Back to Home

Privacy Policy

Effective Date: May 16, 2026

Saba Zameni Vocal Studio ("we," "us," or "our") operates the booking website at https://www.sabazameni.com. We are committed to protecting the privacy of our students and website visitors in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial law in Ontario, Canada.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have. By using the Site or our services, you agree to the practices described here.

1. Information We Collect

• Contact information: Your full name, email address, and phone number — provided when you register, book a session, or contact us.
• Booking and session history: Dates, times, session types, package purchases, cancellations, and attendance records associated with your account.
• Account credentials: A hashed (bcrypt) password if you create a client portal account. We never store your password in plain text.
• Communication preferences: Your opt-in consent to receive email communications, recorded at the time of booking.
• Technical data: IP address (used temporarily for security rate-limiting on login), browser type, and session identifiers. Not used for tracking or advertising.

We do not collect sensitive personal information such as government identification numbers, health records, or financial account details.

2. Payment Information and Stripe

When you make a purchase, your card details are entered directly into Stripe's secure form and transmitted to Stripe using TLS encryption. We receive only a payment confirmation and a transaction reference ID. Stripe's use of your data is governed by Stripe's Privacy Policy.

3. How We Use Your Information

• To create and manage your client account and portal access.
• To process bookings, confirm appointments, and manage scheduling.
• To send booking confirmations, appointment reminders (24h and 1h before sessions), and cancellation notices.
• To send promotional emails where you have provided express consent (CASL-compliant).
• To enforce our cancellation policy, package expiry rules, and booking limits.
• To maintain Site security and prevent abuse (e.g., rate-limiting login attempts by IP).
• To comply with legal obligations under applicable Canadian law.

4. Email Communications and CASL

Canada's Anti-Spam Legislation (CASL) requires express consent before sending commercial electronic messages. We obtain this consent through an opt-in checkbox at the time of your first booking.

Transactional messages — booking confirmations, reminders, cancellation notices, and account communications — are sent on the basis of our existing business relationship and do not require separate opt-in consent under CASL.

You may withdraw marketing consent at any time by clicking the unsubscribe link in any marketing email, or by contacting us at info@sabazameni.com. Requests will be processed within 10 business days.

5. Cookies and Session Data

The Site uses only session cookies to maintain your login state. These are deleted when you close your browser or log out. We do not use persistent tracking cookies, advertising cookies, analytics services, or fingerprinting technologies.

6. Google Calendar Integration

The optional Google Calendar integration is only activated if you explicitly connect your Google account through the Site settings. We store OAuth tokens solely to maintain this integration and do not read or share your calendar beyond managing your booking events. You may disconnect at any time, which deletes all stored tokens. See Google's Privacy Policy for how Google handles your data.

7. Disclosure of Your Information

We do not sell, rent, or trade your personal information. We share information only with:

• Service providers: Stripe (payments) and Google (calendar sync, if enabled), solely to provide the services described here.
• Legal requirements: When required by law, court order, or governmental authority.
• Business transfers: In the event of a merger or acquisition, with prior notice to you.

8. Data Retention

• Account and booking records are retained for a minimum of seven (7) years to comply with Canadian tax obligations.
• Login attempt logs and temporary tokens are purged automatically within 24 hours.
• If you request account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law.

9. Security

We implement reasonable safeguards including TLS encryption, bcrypt password hashing (cost factor 12), prepared SQL statements, IP-based rate limiting on login endpoints, and server-side session timeouts. No online system is 100% secure; we cannot guarantee absolute security.

10. Your Rights Under PIPEDA

• Access: Request access to the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention obligations.
• Withdrawal of consent: Withdraw consent to collection or use of your information at any time.
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.

To exercise any of these rights, contact us at info@sabazameni.com. We will respond within 30 days.

11. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. Students under the age of majority in Ontario (18) must have a parent or guardian agree to this policy on their behalf.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and, where appropriate, notify registered clients by email. Continued use of the Site following posted changes constitutes acceptance of the revised policy.

13. Contact Us

---