LEGAL

Privacy Policy

How we collect, use and protect your personal information.

Last updated: September 29, 2026

Elnes Clinic (“Elnes Clinic”, “we”, “us” or “our”) operates the clinic at 3355 Yonge Street, Toronto, Ontario, and the website elnesclinic.ca. This Privacy Policy explains what personal information we collect, how we use and protect it, and the choices you have, including how we handle text messages (SMS).

We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, where it applies to personal health information, Ontario’s Personal Health Information Protection Act, 2004 (PHIPA).

1. Information we collect

Information you give us

Contact details: your name, phone number (including mobile number), email address and preferred way to be contacted.
Enquiry and booking details: the treatment you are interested in, appointment dates and times, and anything you choose to tell us in a message.
Health information: your medical history, treatment records and consent forms. We collect this in private at your appointment, not through the website. Please do not include sensitive medical details in website forms or text messages.
Payment information: when you pay for treatment. Card details are processed by our payment provider; we do not store full card numbers.

Information collected automatically

When you visit our website, we and our service providers may automatically collect technical information such as your IP address, browser type, device type, the pages you visit and the date and time of your visit. This is collected through cookies and similar technologies (see section 8).

2. How we use your information

To respond to your enquiries and messages.
To book, confirm, remind you about and reschedule appointments.
To assess whether a treatment is suitable for you and to provide safe care.
To keep accurate clinical and financial records.
To send you service messages by phone, email or text message.
With your separate, express consent, to send you news and offers about our treatments.
To operate, secure and improve our website.
To meet our legal, regulatory and professional obligations.

We collect only the information we need for these purposes, and we will ask for your consent before using it for any new purpose.

3. Text messaging (SMS)

If you give us your mobile number and agree to receive text messages (for example by ticking the consent box on a website form or booking page, or by texting us first), we will send you text messages about your enquiry and appointments. These may include appointment confirmations and reminders, rescheduling notices and replies to your questions. If you separately agree to receive marketing messages, we may also send occasional messages about our treatments and offers.

Message frequency varies.
Message and data rates may apply.
Reply STOP at any time to stop receiving messages. Reply HELP for help, or contact us at +1 888-266-4561 or hello@elnesclinic.com.
Consent to receive text messages is not a condition of purchasing any service.

Your mobile information is never shared for marketing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Our full SMS terms are set out in our Terms and Conditions.

4. How we share your information

We do not sell, rent or trade your personal information. We share it only as follows:

Service providers who help us run the clinic, such as our appointment booking, customer communication and text-messaging platform, and our email, website hosting and payment providers. They may use your information only to provide services to us, and they must protect it.
Other health professionals, only with your consent or where the law permits it (for example, if you ask us to send information to your doctor).
Where required by law, for example to comply with a court order or a regulatory body, or to protect someone’s safety.
Business transfer: if the clinic is sold or reorganised, personal information may be transferred to the new owner, who must continue to protect it under this policy.

The text-messaging restrictions in section 3 apply in all cases.

5. Where your information is stored

Some of our service providers store or process information on servers outside Canada, including in the United States. Information held outside Canada is subject to the laws of that country and may be accessed by its courts, law enforcement and national security authorities. We choose providers that protect personal information with safeguards comparable to those required in Canada.

6. How we protect your information

We use physical, administrative and technical safeguards appropriate to the sensitivity of the information, including restricted access to clinical records, password-protected systems and encrypted connections (HTTPS) on our website. Only staff who need your information to do their job can access it. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant authorities of a privacy breach where the law requires it.

7. How long we keep it

We keep personal information only for as long as we need it for the purposes above, or for as long as the law and professional record-keeping rules require. Clinical records are kept for the period required by the rules that apply to our practitioners. When information is no longer needed, we securely destroy or anonymise it.

8. Cookies and website tools

Our website uses cookies and similar technologies to make the site work, to remember your preferences, to understand how visitors use the site, and to power embedded tools such as our booking calendar, contact forms and Google Maps. These tools are provided by third parties, who may set their own cookies. You can block or delete cookies in your browser settings; some parts of the site, such as online booking, may not work properly without them.

9. Your choices and rights

Access and correction: you can ask to see the personal information we hold about you and ask us to correct it.
Withdraw consent: you can withdraw consent to marketing emails or text messages at any time (reply STOP to a text, or use the unsubscribe link in an email), or contact us to withdraw other consents, subject to legal limits. Withdrawing consent may affect our ability to provide some services.
Questions and complaints: contact our Privacy Officer using the details below.

We will respond to access requests within 30 days. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or, for personal health information, the Information and Privacy Commissioner of Ontario.

10. Age

Our services and website are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page shows when it last changed, and significant changes will be posted on this page.

12. Contact us

Privacy Officer, Elnes Clinic
3355 Yonge Street, Toronto, ON M4N 2M6, Canada
Phone: +1 888-266-4561
Email: hello@elnesclinic.com