Privacy centre
When you request a consultation, we collect what the clinic needs to contact you, send it only to the clinic you choose, and check in once to ask if you booked. This page explains the details.
Last updated 9 Nov 2026
Sample text for review by counsel
This page is a draft for the preview. It isn't Aurayla's final policy and hasn't been reviewed by a lawyer.
What we collect
When you send a consultation request:
- Your first and last name, email address and phone number.
- How and in what language you’d like to be contacted.
- The treatment you’re asking about, the times that suit you, an optional start date and whether a virtual consultation is fine.
- Your message to the clinic, if you write one. We ask you not to include medical history.
- Your consent choices, the version of the consent text you saw and when you agreed.
Afterwards, we record when the clinic first contacts you through our relay (to measure reply times) and your answer to our one follow-up message.
When you browse, we use only what the site needs to work, such as keeping your request details in your browser tab while you fill in the form. We don’t use advertising pixels or remarketing.
Why we use it
- To send your request to the clinic you chose, so they can contact you.
- To relay the clinic’s first call, text or email, which is how we measure reply times shown on profiles.
- To send one follow-up message asking whether you booked.
- To send you Aurayla news and guides, only if you ticked that box. You can unsubscribe at any time.
- To keep the service secure and to meet our legal obligations.
Who we share it with
We share your request only with the clinic you choose. We don’t send it to other clinics, sell it, or share it with advertisers.
Companies that host our systems and deliver our emails and texts process information on our behalf under contract. They can’t use it for anything else.
The clinic tells us whether you booked only if you ticked the box allowing it. Otherwise, we only ask you.
Once a clinic receives your request, it is also responsible for your information under its own privacy obligations.
What we don’t do
- We don’t put your request details or the treatment you asked about in web addresses, analytics events or advertising tools.
- We don’t use your request to show you ads, on Aurayla or elsewhere.
- We don’t ask about your health. The clinic asks what it needs when it contacts you.
How long we keep it
We delete your contact details from a request 18 months after its last activity. We keep anonymous totals, such as how many requests a clinic received, because they don’t identify you.
If you opted in to emails, we keep your email address for that purpose until you unsubscribe.
Your rights
You can ask to see the information we hold about you, correct it, delete it, or withdraw your consent. We respond within 30 days.
Email privacy@aurayla.com. If you’re not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada (opens in a new tab).
Where it’s stored
We aim to store patient information in Canada. If a service provider processes it outside Canada, we’ll list that provider here.
Contact
Privacy questions: privacy@aurayla.com.