Legal

Privacy policy

What Panda Wellness & Aesthetics does with personal information collected through this website, and what you can ask for.

Last updated 2 October 2026. Draft for review. This policy has been written from how the website is actually set up. It has not been reviewed by a lawyer, and the items marked below still need an answer from the clinic before it goes live.

What this covers

This policy is about this website. It explains what is collected when you browse it, send a message through it, or follow it through to the booking system.

Your clinical records are a separate thing. Notes taken during treatment, intake forms completed at the clinic, and anything a practitioner records about your care are held under the clinic’s own records policy and under the professional obligations of the practitioner who treats you. They are not covered by this page.

Who is responsible

  • The clinic
    Panda Wellness & Aesthetics, 1861 17 Avenue SW, Calgary, AB T2T 5W3
  • Phone
    (587) 353-6698
  • Privacy contact
    To be confirmed before launch: the email address and the named person who handles privacy requests.

The law this follows

Alberta’s Personal Information Protection Act governs how private organisations in Alberta collect, use and disclose personal information. Where health information is held by a regulated health professional, Alberta’s Health Information Act may also apply. The clinic follows both, to the extent each one applies.

The detail

What is collected, and when

When you send a message through the contact form

Your name, your email address, your phone number if you give one, the subject you pick from the list, and whatever you write in the message. It is emailed to the clinic and it is also stored in this website’s own database.

Please do not use the contact form to send detailed medical information. It is an ordinary web form and an ordinary email inbox, not a secure medical channel. For anything clinical, call the clinic or raise it at your appointment.

When you book an appointment

Booking runs on Vagaro, a separate booking system. When you book, you are entering your details into Vagaro rather than into this website. Vagaro holds that information under its own privacy policy, on its own servers, which are outside Canada.

When you just visit

The web host records the usual server information: your IP address, which browser you used, which pages you opened and when. This is standard for any website and is used to keep the site running and secure.

Analytics and advertising

  • Google Analytics
    How people arrive at the site, which pages they read, roughly where they are and what device they use.
  • Google Ads conversion tracking
    Records when a visit that came from a Google ad later leads to a booking or a message.
  • Meta pixel
    The same, for Facebook and Instagram advertising.

These use cookies and similar technologies. They are set up to measure traffic and advertising, nothing more. What you type into the contact form is not sent to them, and no information about the treatments you ask about, book or receive is sent to them.

Cookies, and how to turn them off

A cookie is a small file a website leaves in your browser so it can recognise the browser later. This site uses two kinds: the ones WordPress needs to work, and the analytics and advertising ones described above.

  • In your browser
    Every browser lets you block or delete cookies in its settings. Blocking them does not stop you using this site.
  • Google
    You can opt out of Google Analytics with Google’s browser add-on, and change what Google uses for advertising in your Google account’s ad settings.
  • Meta
    Facebook and Instagram ad preferences are changed in your account settings on those platforms.

What the information is used for

  • Answering you
    Replying to a message, or calling you back if you asked for that.
  • Running the booking
    Making and managing appointments, and sending appointment confirmations and reminders.
  • Understanding the site
    Seeing which pages are useful and whether advertising is working.
  • Legal and professional obligations
    Keeping records the clinic is required to keep.

Your information is not used for anything else, and the clinic does not sell, rent or trade it.

Who it is shared with

Only the companies that run parts of this service, and only to the extent each one needs:

  • The website host
    Stores the website and anything the contact form saves.
  • Vagaro
    Runs the booking system and holds the booking records.
  • Google
    Receives analytics and advertising measurement data.
  • Meta
    Receives advertising measurement data for Facebook and Instagram ads.

Some of these companies store information outside Canada, including in the United States. While it is there it can be reached by the courts and authorities of that country under the laws that apply there.

Beyond this, personal information is disclosed only where the law requires it.

How long it is kept

  • Contact form messages
    To be confirmed: the clinic needs to set a period, after which messages are deleted from the website database and the inbox. Twelve months is a sensible default.
  • Analytics
    Held by Google for the retention period set in the analytics account.
  • Booking records
    Held in Vagaro for as long as the clinic keeps them as business records.
  • Clinical records
    Kept for the period the treating practitioner’s regulatory college requires. This is separate from the website.

Keeping it safe

The site runs over an encrypted connection, access to the website and the inbox is limited to people who need it, and the booking system is accessed through individual staff accounts. No system is perfectly secure, and nobody can honestly promise otherwise, but that is the standard being worked to.

What you can ask for

Under Alberta’s Personal Information Protection Act you can ask the clinic:

  • What is held
    What personal information the clinic has about you.
  • How it has been used
    What it has been used for, and who it has been given to.
  • To correct it
    To fix anything that is wrong or out of date.
  • To withdraw consent
    To stop using it, subject to the limits the Act sets and to records the clinic is required to keep.

Send the request to the privacy contact above and the clinic will respond within the time the Act allows. There is no charge for a straightforward request.

If you are not satisfied with the answer, you can take it to the Office of the Information and Privacy Commissioner of Alberta, at oipc.ab.ca.

Children

This website is not aimed at children and the clinic does not knowingly collect personal information from children through it. Treatment of anyone under 18 is arranged in person, with a parent or guardian.

Changes to this policy

If this policy changes, the new version is posted on this page and the date at the top is updated.

Getting in touch

Questions about this policy, or about personal information the clinic holds, go to the privacy contact above. You can also call the clinic on (587) 353-6698 or use the contact page.