Privacy Policy
Effective Date: Jan 1st, 2026
IMPORTANT NOTICE REGARDING TEXT MESSAGING
DATA
BrainStim Health ("we," "us," or "our") DOES NOT share customer opt-in information, including phone numbers and consent records, with any affiliates or third parties for marketing, promotional, or any other purposes unrelated to providing our direct services. All text messaging originator opt-in data is kept strictly confidential.
1. Information We Collect
We collect the following types of information:
Personal Information:
Name, email address, phone number, physical address
Payment information when you make a purchase or request a quote
Opt-in records and timestamps for all communication channels (SMS, email, etc.)
Non-Personal Information:
IP address, browser type, device information
Website usage patterns and analytics
Cookies and similar technologies
Customer Communication:
Records of inquiries and service requests
Appointment details and preferences
Service history and feedback
2. How We Use Your Information
We use collected data for:
Providing and improving our services
Processing transactions and payments
Communicating with you about your inquiries, appointments, and promotions
Enhancing website functionality and user experience
Ensuring security and fraud prevention
Maintaining records of your communication preferences and consent
3. SMS Messaging & Compliance
Text Message Program Terms & Conditions
By opting into our SMS messaging services, you agree to receive text messages related to our services, including appointment reminders, customer support, and important updates.
Opt-In & Consent:
You will only receive messages if you have explicitly opted in
We maintain timestamped records of all opt-in actions
We comply with the Telephone Consumer Protection Act (TCPA) and all applicable laws
Opt-Out Instructions:
You can cancel SMS notifications at any time by replying "STOP"
You will receive a final confirmation message, and no further messages will be sent unless you re-opt in
All opt-out requests are processed immediately
Message Frequency & Content:
Message frequency varies based on your interactions with our business
Messages will be directly related to the services you have requested
We do not send promotional content without specific consent
Help & Support:
Reply "HELP" for assistance or contact us at info@brainstim.ca
Customer support is available during regular business hours
Carrier Information:
Standard message and data rates may apply
Carriers are not liable for delayed or undelivered messages
Supported carriers include AT&T, Verizon, T-Mobile, Sprint, and most regional carriers
SMS Data Protection Statement
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We implement strict data protection measures to safeguard your SMS opt-in information and consent records.
4. Information Sharing & Disclosure
We do not sell, rent, or trade personal information. We may share information with:
Service Providers:
Third-party vendors who assist in our operations (e.g., payment processing, appointment scheduling)
SMS aggregators and providers solely for the purpose of delivering messages you have consented to receive
All service providers are contractually obligated to maintain confidentiality and security
Legal Compliance:
If required by law, legal process, or to protect our rights
In response to valid law enforcement requests or court orders
Business Transfers:
In case of mergers, acquisitions, or sale of assets
In such cases, your data remains protected under the terms of this policy
All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.
5. Data Security
We implement and maintain reasonable security measures to protect your personal information:
Encryption of sensitive data in transit and at rest
Secure access controls and authentication mechanisms
Regular security assessments and updates
Employee training on data protection
Breach notification protocols in accordance with applicable laws
Secure backup systems and disaster recovery procedures
Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We strive to use commercially acceptable means to protect your personal information but cannot guarantee absolute security.
6. Cookies & Tracking Technologies
We use cookies and similar technologies to:
Analyze site traffic and user behavior
Remember your preferences
Improve website functionality and user experience
Measure the effectiveness of our services
You may control cookies through your browser settings. Disabling cookies may limit your ability to use certain features of our website.
7. Your Rights & Choices
You have the right to:
Access, update, or delete your personal information
Opt-out of marketing emails by clicking "unsubscribe" in our emails
Opt-out of SMS messages by replying "STOP"
Request information on how we process your data
Withdraw consent at any time for future communications
Lodge a complaint with a supervisory authority if you believe your rights have been violated
To exercise these rights, please contact us using the information in Section 12.
8. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies. This privacy policy applies only to information collected by BrainStim Health.
9. California Privacy Rights (CCPA)
This section applies solely to residents of the State of California and supplements the information in this Privacy Policy. It is provided in accordance with the California Consumer Privacy Act of 2018 (CCPA).
Categories of Personal Information We Collect
In the preceding 12 months, we may have collected the following categories of personal information from California residents:
Identifiers (e.g., name, email address, phone number, IP address)
Personal information categories listed under California Customer Records statute (Cal. Civ. Code Section 1798.80(e)), such as name, telephone number, and address
Commercial information (e.g., records of services purchased or considered)
Internet or other electronic network activity (e.g., interactions with our website)
Your Rights as a California Resident
If you are a California resident, you have the following rights under the CCPA:
The right to know what personal information we have collected about you, including the categories of information, the sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom it is shared
The right to request deletion of your personal information, subject to certain legal exceptions
The right to opt out of the sale of your personal information. We do not sell your personal information
The right not to be discriminated against for exercising any of your CCPA rights
How to Submit a CCPA Request
To exercise any of the rights described above, please contact us using the information in Section 12. You may also submit a request by email to info@brainstim.ca. We will acknowledge your request within 10 business days and respond within 45 days. If additional time is required, we will notify you in writing of the reason and the extension period, which will not exceed an additional 45 days.
Verification
We are required to verify your identity before fulfilling a consumer rights request. We may ask you to provide information sufficient to confirm that you are the person about whom we collected personal information, or an authorized representative acting on that person's behalf.
10. Canadian Privacy Rights (PIPEDA & CASL)
This section applies to residents of Canada and is provided in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).
PIPEDA — Your Privacy Rights
Under PIPEDA, we are accountable for the personal information we collect and are committed to the following ten Fair Information Principles:
Accountability: We have designated a privacy officer responsible for our compliance with PIPEDA
Identifying Purposes: We identify the purposes for which personal information is collected at or before the time of collection
Consent: We obtain your knowledge and consent before collecting, using, or disclosing your personal information, except where permitted or required by law
Limiting Collection: We collect only the personal information necessary for the identified purposes
Limiting Use, Disclosure, and Retention: We use or disclose personal information only for the purposes for which it was collected and retain it only as long as necessary
Accuracy: We maintain personal information in as accurate, complete, and up-to-date a form as is necessary
Safeguards: We protect personal information with security measures appropriate to the sensitivity of the information
Openness: We make our privacy policies and practices readily available
Individual Access: You may access your personal information held by us upon request and request corrections where applicable
Challenging Compliance: You may direct questions or complaints about our compliance with PIPEDA to our privacy officer
Your PIPEDA Rights
As a Canadian resident, you have the right to:
Access the personal information we hold about you
Request correction of inaccurate or outdated personal information
Withdraw consent for any use of your personal information at any time, subject to legal or contractual restrictions
File a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you believe your privacy rights have been violated. The OPC can be reached at www.priv.gc.ca or by calling 1-800-282-1376
Data Breach Notification
In the event of a data breach that poses a real risk of significant harm to you, we will notify you and report the breach to the Office of the Privacy Commissioner of Canada as required under PIPEDA's mandatory breach reporting requirements.
CASL — Canadian Anti-Spam Legislation
All commercial electronic messages (CEMs), including SMS text messages, that we send to Canadian residents comply with CASL. Specifically:
We only send CEMs to individuals who have provided express consent, or where implied consent exists under an existing business relationship (within 2 years of a transaction) or an inquiry (within 6 months)
Every CEM we send clearly identifies our business name and includes valid contact information, including a mailing address and either a phone number, email address, or website URL
Every CEM includes a clear and easy unsubscribe mechanism. For SMS messages, you may reply "STOP" at any time. We will honor all unsubscribe requests within 10 business days
Consent obtained for SMS messaging is channel-specific. Consent to receive email does not constitute consent to receive SMS messages, and vice versa
We maintain records of all consents, including the date, time, and method by which consent was obtained
Checkboxes used to obtain SMS or email consent are never pre-checked. All opt-in actions must be taken proactively by the individual
For questions about our CASL compliance practices, please contact our privacy officer using the information in Section 12.
11. Changes to This Privacy Policy
We may update this policy periodically. The latest version will always be available on our website with the effective date. For significant changes, we will notify you by email or through a notice on our website.
12. Contact Us
If you have questions about this Privacy Policy or how your information is handled, contact us at:
BrainStim Health
Phone: +1 866-999-7846
Email: info@brainstim.ca
Website: https://brainstim.ca/
By using our website and services, you consent to this Privacy Policy.
