Privacy Policy
This is a first draft. It is pending legal review and may change before it is published in final form. Last updated: 15 September 2026.
Who we are
Lumière Studio A&E is a small cosmetic mobile teeth whitening business based in the Greater Toronto Area, Ontario, Canada. We come to you, at home, at your office, or at an event.
- Asia Noreen Qazi, Founder. Asia is a Registered Dental Hygienist, registered with the College of Dental Hygienists of Ontario (CDHO). She performs every session.
- Elaine Garcia, Cofounder and Marketing Lead. Elaine looks after scheduling, client communication, and social media.
We serve Markham, Richmond Hill, Vaughan, Scarborough, North York, Etobicoke, Pickering, Ajax, Whitby, and Oshawa, with group bookings only in Mississauga, Brampton, and Milton. We do not serve downtown Toronto.
You can reach us any time at lumierestudio.gta@gmail.com.
The most important thing in this policy
We keep two kinds of information, and we keep them completely apart.
- Ordinary contact information from the website. This is your name, your email address, and whatever you write in the message box. It is not health information. It is covered by Canada's federal private sector privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA).
- Personal health information collected on paper at your appointment. This is your health history and the notes Asia makes about your treatment. It is covered by Ontario's Personal Health Information Protection Act (PHIPA). Asia is a health information custodian under that Act.
These two sets of information live in different places and are handled under different rules. Your health information is never collected through this website. That is a deliberate choice, not an oversight.
Information you give us through this website
What we collect
This site is a brochure. There are no accounts, no logins, no bookings, and no payments on it. The only thing it collects is the contact form, and the form asks for three things:
- Your name
- Your email address
- A free text message
That is all.
Please do not type health details into the contact form. If you tell us about a medical condition, a medication, or a dental concern in your message, we will not add it to any clinical file. We will ask you the health questions properly, on paper, at your appointment.
Why we collect it and on what basis
We collect it so we can answer you. If you ask about availability, pricing, or your area, we need a way to reply. The legal basis is your consent: you chose to write to us, and sending the form is you asking us to write back. You can withdraw that consent at any time by asking us to delete your message.
Where it is stored and who can see it
The form sends your message to our business email inbox, which sits with a commercial email provider. The website itself is hosted by a website hosting provider. We have not settled on those vendors yet, so we are not naming them here. When we do, we will name them in this policy.
Only Asia and Elaine read that inbox. We do not sell, rent, or trade your information.
How long we keep it
We keep enquiry emails only for as long as the conversation is useful, and then we delete them. If you ask us to delete yours sooner, we will, unless we need it to sort out a billing question or a complaint.
Information collected at your appointment
What we collect and why
Before your first session you complete a health history form on paper and sign it in front of Asia. Whitening is a cosmetic service, but it still touches your teeth and gums, so Asia has to know whether it is safe for you. She is held to the standards of the dental field and of the CDHO.
Your paper record can include:
- Your name and contact details
- Your health history and any relevant medications or allergies
- Your consent signature and the date
- Treatment notes from each session
- Shade records, before and after, so progress can be tracked
- Product lot numbers for the gel used on you
Where it is kept and who can see it
Paper stays paper. Your health record is not scanned, not photographed, not emailed, and not typed into any website, app, or spreadsheet. It is stored offline and secured when not in use. Asia is the custodian of these records and the only person who works with them clinically. Elaine does not have access to your health record.
We will not disclose your health information to anyone else unless you tell us to in writing, or unless the law requires it. That last category is narrow and rare: a court order, a valid request from a regulator, or a legal duty to report.
How long we keep it
We keep clinical records for ten years, which is the professional standard in Ontario. After that they are destroyed securely.
Photos
Asia may take before and after photos so you have a record of your own results. Those photos stay in your file.
Using a photo on our website or on social media is a separate decision, and it is yours. There is a distinct opt in on the paper consent form, and if you do not sign it, your photo is never published. You can change your mind later: email us and we will stop using the photo going forward, and remove it from the accounts we control. We cannot always claw back a copy someone else has already saved or reshared, and we will be honest with you about that.
Payment
You pay at the appointment, by cash or by e transfer. We never take card numbers, and we never store card details. There is no payment page on this site and no card data anywhere in our records.
Booking, social media, and direct messages
Right now, bookings happen by direct message on Instagram, Facebook, or TikTok, or by email. We are on Instagram as @lumierestudio_ae, TikTok as @lumierestudio.ae, Snapchat as @lumierestudio.ae01, and Facebook as Lumière Studio A&E.
A direct message sits on a platform we do not control. Those companies have their own privacy policies and their own servers, and what happens to your message on their side is governed by their rules, not ours. Do not send health details by direct message. If you want to raise something health related before your appointment, email us and we will talk it through in person.
Email we send you
Canada's anti spam legislation (CASL) applies to commercial electronic messages, and we follow it.
- If you write to us, we will write back. That is a reply to your own enquiry, and it is not marketing.
- Appointment messages are transactional: confirmations, reminders, directions, and aftercare notes. You get those because you booked.
- Promotional email is separate. We will only send offers or announcements if you have given express consent for that specifically. Saying yes to appointment reminders is not saying yes to marketing, and we will never treat it that way.
- Every promotional message identifies us and includes a working way to unsubscribe. If you unsubscribe, we act on it promptly and we will not ask you to explain yourself.
Cookies, analytics, and tracking
This site is static. It sets no analytics, no advertising pixels, and no tracking cookies. We do not build a profile of you, and we do not follow you around the internet.
Our hosting provider may keep standard server logs for security and reliability, which is normal for any website. If we ever add analytics, a booking tool, an advertising pixel, or anything else that collects data, we will update this policy first and say plainly what it does.
Your rights
Your health record
Under PHIPA you have the right to see your own health record and to ask for a correction if something in it is wrong or incomplete.
- Send your request in writing to lumierestudio.gta@gmail.com.
- Tell us what you want: a copy of your record, a chance to view it, or a specific correction.
- We respond within 30 days. If we need more time, we will tell you why and how long it will take.
- We may need to confirm who you are first, which protects you.
- If we cannot correct something, we will tell you why in writing, and you can ask for your statement of disagreement to be attached to the record.
- There may be a reasonable fee for copying a large record. We will tell you the amount first.
Your contact information
For anything you sent through the website or by email, you can ask us what we hold, ask us to correct it, or ask us to delete it. Email the same address. We aim to answer within 30 days.
If there is a privacy breach
If your health information is lost, stolen, or seen by someone who should not have seen it, we will tell you at the first reasonable opportunity. We will explain what happened, what we are doing about it, and that you have the right to complain to the Information and Privacy Commissioner of Ontario. Where PHIPA requires it, we will also notify the Commissioner, and Asia's College, and we will keep the annual records the Act requires.
If a breach affects contact information rather than health information, PIPEDA applies instead. Where the breach creates a real risk of significant harm, we will notify you and report it to the Office of the Privacy Commissioner of Canada, and we will keep a record of it.
Young people
This service is for people aged 16 and over. We do not offer whitening to anyone younger, and the website is not aimed at children.
If you are 16 or 17, a parent or guardian must consent to the treatment and sign the consent form with you. We will ask for that at the appointment, not through the website.
Changes to this policy
If our practices change, this page changes first, and the last updated date at the top will tell you when. If a change is significant, such as adding online booking or an analytics tool, we will say so clearly rather than quietly editing a line.
How to reach us, and how to complain
Start with us. Email lumierestudio.gta@gmail.com with your concern. We would rather hear it directly and fix it. We do not publish a phone number or a street address.
If you are not satisfied with our answer, you can go to a regulator.
- For health information, contact the Information and Privacy Commissioner of Ontario at www.ipc.on.ca.
- For contact information and other ordinary personal information, contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.
- You can also raise a concern about a Registered Dental Hygienist with the College of Dental Hygienists of Ontario.
Complaining to a regulator will never affect how you are treated as a client.