Privacy policy
Last updated: October 6, 2026
1. Who we are
The website www.xomed.ca is operated by [exact legal name] (“XOmed”, “we”, “us”), which provides aesthetic medicine treatments at its clinics in Knowlton and Westmount (Quebec).
We take the protection of your personal information seriously. This policy explains what information we collect through our website, why we collect it, how we use it and what your rights are. It complies with Quebec’s Act respecting the protection of personal information in the private sector (as amended by Law 25) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
This policy covers the website only. Information collected during your consultations and treatments at the clinic (medical records) is governed by the professional and legal obligations that apply to patient records.
2. Person in charge of the protection of personal information
For any question, request or complaint about your personal information, please contact:
Judith Landriault
Email : [email protected]
Phone : 514 342-8346
Address: 4484 Sherbrooke Street West, Suite 200, Westmount, Quebec H3Z 1E6
3. Information we collect
3.1 Information you provide
Contact form:
- full name (required);
- email address (required);
- phone number (optional);
- treatment you are interested in and preferred clinic (optional);
- whether or not you wish to receive our newsletter.
Newsletter sign-up: your email address.
Please do not send detailed medical information through the form. This information will be collected securely during your consultation.
3.2 Information collected automatically
When you browse the website, some technical data is collected: IP address, device and browser type, pages viewed, date and time of the visit, and referring page. This data is collected using cookies and similar technologies (see section 6).
4. Why we use your information
| Purpose | Information used |
|---|---|
| Answering your request and scheduling a consultation | Contact form data |
| Sending you our newsletter (promotions, news), only with your consent | Email address |
| Keeping the website secure and blocking automated submissions (spam) | IP address, technical data |
| Measuring website traffic and improving the website | Browsing data (analytics cookies) |
| Measuring the effectiveness of our online advertising | Browsing data (advertising cookies) |
We only use your information for the purposes listed above, unless you consent to a new purpose or the law allows it.
We never sell your personal information.
5. Consent
By submitting a form, you consent to our use of your information to process your request. Signing up for the newsletter is optional, and you can unsubscribe at any time using the link included in every email.
You may withdraw your consent at any time by contacting the person named in section 2, subject to legal or contractual restrictions.
6. Cookies and similar technologies
| Category | Provider | Purpose | Can be disabled |
|---|---|---|---|
| Essential | XOmed, Cloudflare | Website operation, language selection, security, performance | No |
| Bot protection | Cloudflare Turnstile | Checking that the form is submitted by a human | No |
| Analytics | Google Analytics | Website traffic statistics | Yes |
| Advertising | Google Ads | Measuring conversions from our campaigns | Yes |
[Analytics and advertising cookies are only enabled with your consent. You can change your choices at any time using the “Manage cookies” link at the bottom of every page.]
You can also block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on. You can manage your Google ad preferences at adssettings.google.com.
7. Sharing with third parties
We only share your information with the service providers we need to operate the website, and only to the extent necessary:
| Provider | Service | Processing location |
|---|---|---|
| Rapidenet | Website and form hosting | Canada |
| Cloudflare, Inc. | Website delivery, security, bot protection | United States and global network |
| Intuit Mailchimp | Newsletter delivery | United States |
| Postmark (ActiveCampaign) | Delivery of emails sent by the website, including contact form requests | United States |
| Google LLC | Analytics and advertising | United States |
| Agence Chocolat | Website development and maintenance | Quebec |
These providers are bound by contractual confidentiality and security commitments. We may also disclose information when required by law, for example at the request of a competent authority.
8. Transfers outside Quebec
Some of our providers process information outside Quebec, notably in the United States. Before any transfer, we assess whether the information will be adequately protected there, as required by law. Transferred information may be subject to the laws of the country where it is processed.
9. Retention
| Information | Retention period |
|---|---|
| Requests sent through the contact form | 24 months after submission |
| Copies of emails sent by the website (Postmark) | 45 days |
| Newsletter subscription | Until you unsubscribe |
| Google Analytics data | [14 months] |
At the end of these periods, the information is securely destroyed or anonymized. If you become a patient, the information needed for your care is added to your file and kept according to the rules that apply to patient records.
10. Security
We take reasonable measures to protect your information against loss, theft and unauthorized access: encrypted connection (HTTPS), access limited to the people who need it, regular website updates and bot protection.
In the event of a confidentiality incident that presents a risk of serious injury, we will notify the people concerned and the Commission d’accès à l’information, as required by law.
11. Your rights
You have the right to:
- access the information we hold about you;
- have it corrected if it is inaccurate or incomplete;
- withdraw your consent to its use;
- request that it stop being disseminated or be deleted;
- request that it be provided to you in a structured, commonly used technological format (portability);
- be informed when a decision about you is based exclusively on automated processing (we make no such decisions through the website).
To exercise these rights, write to the person named in section 2. We will respond within 30 days. We may ask you to confirm your identity.
If you are not satisfied with our response, you may file a complaint with the Commission d’accès à l’information du Québec.
12. Minors
The website is not intended for people under 14 years of age. We do not knowingly collect their information without the consent of a parent or guardian.
13. External links
The website contains links to our Facebook and Instagram pages. When you follow these links, the privacy policies of those platforms apply.
14. Changes
We may update this policy to reflect changes in our practices or in the law. The “last updated” date at the top of the page will be changed accordingly. In the event of a significant change, a notice will be posted on the website.