Privacy Policy

Last update: September 9, 2026

GROUPE SANTÉ PHYSIMED INC., doing business as Physimed Medispa («Physimed Medispa», «we», «our» or «us»), is committed to protecting the privacy, security and confidentiality of personal information collected in the course of the activities covered by this policy.

This policy explains how we collect, use, disclose, retain, and protect your personal information when you visit our website medispa-physimed.com, submit a consultation request, contact us online, participate in our Continuum weight management program, interact with our digital content or advertisements, or manage your cookie and tracking technology preferences.

This policy applies to personal information collected through medispa-physimed.com and, when expressly indicated, to certain information collected in the context of digital interactions related to the Continuum program.

The information included in our clinical, administrative, or patient management records may also be subject to specific policies, procedures, and requirements regarding medical records and information governance within the clinic.

1. Who is responsible for your personal information?

GROUPE SANTÉ PHYSIMED INC. is responsible for the personal information collected in the course of the activities covered by this policy. Our Privacy Officer oversees the enforcement of our privacy practices, particularly with regard to access and rectification requests, withdrawals of consent, questions, complaints, and confidentiality incidents. The contact information for the Privacy Officer can be found at the end of this policy.

2. What personal information do we collect?

The information we collect depends on how you interact with our site and our services.

Groupe Santé Physimed may collect various types of personal information, including:

• First and last name
• Date of birth
• Adress
• Phone number
• Email
• Medical information and medical record
• Medical history
• Test results and medical reports
• Insurance or billing information
• Appointment information
• Browsing data and connection cookies
• Any other information necessary to provide care or services

Certain information collected, notably medical and health information, is considered sensitive under the law and benefits from an increased level of protection.

Information collection methods

When you submit a consultation request for an aesthetic treatment or the Continuum program, we may collect your first name, last name, date of birth, gender, city of residence, email address, and telephone number.

We may also collect information regarding the service you are interested in, including non-invasive aesthetics, skin tightening, the treatment of skin lesions, or the Continuum weight management program, as well as how you heard about us.

Depending on the nature of your request, we may also collect certain general information regarding your skin condition, your weight, your aesthetic or health goals, or your interest in a particular treatment. We may retain the date, time, source, and status of your request, as well as the history of our communications and follow-ups with you.

Information concerning your weight, body composition, skin condition, medical history, or interest in a treatment may constitute sensitive personal information, particularly when linked to a medical assessment or prescription.

Our consultation request form must be completed by a person aged 18 or older.

Continuum program information

If you are enrolled in the Continuum program, we may also collect, as part of your clinical follow-up, the information obtained during your medical evaluation and body composition analysis, the recommendations made by our team of healthcare professionals, and information related to any prescription associated with the program.

When you choose to share with our team data from connected devices used as part of the program, such as a smart watch or smart scale, we may also collect information such as steps, sleep, weight, and other activity measurements. The content and notes from your video conference follow-up sessions may also be retained as part of your follow-up.

This information is sensitive and is subject to enhanced protection measures.

Navigation data and technical information

Depending on your consent choices, we may collect certain technical information and usage data when you visit our site. This may include, in particular, your IP address and the approximate location that can be derived from it, the type of device used, your browser, your operating system, cookie identifiers, consent preferences, pages viewed, time spent on the site, links and features used, the source of your visit, associated advertising campaigns, and your interactions with our digital content.

We can also record interaction and conversion events, for example when an inquiry form is started or submitted.

Certain events may be associated with a general service category, such as weight management, face and neck, body, or medical services, in order to measure the performance of our campaigns and conversion attribution.

Detailed medical or clinical information entered in our forms, including medical history, clinical notes, Continuum tracking data, and the detailed content of your interactions with our healthcare professionals, is not transmitted to advertising platforms for measurement or optimization purposes.

Depending on the tracking architecture implemented, the data and identifiers used for communication, correspondence, and attribution between systems are hashed prior to transmission and processed in accordance with applicable requirements and established security measures.

Online communications

When you communicate with us through the site, we may collect your name, contact information, the content of your message, the date and time of your request, and the history of our exchanges.

We ask that you do not transmit, by means of a general form or unsecured email, medical information that is not reasonably necessary to process your request.

3. How do we collect your personal information?

We collect your personal information directly from you when you complete a consultation request, register for the Continuum program, submit another form, or contact us.

We may also automatically collect certain information through cookies, pixels, beacons, scripts, local storage, server logs, and other similar technologies.

Depending on your consent choices, certain information may also be collected or processed using analytics and advertising platforms, as well as client-side or server-side tracking technologies.

As part of the Continuum program, certain information may also come from connected devices that you choose to use and share with our team.

We limit collection to information reasonably necessary for the purposes described in this policy or specified at the time of collection.

4. Why do we use your personal information?

Responding to your consultation requests

We use the submitted information to identify you, communicate with you, respond to your request, direct it to the appropriate department, schedule a consultation, and maintain a history of our exchanges.

Submitting an application does not constitute medical advice, does not establish a diagnosis, and does not guarantee your eligibility for treatment or the Continuum program.

Ensure the follow-up of the Continuum program

We use the information collected as part of the Continuum monitoring to follow up with you, personalize the recommendations provided by the professionals involved, and assess your progress in the program.

Communicate with you

We may use your information to answer your questions, confirm or manage a consultation, send you administrative instructions, and follow up on a requested service.

Ensure the operation and security of the site

We use certain information to process forms, maintain site functionality, diagnose technical issues, prevent fraudulent use, and detect security incidents.

Measure the performance of the site and our campaigns

With your consent, we use analytics and advertising technologies to understand how visitors use our site, measure traffic, attribute consultation requests to different acquisition channels, and optimize our advertising investments.

To this end, we can measure conversion events, including certain events associated with a general service category.

The data and identifiers used to enable communication, correspondence, or attribution between systems are hashed prior to transmission, in accordance with the tracking architecture in place.

Detailed medical or clinical information collected as part of your care is not transmitted to advertising platforms for these purposes.

Promotional communications

Submitting a consultation request does not automatically subscribe you to our promotional email or text message communications.

We use your contact information for promotional purposes only when we have obtained the consent required by law. You can withdraw this consent at any time using the unsubscribe mechanism included in our communications or by contacting us.

Legal and safety purposes

We may use your information to comply with our legal and regulatory obligations, respond to a legitimate request, investigate a complaint or an incident, and prevent fraud or unauthorized activities.

5. Consent

When your consent is required, we request it in clear language and for specific and determined purposes.

Since certain information relating to your skin condition, weight, body composition, state of health, or a prescription associated with the Continuum program may be sensitive, we obtain express consent when required by law for their collection, use, or disclosure.

You may withdraw your consent at any time, subject to applicable legal or contractual restrictions.

The withdrawal of your consent has no impact on treatments carried out prior to this withdrawal, but it could prevent us from responding to your request or continuing your follow-up in the Continuum program when the information concerned is necessary for this purpose.

You can also modify or withdraw your cookie and tracking technology preferences at any time by means of the consent management tool accessible on our site.

6. Cookies and similar technologies

Our site uses cookies and other similar technologies, including pixels, beacons, scripts, local storage technologies, server logs, and device or browser identifiers.

The necessary technologies are used to ensure the secure operation of the site, including consent preference management, site protection, form operation, navigation, and language preferences. They cannot be disabled when they are necessary to provide you with the site or a requested service.

With your consent, performance technologies allow us to measure traffic, understand visitor journeys, and improve site content.

Functional technologies, which are also subject to your consent when required, enable certain optional features, including the display of embedded videos. Some may be provided by third parties, and if you refuse them, certain content may not display correctly.

With your consent, advertising technologies may be used to measure the performance of our campaigns, attribute consultation requests to marketing sources, and measure conversion events.

Certain events may be associated with a general service category, including weight management, face and neck, body, or medical services.

These technologies may involve providers such as Google LLC and Meta Platforms, Inc., as well as client-side and server-side tracking technologies.

The data and identifiers used to enable communication and correspondence between our systems and these providers are hashed prior to transmission, in accordance with the monitoring architecture implemented and the applicable technical protection measures.

You can refuse all cookies and technologies that are not strictly necessary and change your choices at any time using our consent management tool accessible on our website.

7. Hosting and Data Transfers

Depending on your consent choices, our site may use services such as Google Analytics, Google Tag Manager, Google Ads, the Meta pixel, and related client-side and server-side measurement technologies for the purposes described in this policy.

When your consent is required, non-essential analytics and advertising technologies are used in accordance with the preferences you expressed through our consent management tool accessible on our website.

Data communications between measurement and advertising systems are carried out in accordance with applicable requirements. Data and identifiers used for communication, correspondence, or attribution purposes are hashed prior to transmission in accordance with the implemented tracking architecture.

You can modify or withdraw your consent at any time. Refusing or withdrawing your consent prevents the further processing of the corresponding non-essential analytics and advertising events.

8. Cookies and Similar Technologies

We acknowledge that viewing a page about an aesthetic treatment, a skin condition, or the Continuum program, as well as submitting a request regarding certain services, may reveal an interest in a matter related to health, well-being, or physical appearance.

This information may be sensitive and is subject to enhanced protection measures.

Our measurement and advertising systems are configured to limit the information transmitted to the minimum necessary to measure the performance of our campaigns and attribute conversions, in accordance with applicable requirements.

To this end, we can transmit an event indicating that a consultation request has been submitted along with a general service category, for example, weight management, face and neck, body, or medical services.

When data or identifiers are used to enable matching, attribution, or measurement between different systems, they are hashed prior to transmission.

Hashing constitutes a technical protection measure intended to reduce the direct exposure of information and limit its use for intended purposes. Such information nonetheless remains protected in accordance with applicable personal information requirements.

We do not use detailed medical or clinical information collected as part of your care to create advertising audiences based on a diagnosis, a confirmed medical condition, or the contents of your clinical record.

9. Who can have access to your personal information?

Access to personal information is restricted to individuals and providers who need to access it as part of their duties.

This may include clinical and administrative teams responsible for consultations and Continuum follow-up care, such as physicians, kinesiologists, and nutritionists; administrative and IT personnel; web hosting and development providers; form, appointment-booking, and CRM providers; consent management solution providers; and analytics, audience measurement, and advertising service providers, notably Google and Meta, to the extent permitted by your consent choices and for the information necessary for the purposes described in this policy.

Professional advisors or public authorities may also have access to certain information when authorized or required by law.

Our staff and service providers are required to maintain the confidentiality and security of the information they access.

10. Under what circumstances may we disclose your personal information?

We may share your information with your consent in order to process a submitted request, manage a consultation or Continuum follow-up, or allow a service provider to act on our behalf.

We may also disclose certain information to comply with a legal obligation, respond to a legitimate request from an authority, investigate fraud or a security incident, or protect our rights or those of third parties.

Our service providers may only use the information for the purposes necessary to provide their services to us.

When information is shared with measurement or advertising providers, we limit the disclosure to the information necessary for the intended purposes. Data and identifiers used to enable system matching are hashed prior to transmission and are subject to applicable technical and contractual protection measures.

We do not sell any personal information.

11. Processing and storage outside of Quebec

Some of our service providers may process, access, or retain personal information outside of Quebec, notably elsewhere in Canada or in the United States.

Before disclosing personal information outside of Quebec, we conduct a privacy impact assessment in accordance with applicable legal requirements, taking into account in particular the sensitivity of the information, the purposes of the processing, the security measures in place, and the applicable legal framework.

Information processed in another jurisdiction may be subject to the laws of that jurisdiction. Our suppliers remain bound by their contractual obligations to protect the information they process on our behalf.

12. How long do we keep your personal information?

We retain personal information only for the period reasonably necessary for the purposes for which it was collected, including to process your request, provide follow-up within the Continuum program, manage our communications, comply with our legal and professional obligations, and handle any complaints or disputes.

Information transferred to our clinical or patient management systems is retained in accordance with our internal policies as well as applicable legal and professional requirements.

When personal information is no longer needed, we securely destroy it or anonymize it in accordance with applicable requirements.

13. How do we protect your personal information?

We implement administrative, physical, and technical measures appropriate to the sensitivity of the information we hold.

These measures may include, in particular, role-based access restrictions, authentication controls, encryption where appropriate, the hashing of data and identifiers used in communications and correspondence between systems, system monitoring, confidentiality commitments for our personnel, contractual measures with certain vendors, and security incident response procedures.

We also seek to limit the collection, use, and disclosure of information to what is strictly necessary for the purposes identified.

However, no information system can be completely immune to risks. Therefore, we cannot guarantee absolute security.

14. Privacy Incidents

We have procedures in place to detect, assess, document, contain, and manage privacy incidents.

When an incident presents a risk of serious injury, we notify the Commission d'accès à l'information du Québec as well as the individuals concerned, in accordance with applicable legal requirements.

15. What are your rights?

Subject to applicable law and after verification of your identity, you may request whether we hold personal information about you, access it or request its correction, and obtain information about its use or disclosure.

You can also withdraw your consent when the processing is based on it, change your cookie and tracking technology preferences, and unsubscribe from our promotional communications.

When the conditions provided by law are met, you may request the communication of certain computerized personal information in a structured and commonly used format. You may also request, in the cases provided by law, the rectification of personal information as well as the cessation of its dissemination or the unindexing of a hyperlink allowing access to it.

You may submit a question or a complaint regarding our privacy practices to us at any time.

We will respond to your request within the timeframes required by applicable law.

16. Information concerning minors

Our consultation request form and registration for the Continuum program must be completed by a person aged 18 or older.

We do not knowingly use personal information from minors for targeted advertising purposes.

17. Third-party websites and services

Our site may contain links to sites or services operated by third parties.

Physimed Medispa is not responsible for the privacy practices of sites it does not operate. We recommend that you review the privacy policies of these third parties before providing them with personal information.

18. Changes to this Policy

We may update this policy to reflect changes in our practices, technologies, or legal obligations.

The date displayed at the beginning of the policy indicates the date of its last revision. The version published on our site constitutes the official and current version.

19. How to contact us?

For any questions, requests for access or rectification, withdrawal of consent, or complaints regarding the protection of your personal information, please contact:

doing business as Physimed Medispa Attention: Privacy Officer 6363 Trans-Canada Highway
Montreal (Quebec) H4T 1Z9
Canada
Phone: 514-747-8097
Email: [email protected]

If our response does not give you complete satisfaction, you may also contact the Commission d'accès à l'information du Québec.