Privacy Policy
Last updated: October 15, 2026 · Policy version 2026-10-15
1. Who we are
Eternal — Plastic Surgery (“Eternal”, “we”, “us”) operates eternalplasticsurgery.ca. Eternal coordinates consultations and procedures with Dra. Angela Cadavid in Medellín, Colombia, for patients from Alberta, Canada. We aim to handle your information in line with Alberta’s Personal Information Protection Act (PIPA) and, where it applies, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
Privacy contact: info@eternalplasticsurgery.ca. Write to us there with any question, request or complaint about your information.
2. What we collect
What we collect depends on what you do on the site. Please share only what you are comfortable sharing.
- Journey tool. Your name; your WhatsApp number and/or email; your city, province or territory and, optionally, your country of birth; the area, procedures and package you are interested in; your timeline; and the health information you enter: previous surgeries, allergies, health conditions (such as high blood pressure, a thyroid or autoimmune condition, or a history of blood clots), your body mass index (BMI) and any notes you add. We also store the language you chose, the IP address and browser type of your visit and, if you accepted analytics, the campaign tags (utm_source, utm_medium, utm_campaign) of the link that brought you to the site.
- Gallery access. To see our real before-and-after surgical photos you give your name and a phone number or email, and you confirm that you are 18 or older and agree to view medical images. We keep a record of that consent (date and version of the wording). Being contacted is a separate, optional choice.
- Chat assistant. The messages you type in the chat, which we store together with a chat session identifier. If you give your name, phone number or email in the chat, the assistant can create a contact record so that our team can follow up.
- Messages and photos you send us. If you write to us by email or WhatsApp, we keep what you send, which may include photos or health information. Please send only what is needed for your consultation.
- Cookies and similar technologies. See section 8.
3. Why we use it
- to answer your inquiry and to contact you about a consultation with Dra. Angela Cadavid’s team (only if you asked us to, or agreed to be contacted);
- to prepare your virtual consultation and, after it, your personalized quote and recovery plan, and so that Dra. Angela’s team can assess with you whether a procedure may be suitable;
- to coordinate your medical travel (flights, lodging, procedures) if you decide to proceed;
- to send you a confirmation of your request and follow-up messages about it;
- to let you view the before-and-after gallery and to keep proof of your consent;
- to run and secure the website and the chat, and to prevent abuse (for example, by limiting repeated requests from the same address);
- to understand how the site is used, only if you accept analytics.
We do not use your information for advertising and we do not sell it.
4. Your consent
We rely on your consent. You give it when you submit the Journey form, when you clearly agree in the chat to share your contact details, when you unlock the gallery or when you accept analytics. Some choices are separate and optional: being contacted after unlocking the gallery, and analytics.
You can withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by writing to info@eternalplasticsurgery.ca. Withdrawing may mean that we can no longer answer your inquiry or give you access to the gallery.
Change your analytics choice at any time:
5. Who we share it with
We do not sell your information. We share it only as follows:
- Dra. Angela Cadavid and her medical and coordination team. Your requests reach them by email and through a password-protected administration area used by authorized staff. The email includes the information you submitted, including the health information you entered in the Journey form. The team works from Medellín, Colombia.
- Technology providers that host the site and deliver email on our behalf (including confirmation and notification emails), including Google (Google Workspace / Gmail), which hosts the mailboxes where our team receives your requests. They handle the information only to provide those services.
- Anthropic, PBC (United States) operates the AI model behind our chat assistant. What you type in the chat is sent to Anthropic to generate replies. Please do not write sensitive medical details in the chat: use the Journey form or speak with our team instead.
- Google (United States). The Google Tag Manager script is loaded on every public page of this site, directly from Google’s servers, so Google receives the technical data that accompanies any request: your IP address and browser data. Until you accept analytics, Google Consent Mode keeps analytics storage switched off. If you accept, the measurement tags set up in our Google Tag Manager container (such as Google Analytics) can also receive standard technical information such as your device and the pages you visit. Our site does not send Google your name, contact details, health information or chat messages.
- Where the law requires it, for example in response to a valid legal request.
WhatsApp, email and other messaging services you use to contact us belong to third parties and are governed by their own privacy policies.
6. Handling outside Canada
Your information is handled in Colombia (by Dra. Angela’s team) and in the United States (Anthropic; Google for email, for Google Tag Manager on the public pages and, if you accept analytics, for analytics). Those countries have different privacy laws, and their authorities may be able to access the information under those laws. Our hosting and email providers may also store it in other countries. For questions about our use of service providers outside Canada, write to info@eternalplasticsurgery.ca.
7. How long we keep it
We keep your information for as long as it is needed for your consultation and follow-up and to meet our legal obligations. You can ask us to delete it at any time (see section 10); we will do so unless the law requires or allows us to keep it. Copies kept in internal audit logs and backups may remain after a deletion request until they are purged. Information stored in your own browser (see section 8) stays on your device until you clear it.
8. Cookies and browser storage
Essential — always on, needed for the site to work or to remember your choices:
- your language choice (browser storage, until you clear it);
- your cookie choice (the cookie eternal_consent and a matching entry in browser storage, 12 months);
- small interface flags (for example, that you already read the chat notice or started the Journey form), in browser storage until you clear it or close the tab: they hold no personal information;
- gallery access (cookies eternal_gallery_access and eternal_gallery_token, up to 90 days, set when you unlock the gallery);
- a draft of your Journey answers (browser storage), so that you do not lose them if the page reloads: it is removed when you send the form and discarded if it is more than 24 hours old when you come back.
Google Tag Manager — loaded on every public page. We load the Google Tag Manager script from Google’s servers on every public page of the site (not on the login or administration pages). Because of that, Google receives the technical data that accompanies any request to its servers, such as your IP address and browser data, even if you have not accepted analytics. Until you accept, Google Consent Mode keeps analytics storage denied: no analytics cookies or identifiers are saved on your device. If your browser has JavaScript turned off, the page loads a small hidden Google Tag Manager frame instead; we cannot ask for your choice in that case.
Analytics — only if you accept: analytics storage is switched on, so the measurement tags set up in our Google Tag Manager container (such as Google Analytics) can run and set cookies such as _ga and _ga_*. The campaign tags mentioned above are kept in your browser’s session storage. The notices of events in the Journey form and the chat (for example, the step you reached, that you opened the chat or that a request was sent) are sent to Google Tag Manager only after you accept. If you reject it or withdraw later, analytics storage goes back to denied, we stop sending those notices and we delete the analytics cookies we can reach.
Advertising: we do not use advertising cookies. The advertising signals of Google Consent Mode (ad_storage, ad_user_data and ad_personalization) are always denied.
A limit of this description: which tags run inside the Google Tag Manager container is configured by the clinic in Google Tag Manager, outside the code of the site. That list must be kept in line with this policy; adding a tag that stores other data or sets other cookies requires updating this policy and the banner.
If we change what we ask for, the banner will appear again. Change your choice at any time:
9. Security
We use HTTPS to protect information in transit between your browser and our site. Access to the administration area is limited to authorized staff with individual accounts and passwords. No method of transmission or storage is completely secure, so when it is not necessary please avoid sending information you consider highly sensitive through the chat or by email.
10. Your rights
You can ask us to:
- give you access to the personal information we hold about you;
- correct it if it is wrong or incomplete;
- delete it;
- withdraw a consent you gave;
- tell you how we handle your information or how we use providers outside Canada.
Write to info@eternalplasticsurgery.ca. We may ask you to confirm your identity first, especially for health information, and we will answer within the time required by law. If you are not satisfied with our answer, you can complain to the Office of the Information and Privacy Commissioner of Alberta or to the Office of the Privacy Commissioner of Canada.
11. Patient photos on this site
Before-and-after photos are published only where the person has given signed consent to their publication. If you appear in an image and want it removed, write to info@eternalplasticsurgery.ca.
12. Minors
This site is for adults. You must be 18 or older to use the Journey tool, the chat and the gallery. We do not knowingly collect information from minors; if you believe a minor has sent us information, write to info@eternalplasticsurgery.ca and we will delete it.
13. Changes to this policy
We may update this policy. The date and version at the top show the latest update. If we make a significant change, we will say so clearly on the site, and we will ask for your consent again where the law requires it.
14. Contact
Questions, requests or complaints: info@eternalplasticsurgery.ca. See also our Terms of Use.