Privacy Policy

Who we are

Flourish TCM Clinic Ltd. ("Flourish," "we"), #115-1058 Mainland St, Vancouver, BC V6B 2T4. We follow British Columbia's Personal Information Protection Act (PIPA). Our Privacy Officer is Tabasom (Tabi) Mirshahi, reachable at info@flourishtcm.com.

What this policy covers

This website (flourishtcm.com) and your Flourish website account. Booking, payments, intake and consent forms and clinical records are managed in our booking system, Skejel, which has its own privacy notice.

What we collect

• Account information: name, email, phone (optional), password (stored hashed; we can't see it), preferred language and practitioner, saved items, notification and marketing preferences.
• Messages and forms: contact, waitlist and careers submissions (careers may include your résumé).
• Technical data: IP address, browser and device information, and pages visited, for security and, with your consent, for analytics.
• Cookies: essential cookies (sign-in, security, your consent choice) and, only if you accept, analytics and marketing cookies (Google Analytics, Meta pixel). See section 8.

We don't collect health information on this website. Please don't include health details in messages or waitlist notes.

Why we use it

to run your account and show your bookings from Skejel; to answer messages and manage the waitlist; to send service emails (verification, password reset, waitlist confirmations); to send marketing emails only if you opt in; to keep the site secure; and, with consent, to understand how the site is used and measure our advertising.

Your bookings

When you verify your email, we link your website account to your Skejel customer record by that email address, so your account can show your appointments, packages, gift cards and form status. This information is fetched from Skejel when you view it and isn't stored in our website database.

Who we share it with

Service providers acting on our behalf, under contract: Skejel (booking) · our website host · Zoho ZeptoMail (email delivery) · Cloudflare (security and DNS) · Google Analytics and Meta (only with your consent). Some providers store data outside Canada, including in the United States, where it may be subject to local laws. We don't sell personal information.

How long we keep it

Accounts are kept until you delete them; unverified accounts are deleted after 30 days. Waitlist entries are deleted 12 months after we've contacted you. Messages are kept as long as needed to respond.

Cookies and your choices

You can accept or reject non-essential cookies in our banner and change your choice anytime from the "Cookie settings" link in the footer.

Your rights

You can ask to access or correct your personal information, withdraw consent to marketing (every marketing email has an unsubscribe link), and delete your account yourself from your Account → Delete account page. Email info@flourishtcm.com for any request. If you're not satisfied with our response, you can contact the Office of the Information and Privacy Commissioner for British Columbia.

Security

We use encryption in transit (HTTPS), hashed passwords, access controls and rate limiting. No system is perfectly secure; we'll notify you as required by law if a breach affects you.

Changes

We'll update the date above when this policy changes, and notify account holders of significant changes by email.