Privacy Policy

Last Updated: July 22, 2026


This Privacy Policy explains how Sparkle Organic Nails & Spa collects, uses, stores, shares, and protects personal information obtained through our website, booking system, social media, and in-salon interactions. By using our website or services, you consent to the practices described in this Privacy Policy.

Sparkle Organic Nails & Spa reserves the right to update this Privacy Policy at any time. The most current version will always be available on our website with an updated “Last Updated” date. Continued use of our website or services after any update constitutes acceptance of the revised policy.


1. Who We Are

Our website address is: https://sparkleorganicnails.ca

Sparkle Organic Nails & Spa
1329 Fuller Street, Unit #4
London, Ontario, Canada
Website: www.sparkleorganicnails.ca

We provide nail salon, spa, beauty, and wellness services. This Privacy Policy applies to all personal information collected through our website, online booking platform, in-salon services, social media accounts, and any other interactions with our business.


2. What Personal Data We Collect and Why

We collect personal information only when it is reasonably necessary to provide our services, operate our website, communicate with clients, and meet our legal obligations. The categories of personal data we may collect are described below.

Appointment Booking Data

When you book an appointment through our online booking platform (Belle Booking), we may collect your name, phone number, email address, preferred services, preferred technician, appointment date and time, and any notes or preferences you provide. This information is collected for the purpose of scheduling, confirming, and managing your appointment, as well as contacting you regarding your booking.

Contact Forms and Inquiries

If you contact us through a form on our website, via email, or through social media, we collect the information you provide, which may include your name, email address, phone number, and the content of your message. We retain contact inquiries for customer service, follow-up, and record-keeping purposes. We do not use contact form submissions for unsolicited marketing.

Comments

When visitors leave comments on our website, we collect the data shown in the comment form, as well as the visitor’s IP address and browser user agent string to help with spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to determine whether you are using it. The Gravatar service privacy policy is available at https://automattic.com/privacy/. After approval, your profile picture may be visible to the public in the context of your comment.

Media Uploads

If you upload images to our website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images published on the website. Sparkle Organic Nails & Spa is not responsible for any personal data contained in images uploaded by users.

Payment Information

Payment transactions are processed through third-party payment processors. We do not directly store full credit card numbers, debit card numbers, or complete payment credentials on our systems. Payment processors handle financial data subject to their own security standards and privacy policies.

Social Media Interactions

If you tag, message, or interact with Sparkle Organic Nails & Spa on social media platforms including Instagram, Facebook, or TikTok, those platforms may collect and process data about your interactions according to their own privacy policies. We may collect publicly visible information you share with us through these platforms, such as messages, photos, or tags, for the purpose of responding to you or sharing your content with your permission.

In-Salon Information

When you visit our salon, we may collect information relevant to your service, such as service history, nail condition notes, product sensitivities or allergies, design preferences, and other service-related details. This information is used to provide safe, personalized service and to improve your experience on future visits.

Technical and Website Data

When you visit our website, our hosting provider and website systems may automatically collect technical information including your IP address, browser type and version, device type, operating system, pages visited, time and date of your visit, referral source, and general geographic location. This information is used to maintain website security, improve performance, and analyze usage trends.


3. Cookies

Our website uses cookies — small text files placed on your device — to improve functionality, maintain security, and provide a better user experience. The following cookies may be present on our website:

 

WordPress Core Cookies

If you leave a comment on our site, you may opt in to saving your name, email address, and website in cookies for your convenience. These cookies last for one year.

If you visit our login page, a temporary cookie is set to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, cookies are set to save your login information and screen display choices. Login cookies last for two days and screen options cookies last for one year. If you select “Remember Me,” your login will persist for two weeks. If you log out, login cookies are removed.

If you edit or publish an article, an additional cookie is saved in your browser containing the post ID of the article you edited. This cookie contains no personal data and expires after one day.

LiteSpeed Cache Cookies

This website uses LiteSpeed Cache to facilitate faster response times and a better user experience. Caching stores a temporary duplicate copy of web pages displayed on this site. All cache files are temporary and are never accessed by any third party except as necessary to obtain technical support from the cache plugin vendor. Cache files expire on a schedule set by the site administrator. We may use QUIC.cloud services to process and cache your data temporarily. For more information, please see the QUIC.cloud Privacy Policy at https://quic.cloud/privacy-policy/.

Kadence Security Cookies

This website uses Kadence security features which may create the following cookies:

A cookie named itsec-ml-lockout-bypass may be created by magic links to enable secure login through a link sent to your email address. This cookie references session data containing the user’s ID and IP address. It automatically expires after 30 minutes.

A cookie named itsec_interstitial_browser may be created to track a user’s login process and implement enhanced security features.

Third-Party and Embedded Content Cookies

Articles and pages on this site may include embedded content such as videos, images, maps, or social media posts from other websites. Embedded content from other websites behaves in the same way as if you had visited those websites directly. These third-party websites may collect data about you, use cookies, embed additional tracking, and monitor your interaction with the embedded content, including if you have an account and are logged in to those websites.

We are not responsible for the privacy practices or cookie policies of third-party websites or embedded content providers.


4. Analytics

We may use third-party analytics tools to understand how visitors interact with our website, including which pages are visited, how long visitors stay, and where traffic originates. Analytics data is collected in an aggregated, anonymized manner where possible and is used solely to improve our website and user experience. Where analytics services are used, they operate under their own privacy policies. You may be able to opt out of analytics tracking through your browser settings or the analytics provider’s opt-out tools.


5. Security Logs

As part of our website security measures, the IP address of visitors, the user ID of logged-in users, and the username of login attempts are conditionally logged to detect malicious activity and protect the website from specific types of attacks. Logging occurs in connection with events such as login attempts, logout requests, requests for suspicious URLs, changes to site content, and password updates. This security log information is retained for 60 days and is then automatically deleted.

This site is also periodically scanned for potential malware and vulnerabilities by the Kadence Site Scanner. We do not send personal information to the scanner; however, the scanner could find personal information posted publicly, such as in comments, during a scan.


6. Who We Share Your Data With

Sparkle Organic Nails & Spa does not sell, rent, or trade your personal information to third parties for marketing purposes. We may share personal information only in the following circumstances:

Booking Platform: Appointment data is shared with our booking platform provider (Belle Booking) for the purpose of scheduling and managing appointments. Their platform operates under its own terms and privacy policy.

Payment Processors: Payment information is handled by third-party payment processors. We share only the information necessary to complete your transaction.

Website and Hosting Services: Our website hosting provider may have access to technical data as part of operating and maintaining our website and server infrastructure.

Caching and Performance Services: We use LiteSpeed Cache and QUIC.cloud services. Temporary cached data may be processed by these services to improve website performance. These services do not retain personal data beyond the caching period.

Security Services: Our website security tools, including Kadence Security and its site scanning features, may process IP addresses and login-related data for the purpose of detecting and preventing unauthorized access or malicious activity.

Spam Detection: Visitor comments may be checked through an automated spam detection service. If you request a password reset, your IP address will be included in the reset email.

Gravatar: An anonymized hash of commenter email addresses may be shared with the Gravatar service to display profile images. See https://automattic.com/privacy/.

Social Media Platforms: If you interact with us on Instagram, Facebook, or TikTok, those platforms process data according to their own privacy policies.

Legal Requirements: We may disclose personal information if required to do so by law, court order, regulatory authority, or government request, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Sparkle Organic Nails & Spa, our clients, staff, or the public.

Business Transfer: In the event of a sale, merger, acquisition, or transfer of business assets, personal information held by us may be transferred to the acquiring party as part of that transaction, subject to the same privacy protections described in this policy.


7. How Long We Retain Your Data

Comments: Comments and their metadata are retained indefinitely so that we can recognize and approve follow-up comments automatically rather than holding them in a moderation queue.

Contact form inquiries: Retained for as long as reasonably necessary to respond to your inquiry and for follow-up customer service purposes, and deleted when no longer needed.

Appointment and service records: Retained for a minimum of seven years for business, accounting, and legal purposes, or longer if required by applicable law.

Security logs: Retained for 60 days and then automatically deleted.

Cache files: Temporary. Cache files expire on a schedule set by the site administrator and may be purged at any time.

Security cookies: The itsec-ml-lockout-bypass cookie expires after 30 minutes. Other security cookies expire as described in the Cookies section above.

Registered user profiles: Retained for as long as the account is active. Users may request deletion of their account and associated personal data at any time, subject to any data we are required to retain for legal or security purposes.

Payment records: Retained in accordance with the requirements of our payment processors and applicable financial regulations.

We review our data retention practices periodically and delete or anonymize personal data when it is no longer necessary for the purposes for which it was collected.


8. What Rights You Have Over Your Data

Depending on your location and applicable privacy law, you may have some or all of the following rights regarding your personal data:

Right to access: You may request a copy of the personal data we hold about you.

Right to correction: You may request that we correct any inaccurate or incomplete personal data we hold about you.

Right to erasure: You may request that we delete personal data we hold about you, subject to any data we are obligated to retain for administrative, legal, or security purposes.

Right to withdraw consent: Where we process your data based on your consent, you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that occurred before the withdrawal.

Right to data portability: You may request an exported file of the personal data we hold about you, including data you have provided to us.

Right to object: You may object to certain types of processing of your personal data, including processing for direct marketing purposes.

If you have an account on our website or have left comments, you can request to receive an exported file of personal data we hold about you, or request that we erase personal data we hold about you. This does not include data we are obliged to retain for administrative, legal, or security purposes.

For users who register on our website, personal information provided in the user profile can be seen, edited, or deleted at any time (except the username cannot be changed). Website administrators can also see and edit this information.

To exercise any of these rights, please contact us using the contact information provided at the end of this Privacy Policy. We will respond to your request within a reasonable timeframe and in accordance with applicable law.


9. Where Your Data Is Sent

Our website is hosted and operated by third-party service providers whose servers may be located outside of Canada, including in the United States or other countries. By using our website and services, you acknowledge that your personal data may be transferred to, stored, and processed in jurisdictions outside of Canada, where data protection laws may differ from those in your province or country of residence.

Visitor comments may be checked through an automated spam detection service. Booking data may be processed on servers operated by our booking platform provider. Cached data may be temporarily processed through QUIC.cloud services. We take reasonable steps to ensure that any third-party service providers we work with provide an adequate level of protection for your personal data.


10. How We Protect Your Data

Sparkle Organic Nails & Spa takes the security of your personal information seriously. We implement a range of technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction.

These measures include website security features provided by Kadence Security, including login protection, malware scanning, and security logging; caching and performance services that operate without retaining personal data beyond the caching period; limited access to personal data on a need-to-know basis; use of reputable third-party platforms for booking and payment processing that maintain their own security standards; and regular monitoring of our website for vulnerabilities and suspicious activity.

Despite these precautions, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of personal data transmitted to or stored by our website or third-party platforms. You use our website and provide personal information at your own risk.


11. Data Breach Procedures

In the event of a data breach involving personal information we hold, Sparkle Organic Nails & Spa will assess the nature and scope of the breach, take reasonable steps to contain and address the breach, and notify affected individuals and relevant regulatory authorities where required by applicable law.

We maintain internal procedures for identifying, reporting, and responding to potential or actual data security incidents. If you believe your personal data has been compromised in connection with our website or services, please contact us immediately using the contact information at the end of this Privacy Policy.


12. Third-Party Data We Receive

We may receive limited data about users or potential clients from third-party sources, including social media platforms when you interact with our accounts, review platforms when you leave a public review, or our booking platform when appointment data is synced. We use any such data solely for the purposes of managing our business relationship with you and providing our services.


13. Automated Decision Making

Sparkle Organic Nails & Spa does not use automated decision-making or profiling processes that produce legal effects or similarly significant effects on individuals. Automated spam detection tools process comment data for the purpose of spam filtering only and do not make decisions that affect your rights or your access to our services.


14. Children’s Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13 without verifiable parental consent. Children’s salon services must be booked by a parent or legal guardian, who is responsible for any personal information provided on behalf of a minor. If you believe we have inadvertently collected personal data from a child under 13 without appropriate consent, please contact us immediately so we can take appropriate steps to delete the information.


15. Links to Third-Party Websites

Our website may contain links to third-party websites, booking platforms, social media pages, and other external resources. We are not responsible for the privacy practices, content, or policies of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit through links on our website.


16. Limitation of Liability

To the fullest extent permitted by applicable law, Sparkle Organic Nails & Spa shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of our website, the collection or use of your personal data as described in this Privacy Policy, or the acts or omissions of any third-party service providers we work with. Nothing in this Privacy Policy limits any rights you may have under applicable consumer protection or privacy legislation.


17. Applicable Law

This Privacy Policy is governed by and construed in accordance with the laws of the Province of Ontario and the applicable federal laws of Canada, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial privacy legislation. Any disputes relating to this Privacy Policy shall be resolved in the courts of the Province of Ontario.


18. Changes to This Privacy Policy

Sparkle Organic Nails & Spa reserves the right to update, modify, or replace this Privacy Policy at any time. When we make changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this Privacy Policy periodically. Continued use of our website or services after any changes are posted constitutes your acceptance of the updated Privacy Policy.


19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us:

Sparkle Organic Nails & Spa
1329 Fuller Street, Unit #4
London, Ontario, Canada
Website: www.sparkleorganicnails.ca

We will respond to all privacy-related inquiries within a reasonable timeframe and in accordance with our obligations under applicable law.