Privacy Policy

1. Information We Collect

Canadian College of Aesthetic Dermatology (“CCAD”, “we”, “our”) collects personal information that you voluntarily provide when registering for an account, enrolling in courses, purchasing services, or contacting us. This may include your name, email address, date of birth, payment information, and course progress data.

2. How We Use Your Information

We use your information to provide and improve our educational services, process payments via Stripe, communicate with you about your account and courses, issue certificates, and personalize your learning experience.

3. Data Storage and Security

Your data is stored securely using Google Firebase infrastructure. Payment processing is handled by Stripe and we do not store your full credit card details on our servers. We implement appropriate technical and organizational measures to protect your personal data.

4. Third-Party Services

We use the following third-party services: Google Firebase (authentication and data storage) and Stripe (payment processing). Each service has its own privacy policy governing the use of your data.

5. Your Rights

Under applicable Canadian privacy legislation including PIPEDA, you have the right to access, correct, or delete your personal information. You may also withdraw consent for data processing at any time by contacting us.

6. Consent

In accordance with PIPEDA Principle 3, we obtain your meaningful consent before collecting, using, or disclosing your personal information. By creating an account and using our services, you consent to the collection and use of information as described in this policy. You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting us directly.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Course completion records and certificates are retained indefinitely for verification purposes. Account data is deleted within 30 days of an account deletion request. Payment records are retained as required by Canadian tax regulations.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. You may configure your browser to refuse cookies, but this may limit your ability to use certain features of the platform.

9. Data Breach Notification

In the event of a data breach that poses a real risk of significant harm, CCAD will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA’s mandatory breach notification provisions.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our platform. Continued use of our services after changes take effect constitutes acceptance of the revised policy.

11. Contact

For privacy-related inquiries, to request access to your personal information, or to file a complaint, please contact CCAD at the BC Medical Clinic in Coquitlam, BC, or through our support channels. You may also contact the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.