Privacy Policy

1. Introduction

Clinique Aura Inc. (hereinafter "we") is committed to protecting the personal information of its patients and users in accordance with Quebec's Law 25 (Act to modernize legislative provisions regarding the protection of personal information). As a health clinic, we pay particular attention to the protection of health data.

2. Person responsible for the protection of personal information

• Name : Dre Sophie Lafleur
• Title : Physiotherapist, Founder
• Email : rpp@clinique-aura.ca

3. Personal information collected

We collect the following information as part of our activities:

Via the website

• First and last name
• Email address
• Phone number
• Desired service
• Messages sent via the contact form
• Browsing data (via analytics cookies, if consented)

Professional records (in clinic)

Health records maintained by our professionals (physiotherapist, osteopath, massage therapist, nutritionist) are governed by the laws and regulations applicable to each profession, including Quebec's Professional Code. These records are kept confidentially and securely, separately from website data.

4. Purposes of collection

• Respond to your appointment requests
• Provide our multidisciplinary health services
• Improve the browsing experience on the site
• Communicate with you about your appointments and treatments
• Meet our legal and professional obligations

5. Consent

In accordance with Section 8.1 of Law 25, we obtain your manifest, free and informed consent before collecting your personal information. Non-essential cookies are only activated after your explicit consent. You can change your preferences at any time via the "Cookie Settings" link at the bottom of each page.

6. Retention period

Data collected via the website is retained for 24 months after your last interaction with us. After this period, it is securely destroyed in accordance with Section 23 of Law 25.

Professional health records are retained according to the periods prescribed by professional orders and applicable legislation (generally a minimum of 5 years after the last service rendered).

7. Your rights

Under Law 25, you have the right to:

• Access — view your personal information
• Rectify — correct inaccurate information
• Delete — request deletion of your data
• Withdraw consent — at any time
• File a complaint — with the Commission d'accès à l'information du Québec (CAI)

To exercise these rights: rpp@clinique-aura.ca. We will respond within 30 days.

8. Third-party services

• Vercel — Website hosting (USA)
• Google Analytics — Browsing analytics (if consented) (USA)

9. Transfer outside Quebec

Some third-party services (Vercel, Google) are located in the United States. By using our site and consenting to analytical cookies, you agree that some browsing data may be processed in the United States. These providers are committed to protecting your data in accordance with their respective privacy policies. Health data collected in clinic is never transferred outside of Quebec.

10. Cookies

• Essential — Required for the website to function. Always active.
• Analytics — Activated only with your consent.
• Marketing — Activated only with your consent.

11. Security

We implement reasonable security measures: HTTPS encryption, complete HTTP security headers, no API keys exposed client-side. In-clinic health records are protected by physical and digital security measures in compliance with professional order requirements.

12. Privacy incident

In the event of a privacy incident presenting a risk of serious harm, we commit to notifying the Commission d'accès à l'information du Québec (CAI) and affected individuals, and to maintaining a register of incidents in accordance with Section 3.5 of Law 25.

Incident notification email: rpp@clinique-aura.ca

13. Contact

Clinique Aura inc.
Dre Sophie Lafleur, RPP
2500, rue King Ouest, bureau 300
Sherbrooke, QC J1J 2E8
(819) 555-0200
rpp@clinique-aura.ca