1.1 Context

Clinique AMÉ — hereinafter referred to as "the Clinic" — is a medical aesthetics establishment specializing in advanced rejuvenation treatments, skincare, and wellness services. In the course of its clinical activities, appointment scheduling, communications, and client relations, the Clinic processes certain personal information.

This policy aims to protect such information and to govern the way the Clinic collects, uses, discloses, retains, and destroys it. It informs any person wishing to understand how their data is handled, particularly when visiting cliniqueame.com or using one of our forms (appointment booking, consultation, contact, newsletter).

By browsing our website or using our services, you acknowledge that you have read and understood this policy and consent, when required, to the processing of your data in accordance with it.

1.2 Scope and Definitions

This policy applies to all staff, healthcare professionals, administrators, contractors, and any person providing services on behalf of the Clinic.

It covers all personal information we manage: patients, website visitors, partners, and users of our digital services.

"Personal information" means any information about a natural person that allows them to be identified directly or indirectly (e.g., name, address, phone number, email).

"Sensitive personal information" includes data for which a high level of protection is expected (e.g., medical information, treatment photos, health data).

Professional contact details are not considered personal information (e.g., work phone or address), unless they directly identify an individual.

1.3 Collection, Use and Disclosure

In the course of our activities, we may collect several types of personal information.

Purpose of Collection

Information is collected solely for the purposes outlined in this policy. Some reasons for collection include:

• Patient file management (appointment scheduling, consultations, treatment follow-up).

• Responding to requests submitted through website forms (general contact, consultation requests, treatment inquiries).

• Newsletter subscriptions.

• Web traffic analysis using anonymized data.

Purposes

Personal information may be used to:

• Communicate with patients and manage their clinical and administrative files.

• Respond to inquiries from the public and partners.

• Distribute information about our treatments, news, and events.

• Improve our website and digital tools (via anonymized data).

• Meet our legal and administrative obligations.

Information Collected

The Clinic collects information lawfully and transparently:

• Personal identifiers: name, email, phone number, date of birth.

• Treatment-related data (if necessary for service delivery).

• Anonymized browsing data (IP, device type, pages viewed).

1.3.1 Consent

The Clinic collects personal information directly from the individual concerned and with their consent, unless legally exempt. Consent may be implied when a form is voluntarily submitted.

1.3.2 Collection

We only collect information necessary for the delivery of our clinical services, appointment management, and dissemination of treatment information. Parental consent is required for any data submitted by a minor.

Collection from Third Parties

In some cases, information may be validated with a third party (e.g., referring professional, insurance company). Consent will be obtained when required by law.

1.3.3 Retention and Use

We ensure that information held is accurate and used only for the purposes for which it was collected.

Access is limited to authorized personnel whose role requires it (clinical staff, administration). Any other access requires consent.

1.3.4 Disclosure

We obtain consent before any disclosure to a third party, except as provided by law.

• Public bodies if required by law.

• Digital service providers (hosting, newsletter, CRM).

• Parties involved in an institutional or administrative transaction.

Transfer Outside Québec

Some information may transit outside Québec (web hosting, cloud tools). A privacy impact assessment is conducted under Law 25.

1.3.5 Technologies Used

Cookies

Our website uses cookies to remember language preferences and analyze site traffic.

Google Analytics

Used to improve the user experience. Data is anonymized and cannot identify an individual.

Web Forms

We collect information through our forms (contact, appointment booking, newsletter).

1.4 Retention and Destruction

The Clinic retains information for the duration necessary to fulfill its objectives:

• Contact forms: until the request is fully processed.

• Patient data: for the entire duration of clinical follow-up + minimum legal retention period for medical records.

• Newsletter data: until unsubscription.

• Anonymized browsing data: according to provider policies.

Once the retention period has elapsed, data is destroyed or anonymized.

1.5 Responsibilities

The person responsible for the protection of personal information at Clinique AMÉ oversees the application of this policy and compliance with Law 25.

1.6 Data Security

We implement appropriate measures to protect personal information: restricted access, form encryption, secure cloud systems, internal procedures.

1.7 Your Rights

Any person may:

• Request access to their information.

• Request correction.

• Withdraw their consent.

• Request the deletion or export of their data.

• Obtain a list of the information held.

Requests must be submitted in writing to the contact details below.

1.8 Complaint Handling

Any complaint regarding the protection of personal information must be sent in writing to the designated person. A response will be provided within 30 days.

1.9 Contact Information

Person responsible for the protection of personal information

Clinique AMÉ

info@cliniqueame.com

1.10 Publication and Amendments

This policy is published on our website and may be updated at any time. Changes will be indicated on this page.