Privacy policy

Operated by Mild Maison Thermale inc..
Last updated: April 16, 2026

• 1. Purpose and Scope

  This Privacy Policy (the “Policy”) describes the manner in which Mild Maison Thermale inc. (“mild”, the “Company”, “we”, “us”, or “our”) collects, uses, discloses, retains, and protects personal information of individuals who access our website, create an account, make a purchase, book a service, or otherwise interact with our services (the “User”).

  This Policy applies to all personal information collected by the Company through its website, its digital platforms, and its physical operations, and must be read in conjunction with our Terms and Conditions and any other applicable agreements.

• 2. Definition of Personal Information

  For the purposes of this Policy, “personal information” means any information that relates to an identifiable individual, directly or indirectly, including but not limited to identifying information, contact details, transactional data, usage data, and technical information associated with a device or online identifier.

  Personal information does not include anonymized data that cannot reasonably be associated with a specific individual.

• 3. Collection of Personal Information

  The Company may collect personal information directly from the User, automatically through the use of the website, or from third-party service providers in connection with the provision of Services.

  Without limiting the generality of the foregoing, the Company may collect personal information including, but not limited to, the User’s name, email address, telephone number, billing and payment information, booking history, preferences, IP address, device identifiers, browser information, navigation data, and interactions with the website.

  Personal information is collected only where necessary for the purposes identified in this Policy and in accordance with applicable laws.

• 4. Purposes of Collection and Use

  The Company collects and uses personal information for specific, explicit, and legitimate purposes, including but not limited to processing transactions, managing bookings and memberships, communicating with Users, providing customer support, ensuring the safety and security of the facilities, improving the quality and performance of the Services, conducting analytics, and supporting marketing and promotional activities.

  The Company may also use personal information to comply with legal obligations, enforce its contractual rights, prevent fraud or misuse, and protect the rights, property, and safety of the Company and its Users.

• 5. Consent

  By providing personal information to the Company or by using its Services, the User consents to the collection, use, and disclosure of such information in accordance with this Policy.

  Where required by law, the Company will obtain express consent for specific uses of personal information, including for marketing communications or the use of non-essential cookies.

  The User may withdraw consent at any time, subject to legal or contractual restrictions, it being understood that such withdrawal may limit the Company’s ability to provide certain Services.

• 6. Disclosure of Personal Information

  The Company may disclose personal information to third parties where necessary for the performance of the Services or for the purposes identified in this Policy, including but not limited to payment processors, booking platforms, IT service providers, marketing partners, and data hosting providers.

  Such third parties are contractually bound to use personal information solely for the purposes for which it was disclosed and to implement appropriate safeguards to protect it.

  The Company may also disclose personal information where required by law, regulation, court order, or governmental request, or where such disclosure is necessary to protect the rights, safety, or property of the Company or others.

• 7. Cross-Border Transfers

  Personal information may be stored or processed outside the Province of Quebec or Canada, including in jurisdictions where data protection laws may differ.

  In such cases, the Company undertakes to implement appropriate contractual and organizational safeguards to ensure that personal information remains adequately protected and handled in accordance with applicable legal requirements.

• 8. Retention of Personal Information

  The Company retains personal information only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or operational requirements.

  Retention periods may vary depending on the nature of the information and applicable legal obligations.

  Upon expiration of the retention period, personal information is securely deleted, anonymized, or otherwise disposed of in accordance with applicable practices.

• 9. Security Measures

  The Company implements reasonable and appropriate administrative, technical, and physical safeguards to protect personal information against unauthorized access, loss, misuse, disclosure, or alteration.

  Such measures may include secure payment processing systems, access controls, encryption technologies, and internal policies governing data handling.

  However, no method of transmission or storage is completely secure, and the Company cannot guarantee absolute security.

• 10. User Rights (Quebec Law 25)

  In accordance with applicable laws, including Quebec’s Law 25, the User has the right to access his or her personal information, request correction of inaccurate or incomplete information, request deletion or anonymization where applicable, withdraw consent, and request information regarding the processing of personal data.

  The User also has the right to data portability, subject to applicable conditions, and to be informed of any confidentiality incidents involving personal information.

  Requests may be submitted to the Company using the contact information provided below.

• 11. Cookies and Tracking Technologies

  The Company uses cookies and similar technologies to enhance the functionality of the website, analyze user behavior, and support marketing activities.

  Cookies may collect information such as IP address, device type, browser information, pages visited, session duration, and user preferences.

  Non-essential cookies are used only with the User’s consent, which may be given, refused, or withdrawn through the cookie management interface.

  For more detailed information, please refer to our Cookie Policy.

• 12. Third-Party Technologies and Integrations

  The Website may integrate third-party services, including analytics tools and social media platforms, which may collect and process data independently.

  The Company does not control the data practices of such third parties and encourages Users to review their respective privacy policies.

• 13. Privacy Officer

  The Company has designated a person responsible for the protection of personal information.

  For any questions, requests, or complaints regarding this Policy or the handling of personal information, Users may contact:

  Hicham Khanafer
  mild maison thermale
  Operated by Mild Maison Thermale inc.
  info@mildmaisonthermale.ca

• 14. Confidentiality Incidents

  In the event of a confidentiality incident involving personal information, the Company will take reasonable measures to mitigate risks and, where required by law, notify affected individuals and relevant authorities.

• 15. Amendments to the Policy

  The Company reserves the right to modify this Policy at any time in order to reflect changes in its practices, technologies, or legal obligations.

  The updated version will be posted on the Website, and continued use of the Services constitutes acceptance of the revised Policy.

• 16. Governing Law

  This Policy shall be governed by and interpreted in accordance with the laws of the Province of Quebec and the applicable laws of Canada.