Privacy Policy

Locks & Co. Hair Studio respects your privacy. This policy explains what personal information we collect through our website, how we use and disclose it, and the rights you have under British Columbia's Personal Information Protection Act (PIPA) and, where applicable, the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

By using our website or booking a service with us, you agree to the collection and use of information as described here. If you do not agree, please do not submit personal information through our site.

Scope

This policy covers personal information collected through:

• locksandco.ca and its contact and recruitment forms
• Our booking platform, Phorest, when accessed via links on our site
• SMS and email communications sent in connection with appointments or promotions
• Our Instagram feed embed and Google Business Profile, where visible on our site

It does not cover the practices of third-party websites we link to (including Phorest, Google, and Instagram), which have their own privacy policies. We encourage you to review those separately.

Personal Information We Collect

Depending on how you interact with us, we may collect:

• Contact form submissions: name, email address, phone number, and any message you provide
• Recruitment ("Join Our Team") form submissions: name, email, phone number, and any experience details, portfolio links, or resume information you submit
• Booking information: collected directly by Phorest when you book an appointment, including name, contact details, and appointment history
• Communication records: SMS or email exchanges related to appointment reminders, review requests, or promotions

We do not collect payment or credit card information through our website. All payment is handled in-person or through Phorest directly.

We do not currently use analytics or advertising tracking tools (such as Google Analytics or Meta Pixel) on our website. If this changes, we will update this policy before doing so.

How We Use Your Personal Information

We use personal information to:

• Respond to inquiries submitted through our contact form
• Process and manage appointment bookings (via Phorest)
• Send appointment confirmations and reminders
• Send Google review requests after your appointment
• Send occasional promotional messages about services or offers, where you have consented
• Evaluate applications submitted through our recruitment page
• Maintain accurate business records

We collect only what is reasonably necessary for these purposes and do not use your information for any purpose beyond what is disclosed here without your consent.

Marketing Communications and Consent

Some SMS and email messages we send, including review requests and promotional offers, are commercial electronic messages under Canada's Anti-Spam Legislation (CASL).

• We will only send these messages where we have your consent, whether express (you opted in) or implied (you have an existing business relationship with us, such as a recent appointment)
• Every marketing message will identify our business and include a working way to unsubscribe or opt out
• You can withdraw consent at any time by replying STOP to a text, using the unsubscribe link in an email, or contacting us directly using the information below
• Withdrawing consent to marketing messages will not affect appointment-related communications, which are considered transactional, not promotional

Third-Party Service Providers and Disclosure

We share personal information with the following service providers to operate our business. We do not sell personal information to any third party.

We may also disclose personal information where required by law, to comply with a legal process, or to protect the rights, property, or safety of our business, our staff, or the public.

Cookies and Website Tracking

Our website does not currently use advertising or analytics tracking cookies. Embedded third-party content (such as our Instagram feed) may set its own cookies as part of how that platform functions; this is controlled by the third party, not by us. If we introduce tracking tools such as Google Analytics or Meta Pixel in the future, we will update this policy and, where required, provide a cookie consent notice before doing so.

Cross-Border Data Storage

Some of our service providers (including GHL and Phorest) may store or process personal information on servers located outside of Canada, including in the United States. Where this occurs, your information may be subject to the laws of that jurisdiction, including lawful access by foreign authorities. By submitting your information, you acknowledge this possibility.

Data Retention and Security

We retain personal information only as long as necessary to fulfill the purposes described in this policy, or as required by law. We use reasonable administrative and technical safeguards to protect personal information in our custody, including restricting access to staff who need it to do their jobs. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Your Privacy Rights

Under BC's PIPA, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent to our collection, use, or disclosure of your information, subject to legal or contractual restrictions
• File a complaint if you believe we have not handled your information in accordance with this policy or applicable law

To exercise any of these rights, contact us using the details below. We will respond within a reasonable time, generally within 30 days.

If you are not satisfied with our response, you may file a complaint with British Columbia's Office of the Information and Privacy Commissioner:

Office of the Information and Privacy Commissioner for BC
Website: oipc.bc.ca
Phone: 250-387-5629

How to Reach Us

For any privacy questions, access requests, corrections, or to withdraw consent, contact:

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The current version will always be posted on our website with its effective date noted above. Continued use of our website after changes take effect constitutes acceptance of the updated policy.