Privacy & Patient Confidentiality Policy

This Privacy Policy applies to all services rendered by Lumé Aesthetics, including consultations, Bioline Jatò botanical skincare rituals, doctor-administered clinical injectables (such as Botox® neuromodulators and hyaluronic acid dermal fillers), autologous platelet-rich plasma (PRP) treatments, microneedling protocols, and beauty atelier artistry.

Our operations are strictly governed by Canadian privacy and healthcare compliance frameworks:

• ✦ PIPEDA (Personal Information Protection and Electronic Documents Act): Governing commercial data collection and digital privacy across Canadian private sector organizations.
• ✦ PHIPA (Personal Health Information Protection Act, Ontario): Governing the custodianship, collection, and confidential retention of personal health information by clinical practitioners.
• ✦ CPSO Medical Documentation Guidelines: Upholding clinical charting and diagnostic record preservation standards established by the College of Physicians and Surgeons of Ontario.

To provide bespoke aesthetic rituals with utmost clinical safety, Lumé Aesthetics collects specific categories of personal and health information:

Lumé Aesthetics utilizes Jane App (jane.app) as our central certified Electronic Medical Record (EMR) and appointment booking platform. Jane is designed specifically for allied healthcare and medical aesthetic practices in Canada.

• ✦ Canadian Data Sovereignty: All electronic patient charts, intake questionnaires, and appointment histories are hosted on secure Canadian cloud infrastructure located in Montreal and Toronto.
• ✦ SOC 2 Type II Certified: Jane App undergoes annual third-party security audits verifying enterprise-grade data encryption (AES-256 at rest, TLS 1.3 in transit).
• ✦ Patient Portal Sovereignty: Through your Jane App guest account, you maintain the autonomous ability to review upcoming appointments, access receipts, and update contact disclosures.

Medical aesthetics is an inherently visual discipline. To ensure anatomical accuracy, monitor tissue healing, and tailor dosing, clinical photography is standard practice during medical assessments.

We collect and process your personal information strictly for legitimate, declared clinical and sanctuary administrative purposes:

• ✦ Diagnostic Care Formulation: Formulating bespoke Bioline Jatò 20% AHA Glycolic peel concentrations, Aqua Luxe hydration matrices, and individualized neuromodulator dosing maps.
• ✦ Safety & Contraindication Screening: Pre-screening for blood-thinning medications, active cold sores, dermal infections, or neuromuscular disorders prior to clinical treatments.
• ✦ Unhurried Concierge Communications: Dispatching appointment confirmations, personalized pre-treatment preparation monographs, and post-procedure aftercare instructions.
• ✦ Statutory Legal Compliance: Fulfilling Ontario provincial health archiving guidelines and College of Physicians and Surgeons of Ontario regulatory expectations.

Lumé Aesthetics does not sell, rent, monetize, or trade guest personal information under any circumstance. Disclosures are made strictly on a need-to-know basis under binding confidentiality covenants:

• ✦ Attending Healthcare Practitioners: Licensed physicians, registered nurses, and certified medical aestheticians directly administering your clinical rituals.
• ✦ Certified Medical Laboratories: Authorized Canadian laboratory facilities in the event of specialized autologous PRP preparation or pathology diagnostics.
• ✦ Emergency Medical Services: In the improbable event of an acute medical emergency during treatment, relevant health history will be communicated to first responders.
• ✦ Legal & Regulatory Mandates: When strictly required by court subpoena, statutory health reporting obligations, or public health directives.

We employ multi-layered security controls to protect guest records from unauthorized access, alteration, disclosure, or destruction:

In accordance with the College of Physicians and Surgeons of Ontario (CPSO) and PHIPA regulations, aesthetic medical charts and procedure notes are retained for a minimum of ten (10) years following the date of the last treatment entry. In the case of minor patients, records are retained for ten years past the patient’s eighteenth birthday.

Upon expiration of the statutory retention period, all digital records are permanently wiped utilizing cryptographic file erasure standards, and any physical documentation is shredded by certified confidential disposal services.

Our website (lumeaesthetics.co) uses minimal, privacy-conscious technologies to provide a seamless browsing experience:

• ✦ Essential Aesthetic Preferences: Local storage cookies that memorize your luxury theme preference (Porcelain light mode vs. Plum Noir dark mode).
• ✦ Aggregated Performance Metrics: Anonymized page latency and route navigation telemetry to maintain ultra-fast server response times.
• ✦ No Invasive Tracking: We do not engage in third-party data broker profiling, cross-context behavioral tracking, or unauthorized location scraping.

Under Canadian and Ontario privacy laws, you possess fundamental rights regarding your health data:

• ✦ Right to Inspect & Copy: You may request access to view your aesthetic medical charts and photographic records upon written request.
• ✦ Right to Rectification: If you believe your personal coordinates or clinical notes contain factual inaccuracies, you may submit an amendment request.
• ✦ Right to Withdraw Consent: You may withdraw consent for optional marketing communications or transformation imagery releases at any moment.
• ✦ Right to Inquire or Complain: You have the right to lodge an inquiry with our Privacy Custodian or escalate concerns to the Information and Privacy Commissioner of Ontario (IPC) (ipc.on.ca).