Privacy Policy

1. Introduction

Tito Fit ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, booking platform, and related services. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), and Canada's Anti-Spam Legislation (CASL).

2. Information We Collect

We collect personal information that you voluntarily provide when you register for an account, book a service, fill out a form, or contact us. This may include:

• Name, email address, phone number, and mailing address
• Date of birth and gender (for health and fitness assessments)
• Health information relevant to providing safe and effective fitness services (e.g., medical conditions, injuries, medications)
• Payment information (processed securely through third-party payment processors)
• Booking history and service preferences
• Communications you send to us

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and manage your fitness services and bookings
• To process payments and issue receipts (including insurance-compatible receipts)
• To communicate with you about appointments, changes, and updates
• To ensure the safety and effectiveness of our training programs
• To send promotional communications (only with your explicit consent under CASL)
• To comply with legal obligations and professional regulatory requirements
• To improve our services and user experience

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• With service providers who assist us in operating our platform (e.g., payment processors, email services), bound by confidentiality agreements
• With your assigned fitness professional(s) to the extent necessary to deliver your services
• When required by law, regulation, or legal process
• To protect the rights, safety, or property of Tito Fit, our clients, or the public

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Specifically:

• Account data is retained for the duration of your account plus 2 years
• Financial records are retained for 7 years as required by tax law
• Health and assessment data is retained for 5 years after your last visit
• Marketing consent records are retained for the duration of consent plus 3 years

6. Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience. We use:

• Essential cookies required for the website to function (session management, authentication)
• Analytics cookies to understand how visitors use our site (anonymized data only)
• Preference cookies to remember your language and display settings

You can manage your cookie preferences through your browser settings. We do not use advertising cookies or share cookie data with third-party advertisers.

7. Your Rights

Under PIPEDA and Law 25, you have the following rights regarding your personal information:

• Access: You may request access to the personal information we hold about you
• Correction: You may request correction of inaccurate or incomplete information
• Deletion: You may request deletion of your personal information, subject to legal retention requirements
• Portability: You may request a copy of your data in a structured, commonly used format
• Withdrawal of consent: You may withdraw your consent to processing at any time
• Complaint:You have the right to file a complaint with the Office of the Privacy Commissioner of Canada or the Commission d'acces a l'information du Quebec

8. CASL Compliance

We comply with Canada's Anti-Spam Legislation (CASL). We will only send you commercial electronic messages (e.g., promotional emails, newsletters) with your express consent. You may withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by contacting us directly. Transactional messages related to your bookings and account are not subject to CASL consent requirements.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Privacy Officer:

We will respond to all privacy requests within 30 days, as required by law.