Privacy Notice

Survey research

The survey is for Canadian adults aged 18 or older. It asks choice questions and optional written questions about facial shine, current approaches, satisfaction, buying interest and price expectations. We use answers to understand consumer needs and guide product development.

We do not ask for your name or email address, and no sign-in is required. Please leave out names, contact details and medical information. Written answers or combinations of details could identify someone, so we do not promise complete anonymity.

We store submitted answers, submission time, a response ID, the privacy-notice version for new responses, and whether a response came from Google Forms or our branded survey. New response IDs are randomly generated; imported IDs identify legacy records. Our application does not link response IDs to its separate abuse-control records. Hosting providers may hold technical logs independently. Responses are accessible through restricted owner access. Authorised research support may receive relevant exports when needed; identifying details are removed where possible. We may share findings in summary form, but do not publish individual responses as testimonials without separate permission.

You can skip optional questions or leave before submitting. By submitting, you choose to provide answers for this research. We seek additional consent where required before using personal information for a different purpose. Unsent answers remain in page memory and may be cleared by leaving or reloading. Read the survey privacy notice for a focused summary.

Community emails

Registration is temporarily paused. For existing subscriptions and when registration reopens, we collect your email address, optional first name and records of subscription, confirmation and unsubscribe choices. We use this information to manage subscriptions, send development updates, feedback opportunities and launch news, and maintain consent and unsubscribe records.

Klaviyo manages subscriptions and email delivery. It may collect IP addresses, browser or device information and interaction times. Our emails use tracking images and links to record opens and clicks, which may be associated with your subscriber profile. These reports help us assess engagement; open counts are estimates because email services may automatically load or block images. You can unsubscribe at any time.

Social media and direct contact

We may use Facebook and Instagram ads to recruit survey participants and receive campaign reports such as impressions, clicks and spending. We do not send survey answers to Meta, upload respondent information for advertising audiences, or use Meta Pixel or the Conversions API to track survey submissions.

Social links are external links, not embedded feeds or tracking widgets. Platforms handle your activity under their own privacy policies: Instagram, Facebook, X, Pinterest and TikTok.

If you contact us, comment or send feedback, we receive the information you provide and any profile details made available by the platform. We use it to respond and manage our accounts. Public comments may be visible to others; please keep sensitive details out of them. Following a social account does not subscribe you to community emails.

Website data and cookies

Our homepage stores one aggregate page-view total, not individual visitor histories or identifiers. Refreshes and bots may count.

The survey database does not store raw IP addresses. To limit abuse, the survey uses a daily changing pseudonymous value derived from the connection IP and a submission count, stored separately from answers. Previous days’ limit records are cleared when a later submission is processed.

We have not added advertising pixels or third-party analytics to the homepage or survey, or survey cookies that link visitors to answers. Hosting providers receive connection data and may process IP addresses, device information and logs for operation and security. Cloudflare uses a security cookie; owner sign-in uses authentication cookies. We have not independently confirmed every provider logging or retention setting, and do not promise anonymous visits.

Service providers and processing outside Canada

We use OpenAI Sites and Cloudflare to host the survey and store responses, Klaviyo for community emails, and an email provider for correspondence. Information may be processed outside Canada, including in the United States, where privacy laws may differ and authorities may have lawful access.

Hosted visitor data is covered by the ChatGPT Sites Data Processing Addendum. Information uploaded to ChatGPT to build or edit the site is handled separately from hosted visitor submissions.

Earlier Google Forms responses were imported with their answers and timestamps preserved. Google copies may remain, and older Google links may still accept responses during the transition. Google handles its services under its Privacy Policy. New branded-survey submissions are not sent to Google Forms.

How long we keep information

We keep information only while needed for the stated purposes or legitimate legal or business requirements. Individual survey responses are reviewed at least every six months, with a normal target of deletion or irreversible aggregation within 24 months of submission, or earlier when no longer needed. Longer retention requires a documented reason and further review.

We maintain a minimal record of privacy actions and removed-response references for accountability and to prevent accidental reimport. Removing a live response does not instantly erase separate Google copies, exports or provider recovery backups; these require separate handling. After an unsubscribe, limited suppression and consent records may remain to honour your choice and meet applicable requirements.

Your choices and privacy requests

You may contact our Privacy Officer to request access to or correction of personal information covered by applicable law, withdraw consent, request deletion, or raise a complaint. We can retrieve and remove a response when it can be safely located and the request verified; deletion is subject to lawful retention requirements and is not an unconditional right to erase every copy. Keep your survey response reference if you may contact us about your answers. An approximate submission date and relevant context can also help. We may need minimal verification; a reference alone is not proof of identity. If we cannot safely identify a response, we will explain and offer reasonable assistance.

We respond within applicable legal periods and explain any permitted extension, refusal or required retention. Unresolved concerns may be brought to the BC Office of the Information and Privacy Commissioner.

Updates

We may update this notice when our practices change. The date above identifies the latest revision.