Privacy Policy

Red Orchid is operated by NAILTECH & IT SOLUTIONS CORPORATION in Calgary, Alberta. You can reach us at 8500 Macleod Trail SE, Unit 400 - Floor 4, Calgary, AB T2H 2N1. This policy explains what personal information we collect through redorchid.ca, why we collect it, who else handles it, and how you can get it removed.

If you have a question about anything here, email [email protected].

Who this policy is for

It covers the Red Orchid website and customer accounts, including booking appointments online. It does not replace our salon policies for visits, cancellations and no-shows, which are set out separately on our Policies page.

Customer accounts on this website are for adults aged 18 or over, and we do not knowingly collect personal information through the website from anyone under 18. Where a parent or guardian arranges an appointment for a client aged 11 to 17, they arrange it with us directly rather than through the site, and the information we hold about that appointment comes from them. A parent or guardian exercises that client's privacy rights, and any permission to publish photographs of a client under 18 must come from them.

Information we collect

Your account. When you create an account we store your email address, a securely hashed version of your password (we never store the password itself), your first and last name, your phone number, and whether you agreed to receive promotional messages. You can also add your birthdate if you want to receive a birthday offer. If you save designs from our gallery or mark them as liked, we store that list on your account.

Passkeys. If you use a passkey, Red Orchid stores a public credential key and limited usage information (when it was added and last used). Red Orchid does not receive or store your fingerprint, face scan, or device unlock secret.

Your appointments. When you book, we store the services chosen, the date and time, the price and any discount or coupon applied, and notes about the appointment. Over time we also keep simple counts derived from your visits — how many appointments you have had, how much you have spent, and how often you visit — so we can recognise returning customers and apply the right pricing.

Photos and notes you send us. If you attach inspiration photos or notes to a booking, we store them so your technician can prepare. These files are kept outside the public part of our website and are not published anywhere. Photos of your finished nails are only stored and shown in your account when you have agreed to it, and are only published in our public gallery with your separate consent.

Work email verification. If you claim a corporate perk, we store the work email address you verified and the fact that the perk was issued.

Technical information. Our web server records standard log information, including your IP address, browser type and the pages requested. We also use short-lived records tied to an IP address to limit abuse of our forms and sign-in.

Signing in with a social account

You can sign in to Red Orchid with a social account — currently Google and Microsoft, and Facebook when we enable it — instead of a password. This is handled by the Nextend Social Login plugin running on our own website.

When you use it, the provider sends us your account identifier at that provider, your email address, your name and your profile picture, which is saved to our media library so it can be used as your avatar. We do not keep the access token the provider issues, and we cannot read your email, contacts, calendar or anything else in your provider account.

If the email address from the provider matches an existing Red Orchid account, the social account is linked to it so you do not end up with two accounts. You can ask us to unlink a social account at any time without deleting your Red Orchid account.

Signing in with a social account is about identity only. It is not consent to receive marketing — that is a separate choice you make yourself, and you can change it at any time.

Cookies and browser storage

We use cookies and similar browser storage to run the site, not to track you across other websites. We do not use advertising pixels or third-party website analytics. We use only the limited first-party, account-linked funnel measurement described in the retention section below.

  • WordPress sign-in and session cookies, which keep you logged in.
  • Cookies set during a social sign-in, while you are being redirected to and from the provider.
  • Cookies and stored values used by our booking system.
  • Google reCAPTCHA, which helps us block automated form abuse.
  • Values stored in your own browser rather than sent to us: your service selection (ro_cart_v1) and a temporary draft of a sign-in or registration form (ro_auth_draft_v1), so you do not lose your place if a page reloads.

You can clear or block cookies in your browser settings, but signing in and booking will not work without the essential ones.

How we use your information

  • To create and secure your account and let you sign in.
  • To take, confirm, change and cancel appointments, and to prepare for your visit.
  • To apply prices, discounts, coupons and loyalty benefits correctly.
  • To send you messages about your own bookings — confirmations, reminders, changes and verification codes.
  • To send promotional messages, but only if you have asked to receive them.
  • To keep records we are required to keep, such as records of the services we have provided and payments received.
  • To protect the site against fraud and abuse.

Companies that handle information for us

We use a small number of service providers. They handle your information only to provide their service to us.

  • Cloudways — hosting for our website and database.
  • Brevo (formerly Sendinblue) — delivers our email, including booking emails and, where you have opted in, promotional email.
  • Twilio — delivers our text messages, including verification codes and booking messages.
  • Google Calendar — appointments are copied to our technicians' work calendars so their schedules stay accurate. The calendar entry contains the appointment time and a short title; customers are not added as attendees.
  • Google Fonts — supplies the fonts used on this site, which means your browser contacts Google when a page loads.
  • Google reCAPTCHA — protects our forms from automated abuse.
  • Nextend Social Login — runs on our own website and connects it to Google, Microsoft and Facebook sign-in.
  • Chaty — the chat button that opens WhatsApp, Telegram, Messenger or Instagram. If you use it, your conversation takes place on that platform under that platform's own privacy policy.

We do not sell your personal information, and we do not share it for anyone else's advertising.

Email and text messages

Messages about your bookings — confirmations, reminders, changes, verification and password resets — are part of the service and are sent whether or not you have opted into marketing.

Our email system records that a message was sent and whether it was opened or a link in it was clicked. This is how we confirm that booking emails actually arrive. These delivery records are kept until we remove them.

Promotional email and text messages are optional and consent-based. We only send them if you have asked us to, you can withdraw at any time using the unsubscribe link in any message, in your account settings, or by emailing us, and we will stop. Promotional text messages are limited to daytime hours in Calgary and to at most one message per day.

How long we keep information

We keep your account and appointment history for as long as you have an account with us. Records of services provided and payments received are kept for as long as tax and accounting rules require, even after an account is closed. Inspiration photos attached to a booking are removed once they are no longer needed for that booking. Our own email delivery log — which records that a message was sent and whether it was opened or clicked — is kept until we remove it.

To improve our account and booking experience, we record the sign-up method and account-linked dates for key steps such as account creation, first sign-in, phone verification and first booking. We use this information only to understand aggregate completion of these steps. These records do not contain contact details, verification codes, passwords, or authentication/reset tokens. We keep this funnel information for up to 24 months from account creation, or until the account is deleted, whichever occurs first.

This 24-month limit applies only to funnel information. It does not change how long we keep your account, appointment or booking records, or records of services and payments described above.

If you close your account, we keep a minimal record of your email address on our unsubscribe list so that you are not contacted again by mistake. You can ask us to remove that too — see Data Deletion.

Deleting your information

You can ask us to delete your account and the personal information connected to it. The full instructions, what we can remove and what we have to keep, are on our Data Deletion page.

Your choices and rights

Under Alberta's Personal Information Protection Act and, where applicable, the federal Personal Information Protection and Electronic Documents Act, you can ask us what personal information we hold about you, ask us to correct it if it is wrong, withdraw your consent to marketing, and ask us to delete your account. Canada's Anti-Spam Legislation governs the commercial messages we send.

To make any of these requests, email [email protected] from the address on your account. We will acknowledge your request within 5 business days.

Changes to this policy

If we change how we handle personal information — for example if we add a new provider or a new sign-in option — we will update this page and change the date below.

Last updated: 27 September 2026.

Book Now Call WhatsApp Telegram Messenger