Our Privacy Policy

The protection of your information is important to us

At Spa Bolton, the protection and confidentiality of your personal information is important to us. This policy explains how we collect, use, disclose, and protect your personal information in accordance with the Act respecting the protection of personal information in the private sector (Act 25).

Last update: Tuesday October 28th 2025

1. Identification of the person responsible

The Spa Bolton website is operated by Spa Bolton Inc., whose head office is located at 883 Route 245 South, Bolton-Est, Quebec, Canada.
The person responsible for the protection of personal information is:
Nancy Martin
General Manager and Privacy Officer
Email: nancy.martin@spabolton.com
Phone: (450) 292-4772, ext. 203

2. Consent and scope

By browsing our website, making a reservation, making a purchase, or communicating with us, you consent to the collection, use, and disclosure of your personal information in accordance with this policy.
We do not collect, use, or disclose your information without your consent, unless otherwise permitted by law.

3. Information We Collect

We collect only the information necessary to provide our services, including:

  • Contact information (name, address, telephone number, email address)
  • Information related to your care, preferences, or health status, when relevant
  • Payment and billing information
  • Technical information related to your use of the site (IP address, device type, browsing)

We do not knowingly collect information from individuals under the age of 14 without the consent of a parent or guardian.

4. Use of information

Your information is used to:

  • Provide and improve our services and treatments
  • Manage your reservations, files, and payments
  • Communicate with you (appointment confirmations, offers, satisfaction follow-ups)
  • Comply with our legal obligations and prevent fraud
    Recruit and manage our team members

No other use is made without your explicit consent.

5. Disclosure to third parties

Your personal information may be disclosed to third parties only when necessary to:

  • Provide a service (e.g., therapists, payment partners, IT or marketing providers)
  • Comply with a legal obligation or court order
  • Carry out a business transaction (merger, sale, or reorganization)

These third parties are contractually obligated to protect the confidentiality of your data and to use it only for the agreed-upon purposes.
We do not sell or rent your personal information.

6. Data security and retention

We implement reasonable administrative, technical, and physical security measures to protect your information from loss, theft, unauthorized access, or disclosure.
Your data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal requirements.

7. Cookies and tracking technologies

Our site uses cookies and similar technologies to improve your experience, analyze browsing, and deliver personalized content.
You can disable cookies at any time in your browser settings, but this may limit certain features of the site.
Advertising and retargeting
We use advertising retargeting tools (e.g., Google Ads, Facebook). These technologies analyze cookies to display advertisements tailored to your interests.
No personally identifiable data is shared for these purposes.
You can manage your preferences or opt out of these advertising features through your Google or Facebook account settings, or by visiting:
https://www.networkadvertising.org/choices
To learn more about social media policies:
Facebook: https://www.facebook.com/about/privacy

8. Your rights

In accordance with Act 25, you have the following rights:

  • Access your personal information and obtain a copy of it.
  • Request the correction or deletion of inaccurate or irrelevant information.
  • Withdraw your consent to the use or disclosure of your information.
  • File a complaint with the Commission d'accès à l'information du Québec if you believe your rights have not been respected.

All requests must be sent to our Privacy Officer (contact details above).

9. Policy updates

This policy may be amended to remain compliant with legislation and our practices.
The most recent version, in French, is always available on our website and comes into effect as soon as it is published.