Effective Date: September 17, 2026
Last Updated: September 24, 2026
BRIGHT Eye Spa + Medical Aesthetics (“BRIGHT,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us by our guests, patients, customers, website visitors, and other individuals who interact with our business.
This Privacy Policy explains how we collect, use, disclose, protect, and retain personal information when you visit or use brightmedspa.com (the “Website”), contact us, request or book an appointment, participate in a consultation, purchase products, receive treatments, or otherwise interact with BRIGHT.
1. Who We Are
BRIGHT Eye Spa + Medical Aesthetics
30 Main Street East
Kingsville, ON N9Y 1A2
Canada
Phone: 519-712-9333
Email: info@brightmedspa.com
For privacy-related questions, requests, or concerns, please contact us using the information above.
2. Information We Collect
Depending on your interactions with BRIGHT, we may collect:
- Name and contact information;
- Email address and telephone number;
- Mailing or billing address;
- Appointment and booking information;
- Information provided during consultations or treatment assessments;
- Health, medical, skincare, eye-health, or treatment-related information where necessary to provide services;
- Information about treatments, products, procedures, and services you receive or request;
- Payment and transaction information;
- Information submitted through contact forms, consultation forms, questionnaires, surveys, or other online forms;
- Communications and correspondence with BRIGHT;
- Information you voluntarily provide through reviews, testimonials, contests, promotions, or other interactions;
- Website usage information, including IP address, browser type, device information, pages visited, referring website, and general Website activity; and
- Information collected through cookies, pixels, analytics, or similar technologies, where applicable.
We seek to collect only information that is reasonably necessary for identified and legitimate purposes.
3. Personal Health Information
Certain services offered by BRIGHT may involve the collection of personal health information.
Depending on the service you receive, this may include information concerning your health history, eye health, skin concerns, allergies, medications, previous treatments, medical conditions, treatment assessments, diagnoses, treatment plans, treatment outcomes, or other information necessary to provide safe and appropriate care.
Where BRIGHT acts as a health information custodian or otherwise handles personal health information subject to Ontario privacy legislation, personal health information will be collected, used, disclosed, retained, and protected in accordance with applicable requirements, including the Personal Health Information Protection Act, 2004 (PHIPA) where applicable.
We take reasonable steps to protect personal health information against theft, loss, unauthorized access, use, disclosure, copying, modification, or disposal.
4. How We Use Personal Information
We may collect and use personal information for purposes including:
- Providing medical aesthetic, skincare, dry-eye, wellness, naturopathic, and other services offered by BRIGHT;
- Conducting consultations and treatment assessments;
- Determining treatment suitability and developing treatment plans;
- Scheduling, confirming, changing, and following up on appointments;
- Communicating with you regarding services, appointments, products, or inquiries;
- Maintaining client and patient records;
- Processing purchases, payments, and orders;
- Providing customer service;
- Monitoring treatment progress and outcomes;
- Coordinating care or communicating with other healthcare professionals where permitted;
- Administering promotions, programs, consultations, or studies where applicable;
- Sending marketing communications where you have provided appropriate consent;
- Operating, maintaining, and improving our Website and business systems;
- Understanding Website usage and improving our online experience;
- Preventing fraud, misuse, or unauthorized access;
- Meeting legal, regulatory, professional, accounting, insurance, or administrative requirements; and
- Other purposes disclosed at the time information is collected or otherwise permitted or required by law.
5. Consent
Where required by applicable law, we will obtain meaningful consent before collecting, using, or disclosing personal information.
The type of consent required may depend on the nature and sensitivity of the information and the purpose for which it is being collected.
For sensitive information, including personal health information, additional consent requirements may apply.
You may withdraw consent to certain uses of your personal information by contacting BRIGHT, subject to legal, contractual, professional, or other reasonable limitations.
Withdrawal of consent does not affect information that was collected, used, or disclosed before the withdrawal, or information that BRIGHT is otherwise permitted or required by law to retain or use.
6. Disclosure of Personal Information
BRIGHT does not sell or rent personal information.
We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy, including to:
- BRIGHT employees and authorized team members;
- Healthcare professionals or other providers involved in your care, where permitted;
- Service providers supporting appointment booking, website hosting, information technology, payment processing, communications, marketing, analytics, customer service, or other business functions;
- Professional advisors, insurers, accountants, auditors, or legal representatives where appropriate;
- Government, regulatory, or law-enforcement authorities where required or permitted by law; and
- Other parties where you have provided appropriate consent or where disclosure is otherwise authorized or required by law.
Third-party service providers may process information on BRIGHT’s behalf and are expected to use appropriate safeguards and only process information for authorized purposes.
7. Online Booking and Third-Party Platforms
BRIGHT may use third-party platforms to facilitate appointment booking, consultations, payments, communications, product purchases, or other services.
When you interact directly with a third-party platform, that platform may collect and process personal information according to its own privacy policy and terms.
The BRIGHT Website currently provides access to an external online booking platform. Before submitting information through a third-party platform, we encourage you to review that provider’s privacy practices.
8. Website Forms and Online Communications
Information submitted through our Website may be used to respond to inquiries, provide requested information, arrange consultations or appointments, or otherwise fulfill the purpose for which the information was submitted.
Please do not submit highly sensitive medical or personal health information through a general Website contact form or ordinary email unless specifically requested or directed by BRIGHT.
General Website forms and ordinary email may not provide the same level of security as a dedicated healthcare communication system.
9. Cookies, Analytics and Similar Technologies
Our Website may use cookies, pixels, analytics tools, and similar technologies to:
- Operate and secure the Website;
- Remember preferences;
- Understand Website traffic and usage;
- Measure Website performance;
- Improve content and functionality;
- Understand how visitors interact with our services; and
- Support advertising or marketing activities where applicable.
These technologies may collect information such as IP address, device type, browser type, approximate location, pages viewed, and Website interactions.
You can generally adjust your browser settings to refuse or delete cookies. Some Website functionality may be affected as a result.
Third-party analytics, advertising, or social media providers may process information according to their own privacy policies.
10. Marketing Communications
If you subscribe to BRIGHT’s newsletter or otherwise provide consent to receive promotional communications, we may use your contact information to send information about:
- Treatments and services;
- Promotions and special offers;
- Events;
- Products;
- Educational content; and
- Other BRIGHT-related updates.
You may unsubscribe from marketing emails at any time using the unsubscribe link included in the communication or by contacting us directly.
We may continue to send non-promotional communications relating to appointments, transactions, services, or other necessary business matters.
11. Before-and-After Photos and Testimonials
BRIGHT may, with appropriate permission and consent, collect photographs, testimonials, reviews, or other content relating to treatments or services.
Where such content identifies an individual or constitutes personal information, we will use it only for the purposes for which appropriate consent has been obtained.
Consent for promotional use of photographs or testimonials may be withdrawn where applicable, although withdrawal may not be retroactive for materials that have already been distributed or published.
12. Third-Party Websites and Links
Our Website may contain links to third-party websites, booking systems, retailers, payment providers, social media platforms, product manufacturers, or other external services.
BRIGHT is not responsible for the privacy practices, security, or content of third-party websites.
We encourage you to review the privacy policy of any third-party website before providing personal information.
13. Safeguarding Personal Information
We use reasonable physical, technical, and administrative safeguards appropriate to the sensitivity of the information we hold.
These safeguards may include access controls, restricted access, password protection, secure systems, employee procedures, physical security measures, and other reasonable safeguards.
No electronic system or method of transmission can be guaranteed to be completely secure. While we take reasonable precautions, we cannot guarantee absolute security.
14. Retention of Information
We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, provide services, maintain appropriate records, resolve disputes, meet legal and regulatory obligations, and otherwise operate our business.
Health-related records may be subject to additional retention requirements under applicable legislation, professional standards, and regulatory requirements.
When information is no longer required, we take reasonable steps to securely dispose of, destroy, or de-identify it.
15. Accessing and Correcting Your Information
Subject to applicable law and any applicable exceptions, individuals may request access to personal information held by BRIGHT and may request correction of inaccurate or incomplete information.
Requests relating to personal health information may be subject to the access and correction provisions of PHIPA where applicable.
To make an access or correction request, please contact:
BRIGHT Eye Spa + Medical Aesthetics
30 Main Street East
Kingsville, ON N9Y 1A2
519-712-9333
info@brightmedspa.com
We may require sufficient information to verify your identity before processing a request.
16. Privacy Complaints
If you have a question, concern, or complaint about our privacy practices, please contact us first so that we can investigate and attempt to resolve the issue.
You may contact:
BRIGHT Eye Spa + Medical Aesthetics
30 Main Street East
Kingsville, ON N9Y 1A2
519-712-9333
info@brightmedspa.com
Individuals may also have the right to make a complaint to the applicable privacy oversight authority, including the Information and Privacy Commissioner of Ontario (IPC) where applicable.
17. Children’s Privacy
BRIGHT’s services are primarily intended for adults unless otherwise specified for a particular service.
We do not knowingly collect personal information from children through the Website for purposes unrelated to providing an authorized service.
Where information concerning a minor is collected, we will handle that information in accordance with applicable privacy laws and consent requirements.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, or applicable legal requirements.
The “Last Updated” date at the top of this Privacy Policy will indicate when the policy was most recently revised.
We encourage you to review this Privacy Policy periodically.
19. Contact Us
If you have questions about this Privacy Policy or BRIGHT’s privacy practices, please contact:
BRIGHT Eye Spa + Medical Aesthetics
30 Main Street East
Kingsville, ON N9Y 1A2
Canada
Phone: 519-712-9333
Email: info@brightmedspa.com
Last Updated: September 24, 2026