Privacy Policy.

Draft for legal review. The structure below covers Canada's Anti-Spam Legislation (CASL), the Personal Information Protection and Electronic Documents Act (PIPEDA), and the consent disclosure standards SMS providers (Twilio, etc.) require for marketing messages.

Who we are

Trevor Linden Fitness Ltd., operating as Club 16 and She's FIT!, with 17 locations across British Columbia. Privacy questions: privacy@trevorlindenfitness.com.

What we collect

When you submit the inquiry form we collect:

• Your name, email, and phone number
• The Club 16 / She's FIT! location you're interested in
• The interests you selected (membership info, free trial, tour, $0 enrolment, etc.)
• Your consent choices (contact + marketing, each independently)
• Technical attribution: referrer URL, UTM parameters, user-agent, a one-way SHA-256 hash of your IP address (we never store your raw IP)

How we use it (transactional contact)

By submitting the form, you authorize us to contact you about your inquiry — by email, phone, and SMS — through the location you selected. This is transactional: we'll respond once and follow up if needed about that specific inquiry. We do not need separate consent for this; it's why you reached out. You can ask us to stop contacting you at any time.

Marketing communications (opt-in, separate)

If you check the marketing opt-in box on the inquiry form, you give Club 16 your express consent under CASL to send you commercial electronic messages (CEM) — including emails and SMS text messages — about offers, news, events, and other promotional content.

• Frequency: approximately 2–4 messages per month, sometimes more around major promotions (free 3-day pass, $0 enrolment fee, location openings, etc.).
• SMS costs: message and data rates may apply per your wireless plan. Club 16 doesn't charge for SMS itself.
• Opt-out — SMS: reply STOP to any of our SMS messages and we'll stop within 24 hours. Reply HELP for help.
• Opt-out — Email: every marketing email has an unsubscribe link in the footer. Clicking it removes you from the marketing list within one business day.
• Withdraw consent anytime: by SMS STOP, email unsubscribe link, or by emailing privacy@trevorlindenfitness.com.
• Consent is not required for service: declining marketing does not affect your ability to use our services, tour a club, or become a member.
• Third parties: we never sell or share your phone number / email with third parties for their own marketing.

We use service providers to deliver these messages (e.g., Twilio for SMS, an email service provider for transactional and marketing email). These providers process messages on our behalf under contractual privacy obligations. They do not use your contact details for their own purposes.

Records of consent (CASL §13)

When you opt in to marketing, we store the date and time, the page version you saw, the wording you agreed to, and the hashed-IP fingerprint of the submission. This evidences your express consent if requested by the CRTC.

Your rights (PIPEDA)

• Access — request a copy of the personal information we hold about you.
• Correction — request fixes to inaccurate data.
• Deletion — request we delete your record. Leads are soft-deleted to our internal trash for 30 days then purged permanently from our database.
• Withdrawal — withdraw consent for marketing or contact at any time.

Requests: privacy@trevorlindenfitness.com.

Retention

Active leads and member records are retained while we're working with you and for a reasonable period afterward to maintain business records. Deleted leads are purged from our operational database within 30 days. Backups may persist for an additional period as part of normal disaster-recovery practice.

Security

Passwords are stored hashed with argon2id. Sessions are SHA-256 hashed tokens, never the raw cookie. IPs are stored only as a salted SHA-256 hash. Admin staff sign in with mandatory two-factor authentication.

Changes

If we materially change this policy, we'll update the "Last updated" date above. For meaningful changes affecting your consent, we'll re-collect consent before continuing to message you.

Contact

Privacy Officer · Trevor Linden Fitness Ltd. · privacy@trevorlindenfitness.com