Privacy Policy

Last Updated: September 13, 2026

At Citadel Salon & Spa, located at 420 6th Street, New Westminster, BC V3L 3B2, we are committed to protecting your privacy and ensuring a secure, welcoming experience for all clients. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website (www.citadelsalonspa.ca), book appointments, purchase products, or interact with our services. We operate as an inclusive unisex salon and spa, offering premium hair styling, spa treatments, and quality hair products, and we value transparency in how we handle your data.

By using our website or services, you consent to the practices described in this Privacy Policy. If you have questions, please contact us at contact@citadelsalonspa.ca or +1 (604) 786-7461.

1. Information We Collect

We collect personal information to provide our services, including online bookings, product purchases, and user interactions. This includes:

Personal Information You Provide

  • Booking Information When you book an appointment, we collect your name, email address, phone number, preferred stylist, selected service (e.g., weaves, braids, haircuts, facials), and appointment date/time.
  • Purchase Information When you buy hair products or services through our online shop, we collect your name, billing and shipping address, email address, phone number, and order details. Payment information (e.g., credit card, Google Pay, Apple Pay) is processed securely by third-party providers such as Stripe and PayPal, and is not stored by Citadel Salon & Spa.
  • Comment Information If you leave comments on our blog, product reviews, or other interactive features, we collect the data entered in the comment form (e.g., name, email, comment content), along with your IP address and browser user agent string to help detect spam. If you use a Gravatar account, an anonymized string (hash) created from your email address may be sent to Gravatar to display your profile picture publicly alongside your approved comment. You can view Gravatar’s privacy policy here.
  • Contact Information If you contact us via forms, email, or phone, we collect your name, email address, phone number, and message content.
  • Account Information If you create an account, we collect your username, password (stored securely in encrypted form), and preferences (e.g., stylist or service preferences).

Automatically Collected Information

  • Website Usage Data We collect IP address, browser type, device information, pages visited, and time spent on our site using cookies and analytics tools such as Google Analytics.
  • Location Data If you use our Google Map or “Get Directions” feature, we may collect approximate location data to help guide you to our Surrey, BC salon.

Information from Third Parties

We may receive limited data from third-party services to facilitate bookings, purchases, or comment moderation. This includes:

  • Spam detection data from tools like Akismet
  • Transaction confirmations from Stripe, PayPal, Google Pay, and Apple Pay
  • Social media login data (e.g., Google or Facebook)

2. How We Use Your Information

We use your information to deliver, improve, and personalize our services, ensuring an inclusive and seamless experience. This includes:

Service Delivery

  • Processing bookings for hair styling (e.g., weaves, braids, cuts, colors) and spa treatments with your chosen stylist.
  • Fulfilling and shipping product orders from our online shop.
  • Moderating and displaying approved comments on blog posts or product reviews.
  • Sending appointment confirmations, reminders, order updates, and comment notifications via email or SMS.

Personalization

  • Tailoring experiences based on your preferences (e.g., recommending products for African, Asian or Caucasian hair types).
  • Displaying relevant content, such as gallery images of diverse styles or user-generated comments.

Communication

  • Responding to inquiries, support requests, comments, or feedback.
  • Sharing updates, promotions, or service announcements (with your consent).

Analytics and Improvement

  • Analyzing website usage and comment data via tools like Google Analytics and Akismet.
  • Optimizing stylist schedules and service offerings based on booking trends and user behavior.

Legal and Security Purposes

  • Complying with applicable laws such as PIPEDA and responding to legal requests.
  • Facilitating secure payments via third-party processors (e.g., Stripe, PayPal, Google Pay, Apple Pay).
  • Detecting and preventing spam in comments using tools like Akismet.
  • Protecting against fraud, unauthorized access, or misuse.

3. How We Share Your Information

We do not sell, trade, or rent your personal information for marketing purposes. We may share your information only as necessary to deliver our services or comply with legal obligations.

Service Providers

We share information with trusted third-party providers who help us operate our business. These include:

  • WooCommerce Bookings – for appointment scheduling
  • Stripe, PayPal, Google Pay, Apple Pay – for secure payment processing (payment details are handled directly by these providers and are not stored by Citadel Salon & Spa)
  • Google Maps – for location and navigation services
  • Akismet – for spam detection in comments
  • Gravatar – for displaying profile pictures alongside approved comments
  • Email/SMS Providers – for sending notifications and updates

All providers are contractually obligated to protect your data and use it only for the services they provide on our behalf.

Legal Compliance

We may disclose your information if required by law (e.g., court order, subpoena) or to protect the rights, safety, or property of Citadel Salon & Spa.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, with continued protection under this privacy policy.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and support essential site functions. These include:

Types of Cookies We Use

  • Essential Cookies Enable core website functionality such as bookings, checkout, and comment submission. Disabling these may affect your ability to use certain features.
  • Analytics Cookies Collect anonymized data (e.g., via Google Analytics) to help us understand how visitors use our site and improve our services.
  • Marketing Cookies Used to deliver relevant ads or promotions, only with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies may impact booking, purchasing, or commenting functionality. Read More

5. Data Security

We take reasonable measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These include:

Security Practices

  • Encryption: SSL/TLS protocols are used to secure data transmission during bookings, purchases, and comment submissions.
  • Secure Payment Processing: Payments are handled by trusted third-party providers (Stripe, PayPal, Google Pay, Apple Pay). Citadel Salon & Spa does not store your payment details.
  • Access Controls: Personal data is accessible only to authorized staff who require it to perform their duties.
  • Regular Audits: Our systems are monitored for vulnerabilities and updated to maintain security standards.

Incident Response

In the event of a data breach, we act promptly to contain and resolve the issue. Our response includes:

  • Identifying and containing the breach within 24 hours of discovery
  • Notifying affected individuals and reporting to the Office of the Information and Privacy Commissioner for British Columbia (OIPC BC) within 72 hours if the breach poses a risk of significant harm
  • Implementing corrective measures to prevent future incidents

Your Responsibilities

Protecting your data is a shared effort. We encourage you to:

  • Avoid sharing sensitive information through unsecured channels (e.g., public Wi-Fi or unencrypted email)
  • Keep your devices and software updated to reduce security risks

While no system is completely immune to threats, we are committed to safeguarding your information and will notify affected users as required by law in the event of a breach.

6. Your Rights and Choices

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), and the General Data Protection Regulation (GDPR) where applicable, you have the following rights regarding your personal information:

Access

You may request a copy of the personal information we hold about you, including comment data.

Correction

You may ask us to correct or update inaccurate or incomplete information (e.g., comment details or account preferences).

Deletion

You may request deletion of your personal data, such as comments or account information, subject to legal obligations (e.g., retention of order records for tax or compliance purposes).

Opt-Out

You can unsubscribe from marketing communications or comment notifications at any time by using the “unsubscribe” link in our emails or by contacting us directly.

Consent Withdrawal

You may withdraw your consent for non-essential data processing, such as marketing cookies or Gravatar usage, without affecting your access to core services.

To exercise any of these rights, please contact us at contact@citadelsalonspa.ca We will respond within 30 days, in accordance with PIPEDA requirements.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. Retention periods include:

  • Booking and Purchase Data: Retained for 7 years to meet tax and legal compliance requirements
  • Comment Data: Retained until you request deletion or the comment is removed (e.g., if the associated blog post is deleted)
  • Account Information: Retained until you request deletion or your account remains inactive for 2 years
  • Website Usage Data: Anonymized analytics data may be retained for up to 3 years to improve site performance and user experience

After the applicable retention period, data is securely deleted or anonymized in accordance with industry standards.

8. International Data Transfers

Your personal information is primarily stored and processed in Canada. However, some of our trusted third-party service providers may process data in other countries, including the United States. These providers include:

  • Stripe
  • WooCommerce
  • Gravatar
  • Akismet

We ensure that any international data transfers comply with applicable privacy laws, including PIPEDA and, where relevant, the GDPR. This is achieved through contractual safeguards and data protection agreements designed to uphold your privacy rights.

9. Third-Party Links

Our website may include links to third-party services such as Google Maps, Gravatar, and payment processors. These external sites operate under their own privacy policies, which we encourage you to review. Citadel Salon & Spa is not responsible for the privacy practices or content of these third-party websites.

10. Children’s Privacy

Our services are not directed to individuals under the age of 19, which is the age of majority in British Columbia. We do not knowingly collect personal information from children, including comments. If we become aware that such data has been collected, we will delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. Significant changes will be communicated via email or posted as a notice on our website. The most current version will always be available at www.citadelsalonspa.ca/privacy-policy.

11. Contact Us

For questions or requests, contact:
Citadel Salon & Spa
Address: 10579 King George Blvd, Surrey, BC V3T 2X5
Email: contact@citadelsalonspa.ca
Phone: +1 (604) 786-7461

Shopping Cart
Scroll to Top