Your information, handled with care.

1. Who we are

TrainToYou is an in-home personal training service based in Toronto, Ontario, Canada. When this policy says "we" or "us", it means TrainToYou. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Information we collect

When you book a consultation on our website

• Your name and email address
• Your phone number, if you choose to share it
• Your fitness goals, preferred training times and any message you send us

When you become a client

• Contact details and the area where your sessions take place
• Your training plan, session history and progress notes
• Health information you choose to share so we can train you safely, such as injuries or physical limitations
• An emergency contact, if you provide one
• A record of the payments you make (amount, date and method). We do not store card or bank account numbers.

When our trainers sign in

Our team signs in to a private client dashboard with an email code or with Google. In that case we receive only the trainer's name and email address. Members of the public never sign in to our website.

3. How we use your information

• To reply to your booking request and schedule your free consultation
• To design, deliver and adjust your training program
• To train you safely, taking into account any health information you shared
• To keep track of your sessions and payments
• To contact you about your sessions

We do not sell, rent or trade your personal information, and we do not use it for advertising.

4. Service providers we use

We rely on a few trusted providers to run our website. They process information only to provide their service to us:

• Cloudflare hosts our website and the secure database where client records are stored, and manages sign-in for our team.
• Formspree delivers booking requests from our website to our email inbox.
• Google provides an optional sign-in method for our trainers and delivers the fonts used on our website.
• Microsoft Outlook is the email service we use to receive and answer messages.

Some of these providers may store information outside Canada, such as in the United States, where it may be subject to local laws. Inside TrainToYou, each trainer can see only the clients assigned to them. Our owner can see all records in order to manage the business.

We may also disclose information if the law requires it.

5. How long we keep it

We keep booking requests that do not become clients for up to 12 months. We keep client records for as long as you train with us and for up to 7 years afterwards, to meet accounting and legal requirements. After that, we delete them. You can ask us to delete your information sooner, unless we are legally required to keep it.

6. How we protect it

• All connections to our website are encrypted (HTTPS).
• Our client dashboard is available only to approved team members, who must verify their identity every time they sign in.
• Each trainer can access only the records they need to do their work.

No system is perfectly secure. If a breach ever creates a real risk of significant harm, we will notify you and the Privacy Commissioner of Canada as required by law.

7. Your rights

You can ask us at any time to:

• See the personal information we hold about you
• Correct information that is wrong or incomplete
• Withdraw your consent or have your information deleted

Write to us at the address below. We will reply within 30 days. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

8. Cookies

Our public website does not use advertising or tracking cookies. When a trainer signs in to our dashboard, Cloudflare sets a security cookie that keeps the session open. It is not used for anything else.

9. Changes to this policy

We may update this policy from time to time. The date at the top always shows the latest version.