Privacy policy

Last updated: August 18, 2025

Who we are
Osovska Health Studio (sole proprietorship of Ivanna Chornenka Osovska) operates this store and website, including all related information, content, features, tools, products and services (the “Services”). We use Shopify to power our online store and may use Fresha (or a similar platform) for bookings.

This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls for the collection, processing, and disclosure of personal information.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.

Contact: i.chernenkayosovska@gmail.com • 21 Miriam Garden Way, Unit 42-42, Vaughan, ON, L4J 8H6, Canada • +1 (437) 770-4362

Personal Information We Collect or Process

“Personal information” means information that identifies or can reasonably be linked to an individual. It does not include properly de-identified or aggregated data. Depending on how you interact with us and applicable law, we may collect:

Contact details: name, email, phone, billing/shipping address.
Account info: username, password, preferences and settings.
Transactions: items viewed, cart/wishlist, purchases, returns, exchanges, cancellations, and past orders.
Communications: information you provide in messages or customer support.
Device/usage: IP address, device and browser details, pages viewed, timestamps, referring URLs, cookies and similar tech.
Payments: order and payment details. Payments are processed by Shopify Payments and/or other processors; we do not store full card numbers.
Booking/service information: appointment details and notes needed to deliver services safely (e.g., skin goals, allergies, contraindications).
Age & identity verification (for 18+ services): date of birth (and, if provided for appointment matching, name) via Apple’s Verify with Wallet. We do not collect or store ID images or ID numbers from Wallet. We retain only the verification result (yes/no), timestamp, and booking reference (and name if you choose to share it).

Sources of Personal Information

Directly from you (forms, checkout, messages, consent forms).
Automatically via cookies/analytics when you use the Services.
Service providers we use to run our business (e.g., Shopify for e-commerce; Fresha for bookings; Apple Verify with Wallet).
Partners/third parties where permitted by law.

How We Use Personal Information

Provide, tailor, and improve the Services: process orders, payments, shipping/returns, manage accounts, remember preferences, recommend products, manage bookings and treatment records.
Age/identity verification for 18+ services and informed consent, using Verify with Wallet (we store only the result, timestamp, booking reference, and name if provided).
Customer communications & support (reminders, updates).
Security & fraud prevention and to protect our users and the Services.
Legal compliance (tax, accounting, regulatory requests).
Marketing with consent: we send marketing only if you opt in; you can opt out at any time via the unsubscribe link.

How We Disclose Personal Information

We may share personal information with:

Service providers under contract (Shopify/e-commerce, payment processors, booking tools such as Fresha, email/SMS providers, hosting, Apple Verify with Wallet).
Business/marketing partners (only with your consent and subject to their privacy notices).
Authorities when required by law, or in connection with legal claims or enforcement.
Corporate transactions (e.g., sale or reorganization) as permitted by law.
We do not sell personal information.

Cookies & Analytics

We use necessary cookies and limited analytics to operate, secure, and improve the Services. You can manage cookie preferences in your browser and, if enabled, through our site banner. Some partners (e.g., Shopify) use their own cookies pursuant to their policies.

Retention

We keep data only as long as needed for the purposes above or as required by law:

Booking/service records: generally 2 years after your last visit (or longer if required by law/insurance).
Transaction & tax records: generally 7 years (Canada).
Verify with Wallet logs (result/timestamp/booking reference and name if provided): 2 years.
When no longer needed, we delete or de-identify information.

Minors

Certain services are available only to clients 18+. We do not knowingly collect personal information from minors without appropriate consent from a parent/guardian.

Your Rights and Choices

Depending on your location, you may have rights to access/know, correct, delete, port, and withdraw consent (where applicable). You can exercise these rights by contacting us at i.chernenkayosovska@gmail.com. We may need to verify your identity and may deny requests where permitted by law. We will not discriminate against you for exercising your rights.
For information about how Shopify handles data, see: https://privacy.shopify.com/en.

Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data. No method of transmission or storage is 100% secure, but we continually improve our controls.

International Transfers

Service providers may process data outside your province or outside Canada (e.g., U.S./EU). Where required, we use appropriate safeguards (such as standard contractual clauses).

Relationship with Shopify

Our store is hosted by Shopify. Information you submit may be processed by Shopify and its subprocessors (which may be outside your country) to provide and improve the Services. For Shopify’s practices and your choices, visit the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Third-Party Websites and Links

Links to third-party sites are provided for convenience. Their privacy and security practices apply to those sites; please review their policies.

Complaints

If you have concerns about our privacy practices, contact us at i.chernenkayosovska@gmail.com. You may also contact the Office of the Privacy Commissioner of Canada or your provincial authority.