Privacy policy

Information we collect

Depending on how you interact with us, we may collect:

• Contact and booking information, such as a parent or guardian’s name, email address, phone number, service, date and time, party size, add-ons, notes, and participant details.
• Enquiry information that you choose to include in a contact form, email, or telephone call.
• Waiver information, including signer and participant names, phone numbers, digital signatures, and any optional media permission you select.
• Basic technical and usage information, such as device and browser information, IP address, referring pages, pages viewed, and interactions with the website.

Please provide only the information needed for your enquiry or visit. An adult who provides information about a child must be the child’s parent, legal guardian, or otherwise authorized to do so.

How we use information

• To respond to enquiries and provide customer support.
• To create, confirm, change, cancel, and administer appointments and visits.
• To send booking, waiver, access-link, and other service-related communications.
• To collect and administer required participation waivers.
• To protect the website, our guests, and our business, and to meet legal obligations.
• To understand website use and improve our services.

Booking or waiver completion does not enrol you in promotional email. If we offer marketing communications, we will request any consent required by law and provide a way to unsubscribe.

Where information is handled

This website does not maintain a separate customer database. Contact and appointment records are handled in GoHighLevel (also known as HighLevel or LeadConnector), our customer and booking platform. When a waiver is submitted, the signature images and waiver details are delivered to Hily’s by email; the website records only an operational waiver-completed status in GoHighLevel. Messages and attachments may remain in the relevant business mailboxes.

We also use providers for website hosting, email delivery, security, and analytics. These providers process information for us to perform their services. Information may be processed outside Canada and may therefore be subject to the laws of the country where it is processed. We may also disclose information when required by law, to protect rights or safety, or as part of a business transaction subject to appropriate safeguards. We do not sell or rent personal information.

Cookies and analytics

The customer portal uses an essential, secure session cookie so you can access and manage your booking, and this site stores your cookie-consent choice locally so it can remember your preference. If you select “Accept all,” we use Google Analytics, which uses first-party cookies and similar identifiers to provide aggregated information about website visits and interactions. Google Analytics does not load when you select “Essentials only.” Your browser can block or delete cookies and local storage, although blocking essential storage may prevent the customer portal from working. You can learn about Google Analytics’ privacy controls and browser opt-out tool on the Google Analytics privacy page.

Photos and media

Permission to use photographs or recordings for Hily’s promotional materials is optional and separate from the participation waiver. Declining media permission will not affect a booking. You may withdraw permission for future uses by contacting us, although material already published or distributed may not always be fully retractable.

Retention and safeguards

We retain records only for as long as reasonably needed to provide services, administer visits, address safety or legal matters, resolve disputes, and meet applicable accounting, insurance, and legal requirements. Provider backups and copies may follow the provider’s retention cycle.

We use reasonable administrative and technical safeguards, including encrypted website connections, restricted access, signed and expiring portal links, and secure session cookies. No internet transmission or storage system can be guaranteed completely secure.

Your choices and privacy rights

You may ask to access or correct personal information we hold about you, withdraw consent where applicable, or request deletion. We may need to verify your identity and may retain information where permitted or required for legal, safety, contractual, or administrative reasons. You may also raise a concern with the Office of the Privacy Commissioner of Canada.

Contact us

For privacy questions or requests, email info@hilysparklyspa.com, call 647-335-4055, or write to Hily’s Sparkly Spa, 207 Edgeley Blvd #5, Concord, Ontario L4K 4B5.