Privacy Policy

1. Introduction

Comet Rhythmic Gymnastics Club ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website (rgcanada.ca) and services located at 1490 Ogden Avenue, Mississauga, Ontario, Canada.

This policy complies with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), Ontario's privacy legislation, and Quebec's Act respecting the protection of personal information in the private sector (Law 25) for residents of Quebec.

2. Information We Collect

2.1 Personal Information You Provide

When you register for classes or request information, we may collect:

• Parent/Guardian name and contact information (email, phone)
• Child's name and age
• Emergency contact information
• Payment and billing information (processed securely through Stripe)
• Health information relevant to participation (allergies, medical conditions)
• Communication preferences

2.2 Automatically Collected Information

Subject to your cookie consent (see Section 8), we may collect:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website (Analytics cookies only)
• Referral source (Google Ads, social media, etc.) (Advertising cookies only)
• Google Analytics and Google Ads conversion data (with your consent)
• Local storage (cookie_consent_v1) for your cookie preferences

3. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To register students, manage class schedules, and provide gymnastics instruction
• Communication: To send class updates, schedule changes, and important notifications
• Payment Processing: To process tuition payments and manage subscriptions via Stripe
• Safety: To maintain emergency contact information and medical records for student safety
• Marketing: To send promotional offers (with your consent, which you can withdraw at any time)
• Analytics: To improve our website and services using Google Analytics
• Legal Compliance: To comply with applicable laws and regulations

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

• Stripe: Payment processing (PCI-DSS compliant)
• Neon Database: Secure data storage (hosted in Canada)
• Netlify: Website hosting and serverless functions
• Google Analytics: Website analytics (anonymized data)
• Google Ads: Advertising and conversion tracking
• Resend: Email delivery service

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or to protect the rights, property, or safety of our organization, students, or others.

4.3 Emergency Situations

In case of medical emergency, we may share relevant health information with emergency services or medical personnel.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• SSL/TLS encryption for all data transmission
• Secure serverless architecture (Netlify Functions + Neon Database)
• Input validation and XSS/SQL injection protection
• Regular security audits and updates
• Restricted access to personal information (staff only, on a need-to-know basis)
• PCI-DSS compliant payment processing via Stripe

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law:

• Active Students: Duration of enrollment + 1 year
• Former Students: Up to 7 years for legal and accounting purposes
• Marketing Contacts: Until you unsubscribe or request deletion
• Trial Requests: 2 years unless converted to enrollment

7. Your Rights (PIPEDA & Quebec Law 25)

Under Canadian privacy law, you have the right to:

• Access: Request a copy of your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Withdrawal of Consent: Withdraw consent for marketing communications and cookies (Analytics / Advertising) at any time — see Section 8 for the Cookie Preferences control
• Portability (Quebec residents): Request your personal information in a structured, commonly used format
• Complaint: File a complaint with the Privacy Commissioner of Canada or, for Quebec residents, the Commission d'accès à l'information du Québec

To exercise these rights, contact us at: info@rgcanada.ca or call +1 (647) 876-0402

8. Cookies and Tracking Technologies

We use cookies and similar technologies (including localStorage) to operate this site and, with your consent, to understand traffic and measure advertising. By default we load only essential cookies; Analytics and Advertising cookies are blocked until you opt in via the cookie banner.

8.1 Categories of Cookies We Use

8.2 Your Choices (Consent Mode v2)

When you first visit this site, we show a cookie banner asking for your consent. Until you choose, Google Analytics and Google Ads are blocked from setting cookies or identifiers on your device (we use Google Consent Mode v2). You can:

• Accept All — enable Analytics and Advertising cookies
• Reject All — only essential cookies are set
• Customize — toggle Analytics and Advertising independently

You may change or withdraw your consent at any time using the Cookie Preferences link in the site footer, or the button below. Withdrawing consent is as easy as granting it, as required by Quebec's Law 25.

You can also control cookies through your browser settings (e.g., block third-party cookies, clear stored data). Note that disabling essential cookies will log you out of the parent portal.

9. Children's Privacy

Our services are intended for children under 18, but we only collect personal information from parents or legal guardians. We do not knowingly collect information directly from children without parental consent.

10. International Data Transfers

Your data is primarily stored in Canada. However, some service providers (e.g., Stripe, Google) may process data in the United States or other countries. We ensure all providers comply with applicable privacy laws and use appropriate safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Information