Personal data we collect
We ask for just the information we need to manage your bookings and keep you informed.
- Profile details such as your full name, pronouns, and preferred contact information.
- Contact details including email, phone number, and billing address for confirmations and receipts.
- Booking history, appointment notes, receipts, and optional intake forms that you complete.
How we use this information
We rely on your explicit consent and the performance of our service agreement to process data.
- To schedule, reschedule, and personalise appointments and aftercare.
- To process payments, issue invoices, and meet accounting/audit requirements.
- To deliver essential service updates (appointment confirmations, reminder emails, and transactional SMS).
How we keep it safe
Security is layered: we encrypt data in transit, store it with vetted providers, and only grant access to trained team members.
- All logins require least-privilege staff accounts with MFA where supported.
- Sensitive records are retained only for the period required by Canadian legislation and payment partners.
- We log access to personal data to quickly investigate any suspicious activity.
Your privacy controls
You decide how your information is stored and when it should be removed.
- Request a copy of your data or corrections at any time by emailing privacy@malva.example.
- Withdraw consent for optional fields (marketing preferences, intake details) without impacting service delivery.
- Ask us to deactivate your account; we will retain only the invoices and records we must keep by law.