Privacy Policy.

FIIT Co. (“FIIT Co.,” “we,” “us” or “our”) respects your privacy. This policy explains what personal information we collect on fiitco.ca, how we use it, who we share it with, how long we keep it, and the rights you have under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

If anything here is unclear, or you want to exercise any of the rights below, email us at info@fiitco.ca or call (416) 565-9300.

1. Who We Are

FIIT Co. is a boutique boxing and fitness studio located at 1047 Gerrard St E, Toronto, ON M4M 1Z7, Canada. We are the “data controller” of the information described in this policy. Our privacy contact is the Studio Manager, reachable at info@fiitco.ca.

2. What We Collect

We only collect what we need to run the studio.

2.1 Information you give us on this website

• Guest Pass form.When an active member invites a friend, we collect the member's first name and phone number, and the friend's first name and phone number.
• Refer-A-Friend form.When a member refers a friend who may join on a full membership, we collect the referrer's first name and phone number, and the friend's first name and phone number.
• Contact emails. If you email us, we keep your email address and the content of your message.

2.2 Information collected automatically

• Basic technical data from our hosting provider (IP address, browser type, referring page, timestamp) used for security and to keep the site running.
• We do notcurrently run advertising cookies, tracking pixels, or third-party analytics on this site. If that changes, we'll update this policy and ask for consent where required.

2.3 Information NOT collected here

We do not collect credit card numbers, government IDs, health records, or membership payment information on this website. Memberships and class bookings are processed by Mindbody. See Section 5.

3. Why We Collect It

• To send your friend a guest pass or referral invitation.
• To contact you by text or phone about your submission.
• To credit your account if a referred friend joins on a full membership.
• To respond to questions you send us.
• To protect the site against spam and abuse.

We do not use your information for any other purpose without asking you first, and we never sell personal information.

4. Consent

By submitting one of our forms, you consent to the collection and use described above. You can withdraw consent at any time by emailing info@fiitco.ca , we'll delete your record within a reasonable period (see Section 7).

4.1 Submitting a friend's information

If you give us someone else's first name and phone number (Guest Pass or Refer-A-Friend), you must first confirm with that person that they agree to hear from FIIT Co. about a guest pass or membership invitation. Both forms include a checkbox where you confirm you have your friend's permission before submitting. We rely on that confirmation.

If a friend tells us they didn't consent, we'll delete their record immediately and stop contacting them.

5. Who We Share It With

We do not sell, rent, or trade personal information. We share it only with the service providers that help us run the studio and the site, and only to the extent they need it to do their job.

5.1 Mindbody (booking & payments)

Class schedules, memberships, intro offers, and personal training bookings are handled by Mindbody, Inc.When you click a “Book” or “Sign Up” button on our site, you leave fiitco.ca and are handed off to Mindbody's platform. At that point, Mindbody's own privacy notice governs what they collect (name, email, phone, payment details, attendance history). We do not send data from this website's forms directly to Mindbody. Guest Pass and Refer-A-Friend submissions go to our own private database, not to Mindbody. If you become a full FIIT Co. member through Mindbody, we may match your name and phone across both systems so we can apply referral credits and manage your membership.

You can read Mindbody's privacy policy at company.mindbodyonline.com/legal/privacy-policy.

5.2 Convex (database)

Form submissions are stored in a private database operated by Convex, Inc. (United States). Convex acts as our data processor under a written agreement and only processes data on our instructions.

5.3 Vercel (hosting)

This website is hosted by Vercel, Inc. (United States). Vercel processes basic request metadata (IP, browser, timestamps) to serve the site and defend against abuse.

5.4 Cross-border transfer

Convex, Vercel, and Mindbody are U.S.-based companies. When you submit a form or visit our site, your personal information may be processed in the United States. While there, it is subject to lawful access requests by U.S. authorities. By submitting a form, you acknowledge and consent to this cross-border transfer.

5.5 Legal disclosure

We may disclose personal information if required by Canadian law, a court order, or to protect the safety of our members, staff, or the public.

6. How We Protect It

• TLS (HTTPS) encrypts the data in transit between your device and our site.
• Access to the stored data is restricted to studio staff who need it to run the gym (e.g., front desk, manager) and is protected by individual logins with role-based permissions.
• We do not store or display full phone numbers publicly on the website.
• We keep the site and its dependencies patched, and we monitor for suspicious activity.
• No system is perfectly secure. If a breach affects your information, we'll notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

7. How Long We Keep It

• Guest Pass records: kept for up to 12 months after submission, then anonymized or deleted.
• Referral records: kept until the referral is resolved (friend joins or declines), plus 24 months for accounting purposes.
• Contact emails: kept as long as needed to handle your request, then archived or deleted.
• You can ask us to delete your data sooner by emailing info@fiitco.ca.

8. Your Rights Under PIPEDA

As a Canadian resident, you have the right to:

• Know what personal information we have about you.
• Access a copy of that information.
• Correct information that is wrong or out of date.
• Withdraw consent for any of our uses (this may mean we can no longer offer you guest passes or referral credits).
• Request deletion of your data when it is no longer needed.
• File a complaintwith us, and, if you're not satisfied, with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, email info@fiitco.ca with your name, phone number, and the request. We'll respond within 30 days. We may ask you to confirm your identity before releasing or changing records.

9. Children's Privacy

We offer programs for kids ages 7–12 and teens ages 12–17 through FIIT Co. and the Boxing Academy. Those programs are booked by a parent or guardian through Mindbody. This website does not enroll children directly. We do not knowingly collect personal information from children under 13 on this website. If a parent or guardian discovers that a child has submitted information here, email us and we'll delete it.

10. Cookies & Tracking

We do not currently use marketing cookies, ad pixels, or third-party analytics on this site. The site uses only the small amount of technical data needed to serve pages and keep sessions alive. If we add analytics or advertising in the future, we will update this policy and, where required, show a cookie banner first.

11. Links To Other Sites

Our website links to external services: Mindbody, Instagram, Facebook, Yelp, and others. Once you leave fiitco.ca, you are subject to those services' own privacy policies. We are not responsible for what happens on sites we don't control.

12. Changes To This Policy

We may update this policy to reflect changes in the law or how we operate the studio. We'll post the new version here and update the “Last updated” date at the top. Material changes will be highlighted on the homepage for at least two weeks.

13. How To Reach Us

← Back to home