Privacy Notice
Effective Date: February 20th, 2026
Jurisdiction: Province of British Columbia, Canada
This Privacy Notice (“Notice”) describes how Chillax Spa, operated by 1386885 B.C. Ltd. (the “Company”, “Chillax Spa”, “we”, “us”, or “our”), collects, uses, discloses, safeguards, and retains personal information in accordance with the Personal Information Protection Act (British Columbia) (“PIPA”) and other applicable Canadian laws. By accessing, booking, purchasing, or otherwise using our services, you acknowledge and consent to the practices described in this Notice.
ARTICLE I – SCOPE
This Notice applies to all personal information collected in connection with in-spa services, online booking platforms (including third-party scheduling systems), gift card purchases and redemptions, retail sales, website interactions, email and SMS communications, telephone inquiries, and CCTV monitoring in public areas of our premises. This Notice does not apply to independent third-party websites or services operating under their own privacy policies.
ARTICLE II – DEFINITIONS
“Personal Information” has the meaning assigned under the Personal Information Protection Act (British Columbia) and includes information about an identifiable individual but does not include business contact information as defined under applicable legislation.
“Aggregate Information” means anonymized or de-identified data that cannot reasonably be used to identify an individual.
ARTICLE III – CONSENT
We collect, use, and disclose personal information with your consent except where permitted or required by law. Consent may be express (written or digital acknowledgment) or implied depending on the circumstances. By voluntarily providing personal information for the purpose of obtaining services, you consent to its collection, use, and disclosure as described in this Notice.
ARTICLE IV – WITHDRAWAL OF CONSENT
You may withdraw consent at any time subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent does not affect processing that has already occurred prior to withdrawal. Withdrawal may limit our ability to provide services or fulfill contractual obligations.
ARTICLE V – DATA MINIMIZATION & REASONABLE PURPOSE
We collect only the minimum personal information reasonably necessary for purposes that a reasonable person would consider appropriate in the circumstances, as required under Section 11 of PIPA. We do not collect excessive or unrelated information.
ARTICLE VI – PERSONAL INFORMATION COLLECTED & COOKIES
We may collect identifiers (name, phone, email), appointment and treatment records, transaction and gift card history, limited payment-related data, voluntarily provided health or allergy information strictly for treatment safety, communication records, digital usage information such as IP addresses and browser type, and CCTV footage in public areas. CCTV is not installed in private treatment rooms or washrooms. In addition, when you visit our Website, we, along with our third-party service providers (including online booking and customer management platforms), may automatically collect certain digital usage information through cookies, web beacons, and similar tracking technologies to enhance your user experience and streamline booking services. You can manage your cookie preferences through your browser settings.
ARTICLE VII – PURPOSES OF USE
Personal information may be used for appointment scheduling, service delivery, payment processing, fraud prevention, gift card administration, regulatory compliance, dispute resolution, internal audit, risk management, and operational improvement. We do not use personal information for unrelated purposes without additional consent.
ARTICLE VIII – DISCLOSURE
We do not sell personal information. We may disclose personal information to service providers, legal authorities where required or permitted by law, and in connection with corporate restructuring, financing, or fraud investigations. We remain responsible for personal information transferred to service providers.
ARTICLE IX – SERVICE PROVIDER SAFEGUARDS
Service providers are contractually required to safeguard personal information and implement security standards comparable to those required under PIPA. They may only use personal information for authorized purposes necessary to provide services to Chillax Spa.
ARTICLE X – CROSS-BORDER TRANSFERS
Personal information may be processed or stored outside British Columbia or Canada. We require service providers outside Canada to implement safeguards comparable to those required under PIPA. Information stored in foreign jurisdictions may be subject to the laws of those jurisdictions.
ARTICLE XI – SECURITY SAFEGUARDS
We maintain commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. Access is restricted to authorized personnel with a legitimate need to know. No security system guarantees absolute protection.
ARTICLE XII – PRIVACY BREACH RESPONSE
In the event of a material privacy breach, we will investigate, take appropriate corrective action, and where required by law notify affected individuals and regulatory authorities.
ARTICLE XIII – DATA RETENTION
Personal information is retained only as long as necessary for service provision, legal compliance, tax and accounting obligations, fraud prevention, and dispute resolution. Where personal information has been used to make a decision directly affecting you, it will be retained for at least one (1) year in accordance with Section 35 of PIPA. Retention periods may vary depending on the nature of the information and legal requirements.
ARTICLE XIV – ACCESS RIGHTS
Subject to Sections 23-29 of PIPA, you may request access to personal information we hold about you. Requests must be made in writing and include sufficient detail to identify the records sought.
ARTICLE XV – CORRECTION RIGHTS
You may request correction of inaccurate or incomplete personal information. We will respond within thirty (30) business days unless an extension is permitted by law.
ARTICLE XVI – LIMITATION OF LIABILITY
To the fullest extent permitted by applicable law, Chillax Spa shall not be liable for indirect, incidental, special, or consequential damages arising from unauthorized access or disclosure beyond our reasonable control. Nothing in this Notice limits rights under applicable privacy legislation.
ARTICLE XVII – NON-CONTRACTUAL RIGHTS
This Notice describes our privacy practices and does not create contractual rights beyond those required by applicable privacy legislation.
ARTICLE XVIII – NO WAIVER
Failure to enforce any provision of this Notice shall not constitute a waiver of such provision.
ARTICLE XIX – GOVERNING LAW
This Notice is governed by the laws of the Province of British Columbia and applicable federal laws of Canada.
ARTICLE XX – CONTACT INFORMATION
Privacy Officer
Chillax Spa (1386885 B.C. Ltd.)
#4-4361 Kingsway Burnaby, B.C. V5H 1Z9
Email: info@chillaxspa.ca
Phone: +1 (778) 868-6018
ARTICLE XXI – MINORS’ PRIVACY
Our Website and services are designed and intended for an adult audience. Chillax Spa does not knowingly collect personal information from individuals under the age of majority in British Columbia (nineteen (19) years of age) without verifiable parental or legal guardian consent. If you are under the age of nineteen (19), you may browse our Website, but you must not submit any personal information, create an account, or book appointments online without the express involvement and consent of a parent or legal guardian. In the event that we discover we have inadvertently collected personal information from a minor under the age of nineteen (19) without prior verifiable parental consent, we will take immediate and reasonable steps to delete such information from our records in accordance with our obligations under PIPA. If you believe that we might have any personal information from or about a minor without proper consent, please contact our Privacy Officer immediately at the address provided in Article XX.
