an emergency.
Some of these providers store or process information outside Canada, including in the United States, where it may be subject to the laws of that country.
Website and cookies
We don't use advertising or analytics trackers on this website. Cookies are used only to keep staff signed in to our booking system. Our hosting provider keeps standard server logs, such as IP addresses, to keep the site secure.
How we protect and keep it
Your information is sent over encrypted connections and is available only to our practitioner and staff through a password-protected system. Links we send you to manage a booking or sign a form are private to you, so please don't share them.
We keep your information for as long as we need it to care for you and to meet our legal and professional record-keeping obligations, then delete it securely.
Your choices and rights
You can ask to see the personal information we hold about you, ask us to correct it, or withdraw your consent to how we use it, subject to legal or contractual limits. Withdrawing consent may mean we can no longer provide some services. To make a request, contact us using the details below and we'll respond within the time PIPA requires.
If you're not satisfied with our response, you can contact the Office of the Information and Privacy Commissioner for British Columbia.
Changes to this policy
If we change this policy, we'll post the new version on this page and update the date at the top.