bookhair.ca is a booking service operated by Bookhair.ca ("we", "us"). This policy explains what personal information we collect, why, who we share it with, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).
1. What we collect
Information you give us
- Your first name and mobile number
- The service you are interested in
- Whether you agreed to receive offers and updates
- Booking details when you schedule a consult (date, time, your answers to booking questions)
- Messages you send us by text, WhatsApp or email, including any photos of your hair you choose to send
- Notes from your consult or visit, such as your hair history, the service agreed and its price
Information collected when you visit a salon
- Your appointment and service history, recorded in our salon booking system
Phone calls
- Calls to 647-800-1737 may be recorded and logged for quality, training and to keep an accurate record of what was agreed. You will not be recorded without being told.
Information collected automatically on this website
- Device and browser information, pages viewed, and the ad or link that brought you here (UTM tags)
- Cookies and similar tools from Meta (Facebook and Instagram), Google (Google Ads and Google Analytics) and our own site, used to measure which ads lead to bookings
2. How we use it
- To book, confirm, remind you about, and follow up on your consult or appointment
- To answer your questions and give you a plan and a price for your service
- To send you aftercare instructions and check in after your visit
- To send offers and updates, only if you have agreed (see section 4)
- To measure and improve our advertising, including telling Meta and Google when an ad led to a booking. When we do this, your phone number is converted into a coded (hashed) form first; we never give advertisers your number in readable form.
- To handle complaints, redo requests and our legal obligations
We do not sell your personal information.
3. Who we share it with
We share information only with service providers who help us run bookings and messaging, and only for the purposes above:
Some of these providers store or process information outside Canada, including in the United States. When that happens, the information may be accessible to courts and authorities in those countries.
4. Texts, emails and your consent
- Service messages about a booking you made (confirmations, reminders, aftercare, redo follow-ups) are sent because you asked us to book you.
- Offers and updates are sent only if you ticked the consent box, or where Canadian law allows us to contact existing clients. The consent box is never pre-ticked.
- Unsubscribe any time: reply STOP to any text, or use the unsubscribe link in any email. Reply HELP for help. Unsubscribing from offers does not cancel service messages about a booking you still have.
- Message frequency varies. Message and data rates may apply.
5. How long we keep it
- Leads who never book: up to 24 months after our last contact, then deleted
- Clients: for as long as you visit us and up to 24 months after your last visit, unless the law requires us to keep records longer (for example, tax records)
- Call recordings: up to 12 months [CONFIRM]
6. Your choices and rights
You can ask us to:
- Show you the personal information we hold about you
- Correct anything that is wrong
- Stop sending you offers
- Delete your information, where we are not required to keep it
Email [email protected] or call 647-800-1737. We reply within 30 days. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Cookies: you can block or delete cookies in your browser settings. The site still works for booking if you do.
7. Children
This service is for adults. A parent or guardian may book on behalf of a child, and we only collect the child's first name and service details in that case.
8. How we protect it
Access to client information is limited to team members who need it to serve you. Our providers use encryption and industry-standard security. No system is perfectly secure; if a breach creates a real risk of significant harm to you, we will tell you and report it as the law requires.
9. Changes
We may update this policy. The effective date at the top shows the latest version.