Privacy Policy

Last updated: 21 August 2026

Who we are

Snatched Body by Flo ("we", "us") operates this website and provides body, beauty and wellness services at 107 Autumnwood Crescent, Greater Sudbury, Ontario P3B 3Z1. We are responsible for the personal information we hold about you.

This policy is written to reflect our obligations under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy law.

What we collect

We collect only what we need to serve you:

• Contact details you give us — name, email address and phone number.
• Enquiry details — the service you are interested in, a preferred date, and the content of your message.
• Waitlist details — first name, last name, email, optional phone and province, if you join the DiabyControl 5™ waitlist.
• Appointment information — held in our booking system when you book with us.
• Health information you choose to share so we can advise you on suitability for a treatment.
• Basic technical information — IP address and standard server logs, kept for security and to prevent form abuse.

We do not collect payment card details through this website.

Your member account

If you create an account, we store your name, email address, phone number and the appointments you have requested, so that you can see your own history and we do not have to ask you the same questions every visit.

Your password is stored only as a one-way hash. Nobody can read it — not our staff, and not anyone who might obtain a copy of the database. If you forget it, it is replaced, never recovered.

Anything you tell us in the notes box when you book — a health condition, a medication, a pregnancy, a recent surgery — is kept with that appointment and used for one purpose: advising you honestly about which treatments are suitable for you. It is not used for marketing and it is not shared.

You can close your account at any time by emailing contact@snatchedbodybyflo.ca. We delete your login and your contact details. Records of appointments you actually attended are kept as our own record of work carried out, as any studio would.

Why we collect it

We use your information to reply to your enquiry, to arrange and deliver your appointment, to advise you honestly about whether a treatment is suitable for you, to keep records we are required to keep, and — only if you have asked us to — to tell you about the DiabyControl 5™ launch or occasional studio news.

We do not sell your information, we do not rent it, and we do not share it with advertisers.

Consent

We ask for your consent at the point we collect your information, and we tell you what it is for. You can withdraw consent at any time by emailing us. Every marketing email we send includes an unsubscribe link, as required by Canada's Anti-Spam Legislation (CASL).

Withdrawing consent for marketing does not affect our ability to contact you about an appointment you have booked.

Photographs

Before and after photographs are only ever taken with your knowledge, and are only published with your separate written authorization. You may withdraw that authorization at any time and we will remove the images from the website.

Who else sees your information

A small number of service providers process information on our behalf: our website host, our email provider and, when you pay by card, our payment provider. They are permitted to use your information only to provide their service to us.

We may disclose information where we are legally required to do so.

Where it is kept and for how long

Information submitted through this website is stored in our website database and in our email. Some providers may store data outside Canada, where it may be subject to the laws of that country.

We keep client records for as long as we need them for the purpose collected and to meet our record-keeping obligations, then delete them. Waitlist entries are kept until you unsubscribe or until the waitlist is closed.

How we protect it

The website is served over an encrypted HTTPS connection. Form submissions are protected against automated abuse, database access is restricted, and administrative access is password-protected.

No system is perfectly secure, but we take reasonable steps appropriate to the sensitivity of the information we hold.

Cookies

This website uses a single session cookie, which keeps your form submission secure and does not track you across other websites. We do not use advertising or third-party tracking cookies. Embedded content such as the booking calendar or the map may set their own cookies under their own policies.

Your rights

You may ask us what personal information we hold about you, ask for a correction, ask us to delete it, or withdraw your consent. Write to us and we will respond within a reasonable time, normally within 30 days.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

Children

This website is not directed at children, and we do not knowingly collect personal information from anyone under 16.

Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes will be highlighted on the website.