Privacy Policy

When you train with us or reach out, we collect stuff like:

• Basic Contact Info: Name, email, phone number - the usual. We need this to actually communicate with you about classes and schedules.
• Physical Data: If you're doing our performance coaching, we might track your weight, body composition, strength metrics - all that good stuff to help you progress.
• Payment Information: Credit card details when you sign up for memberships or sessions. This goes through secure payment processors, not sitting on our laptops.
• Medical & Injury History: Yeah, we need to know if you've got a bum knee or heart condition before throwing you into combat conditioning. It's for your safety.
• Website Usage: Cookies and tracking data when you browse our site - standard internet stuff to see what pages people actually look at.

We're not hoarders - we only use your data for legit reasons:

• Running the Gym: Scheduling classes, processing payments, sending you reminders about that 6am warrior session you signed up for at midnight.
• Training Programs: Customizing your workout plans, tracking your progress, making sure our coaches know your goals and limitations.
• Safety & Liability: Keeping medical info on file so we don't accidentally hurt you, maintaining injury records, standard gym insurance stuff.
• Marketing: Sending newsletters about new classes or special workshops - but only if you opted in. We're not spamming your inbox with junk.
• Improving Our Services: Figuring out which programs are popular, what times work best, where we can do better.

Real talk: We'll never sell your email list to supplement companies or fitness influencers. That's not how we roll.

We keep things tight, but sometimes we gotta share with:

• Our Coaching Team: Your assigned trainers and nutritionists need access to your goals, progress, and any health considerations.
• Payment Processors: Stripe, PayPal, whoever handles the transaction - they're PCI compliant and know their stuff.
• Email & Communication Services: Platforms we use to send newsletters and class reminders - they're just the delivery trucks, not reading your mail.
• Legal Requirements: If the law comes knocking with a valid warrant or court order, we gotta comply. Hopefully that never happens.
• Emergency Situations: If you collapse during training and paramedics need your medical history, we're sharing that info without asking permission first.

Security isn't just for our facility - we take digital protection seriously:

• Encrypted Storage: Your data lives on secure servers with industry-standard encryption. Not sitting in an Excel file on someone's desktop.
• Limited Access: Only staff who actually need your info can see it. The front desk person doesn't have access to your medical history.
• Secure Website: SSL certificates, HTTPS, all that technical stuff that keeps your browsing safe.
• Regular Updates: We keep our systems patched and up-to-date. No ancient software with known vulnerabilities.
• Physical Security: Paper records stay locked up. We're not leaving membership forms on the counter overnight.

That said - no system is 100% bulletproof. We do our best, but if there's ever a breach, we'll let you know immediately.

Our website uses cookies - not the chocolate chip kind, unfortunately:

• Essential Cookies: Stuff that makes the site actually work. Can't turn these off unless you disable cookies entirely in your browser.
• Analytics: We use tracking to see which pages people visit, how long they stick around, what content resonates. Helps us make the site better.
• Marketing Pixels: If you see our ads on social media after visiting the site, that's retargeting cookies doing their thing.

Most browsers let you control cookie settings. You can block 'em if you want, though some features might not work properly.

You've got control over your information. Here's what you can do:

• Access Your Data: Want to see what we have on file? Just ask. We'll send you a copy within a reasonable timeframe.
• Correct Mistakes: Notice we spelled your name wrong or have an old address? Let us know and we'll fix it.
• Delete Your Account: Leaving the Legion? We'll delete your data, though we might keep some records for legal/financial reasons (like payment history for tax purposes).
• Opt Out of Marketing: Unsubscribe links are in every email. One click and you're off the list - no hard feelings.
• Restrict Processing: In some cases, you can ask us to limit how we use your data. Reach out and we'll discuss options.

To exercise any of these rights, shoot us an email at info@duskthornlegion.info or call (604) 555-8947.

We don't keep stuff forever - that'd be weird and wasteful:

• Active Members: We keep your full records while you're training with us, plus any period required by law.
• Former Members: After you leave, we'll typically delete most personal data within 12 months, unless there's a legal reason to keep it longer (like outstanding payments or injury claims).
• Financial Records: Tax laws require us to keep transaction records for 7 years. That's not us being paranoid, that's the Canada Revenue Agency.
• Medical Waivers: Liability protection means we hang onto these longer - usually around 5-7 years depending on provincial regulations.
• Marketing Lists: If you haven't engaged with our emails in 2+ years, we'll probably clean you out unless you're still an active member.

Sometimes we link to other websites - supplement companies we trust, fitness resources, partner gyms, whatever. Once you click away from our site, this privacy policy doesn't apply anymore. Those other sites have their own policies, and honestly, we can't control what they do with your data. So if you're clicking around, maybe give their privacy stuff a quick look too.

Our programs are designed for adults 18+. If you're under 18 and want to train here, you'll need a parent or guardian involved - they'll be handling the paperwork and making decisions about your data. We don't knowingly collect information from kids without parental consent. If we somehow end up with underage data we weren't supposed to have, we'll delete it as soon as we realize the mistake.

Privacy laws change, our services evolve, technology updates - so yeah, we might need to tweak this policy from time to time. When we do, we'll update the date at the top and let active members know through email or a notice on the site. Big changes get bigger announcements. Small clarifications might just get quietly updated.

We recommend checking back here occasionally, especially if you're concerned about privacy stuff. We're not gonna change our core approach (keeping your data safe and not being jerks about it), but the details might shift.

We operate in Canada (specifically BC), so we follow PIPEDA - the Personal Information Protection and Electronic Documents Act. That's the federal law governing how private businesses handle personal data. British Columbia also has its own Personal Information Protection Act (PIPA) which we comply with.

Long story short: Canadian privacy laws give you pretty solid rights about how your information gets used. We take those obligations seriously and have policies in place to meet those standards.