Privacy Policy

Information we collect

• Account and contact details: your name, email address, phone number and preferred language, plus optional details you choose to give us, such as your birthday, title and handedness.
• Sign in with Google: if you choose this option, Google shares your name, email address and profile picture with us. We never receive your Google password.
• Bookings and visits: reservations, check-ins, orders, payment history, points, passes, coupons, lessons, waitlist requests, and any reviews or feedback you send us.
• Payment information: card payments and deposits are processed by Stripe. We keep only the card brand, the last four digits and the expiry date — never the full card number.
• Identity photo: for membership passes that belong to one person, our staff may take a photo at the front desk so the pass can only be used by its holder.
• Calls and messages: when you call or text our store numbers, we keep call records, voicemails and messages so we can respond to you.
• Technical information: your browser keeps a small amount of information on your device — your sign-in session and display preferences such as language and time format — so the site works properly.

How we use it

• To create and manage your bookings, check-ins and orders.
• To process payments, deposits and refunds.
• To send booking confirmations, reminders, receipts and service messages.
• To run memberships, passes, points and promotions you take part in.
• To answer your questions, feedback and complaints, and to improve our service.
• To prevent fraud, abuse and repeated no-shows.
• To meet our legal, tax and accounting obligations.

We send marketing messages only if you have agreed to receive them, and you can unsubscribe at any time.

Who we share it with

We share personal information only with service providers that help us run our business, and only so they can provide that service to us:

• Supabase — database and website hosting (servers in the United States).
• Stripe — payment processing.
• Google — Sign in with Google.
• Twilio — text messages.
• Resend — email.
• RingCentral — store phone lines and voicemail.
• AI service providers — to help with tasks such as suggesting the English spelling of a name.

Some of these providers store or process information outside Canada, mainly in the United States, where it may be subject to the laws of that country. We do not sell your personal information. We may disclose information when required by law.

How we protect it

Our website uses encrypted connections (HTTPS). Inside our system, staff can see only what their role needs; customer phone numbers and email addresses are hidden by default, and every time a staff member reveals the full details, it is recorded.

How long we keep it

We keep your information while you have an account with us or for as long as we need it for the purposes above, and longer only where the law requires it (for example, tax and accounting records).

Your choices

• You can view and update most of your details in your account.
• You can ask us for a copy of the personal information we hold about you, or ask us to correct it.
• You can withdraw your consent to marketing messages at any time.
• You can ask us to delete your account, subject to records we must keep by law.
• If you are not satisfied with our response, you can contact the Office of the Information and Privacy Commissioner for British Columbia.

Changes to this policy

If we change this policy, we will post the new version on this page and update the effective date above.