PRIVACY POLICY

Your privacy matters to us. Learn how we collect, use, and protect your personal information.

Canadian Centre of Advanced Aesthetics (CCAA)

Last updated: May 23, 2026

The Canadian Centre of Advanced Aesthetics (“CCAA”, “we”, “us”, or “our”) is committed to protecting the privacy, security, and confidentiality of the personal information of our course attendees, prospective students, clients, and website visitors.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with applicable Canadian privacy legislation, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Ontario's Personal Health Information Protection Act (PHIPA). For users located in the European Union or European Economic Area, we also acknowledge the General Data Protection Regulation (GDPR).

By using our website (the “Site”), registering for one of our courses, or otherwise engaging with our services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

1. Who We Are

The Canadian Centre of Advanced Aesthetics is a Toronto-based training provider offering hands-on continuing education courses in medical aesthetics, including Botox® and dermal filler injection techniques, business startup fundamentals, and related practical training, primarily designed for licensed healthcare professionals.

Toronto, Canada

Contact: Renee — 647-868-6072

2. Privacy Legislation We Follow

CCAA complies with all applicable Canadian privacy laws, including:

PIPEDA — Canada's federal private-sector privacy law, which governs how organizations collect, use, and disclose personal information in the course of commercial activities. We adhere to PIPEDA's ten Fair Information Principles: Accountability, Identifying Purposes, Consent, Limiting Collection, Limiting Use Disclosure and Retention, Accuracy, Safeguards, Openness, Individual Access, and Challenging Compliance.
PHIPA — Ontario's provincial health privacy law. To the extent that CCAA, our instructors, or any of our affiliated practitioners collect, use, or disclose personal health information in the course of training activities (for example, information about live models, patient case studies, or healthcare professional learners), we treat that information in accordance with PHIPA and applicable professional standards.
GDPR (where applicable) — If you access our Site or services from the European Union or European Economic Area, we recognize your additional rights under the GDPR, including the right of access, rectification, erasure, restriction, and portability.

3. Information We Collect

We may collect the following categories of personal information, depending on how you interact with us:

Contact information: name, email address, telephone number, mailing address, and emergency contact details.
Professional credentials: professional designation (e.g., RN, NP, MD, DDS), licence/registration number, regulatory college, province of practice, employer or clinic name, and years of experience. We collect this to verify your eligibility for our healthcare-professional courses.
Course registration information: course selection, dates attended, certificate of completion records, attendance, optional starter-box selections, and assessment outcomes.
Payment information: billing name and address, credit card or other payment information processed via secure third-party payment processors (we do not store full card numbers on our servers).
Live-model and case-study information: photographs or videos taken during hands-on training, before-and-after images of live models, and any health information voluntarily disclosed for safety screening prior to live-model treatment. Such information is collected only with express consent and handled in line with PHIPA where applicable.
Communications: messages, inquiries submitted through our contact form, voicemails, text messages (e.g., to our registration line at 647-868-6072), and feedback or testimonials you choose to provide.
Marketing preferences: your opt-in preferences for newsletters, course announcements, and promotional offers.
Website usage data: IP address, browser type and version, device identifiers, operating system, pages visited, referral source, and timestamps, collected automatically via cookies, pixels, and analytics tools.

4. How We Use Your Information

We collect and use your personal information for the following purposes:

To process course registrations, payments, and refunds.
To verify your professional credentials and confirm eligibility for our healthcare-professional training programs.
To deliver course materials, certificates of completion, the optional starter box, and ongoing support resources.
To communicate with you about your registration, scheduling, location logistics, and any course changes.
To respond to inquiries and provide customer service before, during, and after your course.
To send marketing communications (newsletters, new course announcements, promotions) where you have opted in. You may unsubscribe at any time.
To improve our website, course curriculum, and learner experience through analytics and feedback.
To maintain business, accounting, and tax records as required by Canadian law.
To meet our legal, regulatory, and professional obligations, including any reporting that may be required to regulatory colleges or other authorities.

5. Legal Basis and Consent

In accordance with PIPEDA, we rely on your meaningful consent to collect, use, and disclose your personal information. The form of consent we obtain depends on the sensitivity of the information:

Express consent (opt-in) is obtained for sensitive information such as health information, payment details, and any information collected from or about live models or patients.
Implied consent may be relied on for less sensitive information used for clearly identified purposes (e.g., using your email address to send you the confirmation for a course you have just registered for).

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to deliver certain services to you (for example, issuing a certificate of completion). To withdraw consent, contact us using the details in Section 13.

6. How We Share Your Information

CCAA does not sell, rent, or trade your personal information. We share your information only as described below:

Service providers: we use trusted third parties to operate our business, including payment processors, website and email hosting providers, learning management systems, customer relationship management (CRM) tools, scheduling software, email marketing platforms, and shipping providers for the optional starter box. These providers are contractually required to protect your information and use it only for the purposes we specify.
Regulatory and professional bodies: where you have requested or consented (or where required by law), we may share evidence of course attendance or completion with your regulatory college, professional association, or employer.
Legal and regulatory requirements: we may disclose personal information when required to comply with a subpoena, court order, law-enforcement request, or other legal obligation, or to enforce our terms, protect our rights, or protect the safety of any person.
Business transfers: in the event of a merger, acquisition, financing, or sale of all or part of our business, personal information may be transferred to the relevant counterparty, subject to equivalent privacy protections.

Some of our service providers may store or process information outside of Canada (for example, in the United States or the European Union). When this occurs, your information may be subject to the laws of those jurisdictions, including lawful access requests by government authorities. We take reasonable contractual and technical steps to ensure your information receives a comparable level of protection.

7. How We Protect Your Information

We maintain physical, organizational, and technical safeguards designed to protect personal information against unauthorized access, loss, theft, disclosure, copying, modification, or destruction. These include:

SSL/TLS encryption for data transmitted between your browser and our Site.
Use of reputable payment processors that are PCI-DSS compliant.
Access controls so that only authorized staff and instructors can access personal information, and only as needed.
Secure storage of physical records, with restricted access.
Confidentiality agreements with employees, contractors, and instructors.
Regular review of our information-handling practices.

No method of transmission over the internet or method of electronic storage is 100% secure. While we work to protect your personal information, we cannot guarantee its absolute security.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this Policy or as required by applicable law, professional standards, or our legitimate business needs. Examples of retention periods include:

Course registration and certification records: typically retained for at least seven (7) years to support proof of training, certification, and any regulatory inquiries.
Financial and tax records: retained for the period required under Canadian tax and accounting legislation (generally at least six years).
Marketing contact information: retained until you withdraw consent or unsubscribe, plus a short period to process the request.
General correspondence: retained as a temporary record of communication, typically for a period of two (2) years, unless a longer period is required.

When personal information is no longer required, we will securely delete, destroy, or anonymize it.

9. Your Privacy Rights

Subject to certain legal limits, you have the right to:

Access the personal information we hold about you and request a copy.
Request correction of inaccurate, incomplete, or out-of-date personal information.
Withdraw consent for future collection, use, or disclosure of your personal information (subject to legal and contractual restrictions).
Unsubscribe from marketing emails at any time by using the unsubscribe link in any email or by contacting us directly.
Request deletion of your personal information, subject to our legal retention obligations.
Make a complaint to us about how your personal information has been handled, or escalate to the appropriate regulator (see Section 12).

To exercise any of these rights, please contact our Privacy Officer using the contact information in Section 13. We will respond to your request within thirty (30) days, in accordance with PIPEDA.

10. Cookies, Analytics, and Online Tracking

Our Site uses cookies and similar tracking technologies (such as pixels and local storage) to:

Operate and secure the Site.
Remember your preferences and improve your experience.
Analyze how visitors use our Site (for example, through Google Analytics or similar tools).
Measure the effectiveness of our advertising and marketing campaigns, including on platforms such as Meta (Facebook and Instagram) and Google.

Most browsers allow you to control cookies through their settings, including blocking or deleting them. Disabling certain cookies may affect Site functionality. Where required by applicable law, we will request your consent before placing non-essential cookies.

11. Third-Party Links

Our Site may contain links to third-party websites, including social-media platforms and partner organizations. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party site you visit.

12. How to File a Complaint

If you have a concern about how CCAA has handled your personal information, please contact our Privacy Officer first (see Section 13). We take all complaints seriously and will investigate and respond within a reasonable time.

If you are not satisfied with our response, you also have the right to contact:

Office of the Privacy Commissioner of Canada — 1-800-282-1376 — priv.gc.ca
Information and Privacy Commissioner of Ontario — 1-800-387-0073 — ipc.on.ca (for complaints involving personal health information).

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our Privacy Officer:

Privacy Officer

Canadian Centre of Advanced Aesthetics

20 Eglinton Avenue West, Suite 1403

Toronto, Ontario M4R 1K8

Phone: 647-868-6072

Email: [INSERT PRIVACY EMAIL ADDRESS]

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology, legal requirements, or for other operational reasons. The “Last updated” date at the top of this Policy reflects when the most recent changes took effect.

If we make material changes, we will notify you by posting a prominent notice on our Site and, where appropriate, by direct communication. Your continued use of our Site or services after the changes take effect constitutes your acceptance of the revised Policy.