Privacy Policy

1. Introduction

PureFlow Fitness & Nutrition ("PureFlow," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at coaching.pureflowfitness.ca (the "Site") and use our coaching services.

By using our Site or services, you consent to the practices described in this policy. If you do not agree, please discontinue use of our Site.

2. Information We Collect

Information You Provide Directly

• Contact information: Name, email address, phone number, and preferred contact method when you submit our lead capture form.
• Health and fitness information: Physical measurements, health history, medical conditions, dietary restrictions, fitness goals, and activity levels submitted through our intake form.
• Booking information: Consultation scheduling details and appointment preferences.
• Communications: Messages, feedback, and any other information you provide when communicating with us.

Information Collected Automatically

• Device and browser data: IP address, browser type, operating system, and device identifiers.
• Usage data: Pages visited, time spent on pages, referring URLs, and click patterns.
• Marketing attribution: UTM parameters, referral sources, and campaign data to understand how you found us.
• Cookies and similar technologies: Session cookies for authentication and analytics cookies for site improvement.

3. How We Use Your Information

We use your personal information to:

• Provide, personalize, and improve our coaching services.
• Create and manage your account and client dashboard.
• Schedule and facilitate consultations and coaching sessions.
• Develop customized training and nutrition plans based on your intake data.
• Send transactional emails (booking confirmations, reminders, intake prompts).
• Send marketing and nurture emails with your consent (you can unsubscribe at any time).
• Respond to inquiries and provide customer support.
• Analyze usage patterns to improve our Site and services.
• Comply with legal obligations and protect our rights.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share it with:

• Service providers: Trusted third-party services that help us operate (e.g., email delivery, hosting, scheduling, analytics). These providers are contractually obligated to protect your data.
• Legal requirements: When required by law, court order, or governmental authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with continued privacy protections.

Third-Party Services We Use

• Resend — Email delivery
• Cal.com — Appointment scheduling
• Neon — Database hosting
• Vercel / Netlify — Website hosting
• Google reCAPTCHA — Spam protection

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Health and fitness data from intake forms is retained for the duration of our coaching relationship and for a reasonable period afterward for record-keeping. You may request deletion of your data at any time by contacting us.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encrypted data transmission (TLS/SSL) for all communications.
• Encrypted database storage with access controls.
• Secure authentication with session management.
• Regular security reviews of our systems and practices.

While no method of transmission over the Internet is 100% secure, we strive to protect your personal information using commercially reasonable measures.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information.
• Withdraw consent for marketing communications at any time.
• Data portability — receive a copy of your data in a structured format.
• Object to certain processing of your information.

To exercise any of these rights, contact us at mo@pureflowfitness.ca.

8. Canadian Privacy Law (PIPEDA)

As a Canadian business, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). We collect personal information with your knowledge and consent, limit collection to what is necessary, and use it only for the purposes identified. You may withdraw consent at any time, subject to legal or contractual restrictions.

9. Canada's Anti-Spam Legislation (CASL)

We comply with CASL requirements. We obtain express consent before sending commercial electronic messages (emails, SMS). Every message includes a clear unsubscribe mechanism. Consent can be withdrawn at any time by clicking "Unsubscribe" in any email or by contacting us directly.

10. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand how visitors interact with our Site. You can control cookie preferences through your browser settings. Disabling essential cookies may affect Site functionality.

11. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of our Site after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: