Privacy Policy for Maple Peak Wellness Inc.

Effective Date: July 23, 2026

1. Introduction and Company Information

This Privacy Policy explains how Maple Peak Wellness Inc. (“Maple Peak Wellness Inc.,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information in connection with our fitness and wellness services, including in-person services, online bookings, communications, memberships, assessments, classes, training programs, and related website or digital services.

We are committed to protecting personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and any substantially similar provincial privacy legislation that may apply.

Business Name: Maple Peak Wellness Inc.
Address: Maple Peak Wellness, 3150 Dundas Street West, Unit 4, Oakville, ON L6M 4J3, Canada
Email: [email protected]
Phone: +1 (905) 847-3926

2. Data Collection and Processing

We may collect personal information directly from you, automatically through our website or digital tools, and from third parties where permitted by law.

The types of personal information we may collect include:

• Identification and contact information: name, mailing address, email address, telephone number, emergency contact information, and account/login details.
• Membership and service information: booking history, attendance records, class participation, package or membership selections, waivers, and communication preferences.
• Health and wellness information: information you choose to provide regarding fitness goals, injuries, limitations, dietary preferences, medical conditions, physical readiness, or other health-related details relevant to training or participation. Where collected, this information is handled with heightened care.
• Payment and billing information: billing address, transaction details, and limited payment information processed through our payment processors. We generally do not store full credit card numbers if processed by a third-party payment provider.
• Website and device information: IP address, browser type, device identifiers, pages visited, interaction data, cookies, and analytics data.
• Communications: emails, messages, feedback, survey responses, customer support records, and any other correspondence with us.

We process personal information only as necessary for the purposes described in this Privacy Policy, and we seek to limit collection to what is reasonable in the circumstances.

3. Purpose of Data Processing

We use personal information for the following purposes:

• to provide fitness, wellness, coaching, and related services;
• to create and manage memberships, bookings, accounts, and attendance records;
• to assess suitability for programs, classes, or training activities and to help support your safety and participation;
• to communicate with you about appointments, services, policies, updates, or service-related notices;
• to process payments, refunds, and invoices;
• to respond to inquiries, complaints, and customer support requests;
• to maintain internal records and administer our business operations;
• to improve our services, website, facilities, and customer experience;
• to send marketing and promotional communications where permitted by law and, where required, with your consent;
• to protect the safety, security, and integrity of our premises, systems, staff, clients, and property;
• to comply with legal, regulatory, accounting, insurance, and tax obligations; and
• to establish, exercise, or defend legal claims or manage disputes.

4. Legal Basis for Processing

Under Canadian privacy law, we collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances, and typically based on one or more of the following grounds:

• Consent: where you have given us express or implied consent, including for certain wellness-related information, marketing communications, or optional programs;
• Contractual necessity: where processing is necessary to provide services you request or to perform our agreement with you;
• Legitimate business purposes: where processing is necessary for reasonable business operations such as administration, service delivery, fraud prevention, and security, and is not overridden by your privacy interests;
• Legal obligation: where we must comply with applicable laws, regulations, court orders, or lawful requests;
• Vital interests and safety: where necessary to protect your health and safety or that of others in an emergency situation.

When consent is required, we will seek it in a manner appropriate to the sensitivity of the information and the circumstances.

5. Data Sharing and Third Parties

We do not sell personal information. We may share personal information with third parties only as necessary and appropriate for the purposes described in this Policy.

Third parties may include:

• Service providers: booking platforms, customer relationship management tools, email services, cloud hosting, analytics providers, payment processors, and IT/security providers;
• Professional advisers: accountants, auditors, insurers, lawyers, and consultants;
• Regulatory or governmental authorities: where required by law or where disclosure is necessary to protect legal rights, health, safety, or property;
• Emergency contacts or medical personnel: in the event of an injury, medical emergency, or other urgent situation;
• Business transaction parties: in connection with a merger, financing, acquisition, reorganization, or sale of all or part of our business, subject to appropriate safeguards.

We require service providers to protect personal information and to use it only for the services they perform for us, subject to contractual and legal restrictions.

6. Data Transfer to Third Countries

Your personal information may be stored or processed outside of Ontario or Canada, including in the United States or other jurisdictions where our service providers operate. As a result, the information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, or regulatory authorities in those locations.

Where we transfer personal information outside Canada, we take reasonable steps to ensure it is protected by appropriate contractual, technical, and organizational safeguards. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Storage Duration

We retain personal information only as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with legal, tax, accounting, insurance, and regulatory requirements, and to resolve disputes or enforce agreements.

Retention periods may vary depending on the type of information and the nature of our relationship with you. In general:

• account, billing, and transaction records are retained for the period required by applicable law and business records obligations;
• membership and service records are retained for as long as your account is active and for a reasonable period thereafter;
• health or wellness-related information is retained only as long as needed for program administration, safety, and legal purposes;
• marketing preference records are retained until you unsubscribe, opt out, or request deletion where applicable; and
• security and access logs are retained for a limited period unless needed for investigation or legal compliance.

When personal information is no longer required, we will securely delete, anonymize, or destroy it in accordance with our retention practices and applicable law.

8. User Rights

Subject to applicable law, you may have the right to:

• Access: request confirmation of whether we hold personal information about you and request access to it;
• Rectification: request correction of inaccurate, incomplete, or outdated personal information;
• Erasure: request deletion of personal information in certain circumstances, subject to legal or contractual retention obligations;
• Restriction: request that we limit certain processing in appropriate circumstances;
• Data portability: request a copy of certain personal information in a structured and commonly used format where applicable;
• Objection: object to certain processing, including some types of marketing or other processing based on legitimate interests or implied consent, where applicable.

To exercise these rights, contact us using the information provided below. We may need to verify your identity before responding. We will respond within a reasonable timeframe and in accordance with applicable law.

9. Withdrawal of Consent

Where we rely on your consent to process personal information, you may withdraw that consent at any time, subject to legal or contractual restrictions and reasonable notice.

Withdrawal of consent may affect our ability to provide certain services or communicate with you about certain programs. It does not affect processing that has already occurred or processing that is otherwise permitted or required by law.

You may withdraw consent for marketing communications by using the unsubscribe option in our emails or by contacting us directly.

10. Right to Complain

If you have concerns about how we handle your personal information, we encourage you to contact us first so we can try to resolve the issue promptly.

You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or, where applicable, with the privacy regulator in your province. We encourage you to contact us before escalating a complaint so we can address your concern directly.

11. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, alteration, or destruction. These measures may include:

• restricted access to personal information on a need-to-know basis;
• password protection and access controls;
• secure storage and backup systems;
• staff training on privacy and confidentiality;
• monitoring and security practices for our systems and service providers; and
• procedures for investigating and responding to suspected privacy incidents.

Although we take reasonable steps to safeguard personal information, no security system is impenetrable. You are also responsible for protecting your own account credentials and for using secure methods when communicating with us online.

12. Contact Information

If you have questions about this Privacy Policy, wish to exercise your rights, or want to make a privacy-related request or complaint, please contact us at:

Maple Peak Wellness Inc.
Maple Peak Wellness, 3150 Dundas Street West, Unit 4
Oakville, ON L6M 4J3
Canada

Email: [email protected]
Phone: +1 (905) 847-3926

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal obligations, or operational needs. Any changes will be posted on our website or otherwise communicated as appropriate.

The revised version will be effective when posted unless otherwise stated. Your continued use of our services after changes are posted means you acknowledge the updated Privacy Policy, subject to any consent requirements under applicable law.