Who we are, and who is responsible
This is the website of Derma Bar (the clinic), in Toronto, Ontario.
To write to the clinic about your privacy, the address is Derma Bar, 2145 Danforth Ave, Toronto, ON M4C 1K2.
The person to write to about anything on this page is the owner of the clinic through the front desk; the clinic's telephone number and email address are on the contact page.
Steven Lansangan, for asapcontent, answers how it works and passes anything else to the person responsible; asapcontent is the agency that built this website.
What this website keeps about you
Nothing: the site has no database and no person record, and it has no accounts.
The one thing it takes in is the enquiry form on the contact page, and it passes what you type there to the clinic without keeping a copy; the next section says how.
The clinic's own records about its clients, such as their bookings, payments and enquiries, are kept in the clinic's own system, separately from this website, and this website cannot read them.
The clinic's own privacy notice covers those records, and it is published at https://dermabar-platform.vercel.app/legal/privacy.
The enquiry form
The enquiry form on the contact page asks for your name, email and phone, and whether you would like the clinic's emails.
When you send it, the name, email and phone typed into it travel through a bridge to the clinic's own system, where the front desk sees them as an enquiry, so the clinic can reply to you.
This website keeps no copy of what you type. It records only whether a sending worked, never what was in it.
Before the form sends, Cloudflare Turnstile checks that you are a person and not an automated program. Turnstile is run by Cloudflare, a company outside Canada, so this check is a service outside Canada: while it runs, Cloudflare receives your internet address and information about your browser, and this website sends Cloudflare your internet address again to confirm the check.
To stop hearing from the clinic, or to see, correct or remove your enquiry, write to the owner of the clinic through the front desk; to stop its emails, you can also use the link in any of them.
Cookies and tracking
This website sets no cookies of its own. There is no analytics, no pixel and no tag manager on any page, and the fonts are served by this website itself, so your browser asks no other company for them.
The one piece of another company's content on the site is Cloudflare's Turnstile check on the contact page, beside the enquiry form. It runs in its own frame and may use its own cookies there, under Cloudflare's terms.
If the clinic's owner ever chooses analytics, a banner and this sentence change together.
Booking, gift cards and links to other sites
The Book button opens the clinic's booking system (Acuity today), which has its own terms; the website sees nothing of a booking.
Buying a gift card opens Square's own page, which has its own terms; the website never sees a card number.
A link to another site, such as the clinic's pages on Facebook and Instagram, the financing provider or the college, takes you to that site, under its terms. Nothing is sent to it until you follow the link, and then it is told only that you came from this website, not which page.
Where it lives
This website is hosted by Vercel. Its functions, including the one that sends the enquiry form to the clinic, run in Montreal.
One small function, which answers the old addresses of the clinic's previous website that no longer exist, runs wherever is nearest to the visitor, and it reads nothing but the address asked for.
The pages themselves are served from Vercel's network, and the website is built on Vercel's machines in Washington, in the United States.
The clinic's photographs on these pages are kept in the website's own storage at Vercel, the same company that hosts the site, and your browser fetches them from there. Like the pages, those requests reach Vercel with your internet address, and they tell it only that they came from this website, not which page.
Your rights, and how to use them
Because this website keeps nothing about you, there is nothing on it to see, correct or remove.
To see, correct or remove what the clinic holds about you, write to the owner of the clinic through the front desk.
To complain: write to the owner of the clinic through the front desk first. Then to the Office of the Privacy Commissioner of Canada, which oversees the private sector rules, or, for anything about health information held by the clinic, to the Information and Privacy Commissioner of Ontario.
Changes
This page changes when the website changes; the date below says when.
Last changed: