Privacy Policy

Effective date: October 22, 2026

DhattFit is a personal-training studio in Calgary, Alberta, owned by Sukh Dhatt. We also coach clients online across Canada. When you train with us, you trust us with personal details, including some about your health. This policy explains, in plain language, what we collect, why, how we protect it and what choices you have.

We follow Canada’s private-sector privacy laws: Alberta’s Personal Information Protection Act (PIPA) and, where it applies (for example, for online clients outside Alberta), the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

Who to contact

Sukh Dhatt, Owner, is responsible for privacy at DhattFit. Questions, requests and concerns go to him:

• Email: info@dhattfit.ca
• Phone: 587-284-7854
• Mail: DhattFit, 83 Cornerstone Cir NE, Calgary, AB T3N 1G9

What we collect

When you contact us or sign up on the website
– Your name, email and phone number when you use the Book Now form, the Find your plan quiz or the Friday Email sign-up.
– Your quiz answers (for example, your goals and training experience), so we can suggest the right plan.
– Your consent to receive the Friday Email, with the date and how you gave it, as Canada’s anti-spam law (CASL) requires.

When you become a member or client
– Account details such as your name, email, phone number, login and membership or purchase history.
– Payment details. Payments are processed by Stripe. We never see or store your full card number.

In the client portal (your private client area on our website)
– Health screening: your answers to the Get Active Questionnaire (GAQ) from the Canadian Society for Exercise Physiology (CSEP), plus any follow-up notes or physician clearance.
– Fitness assessment results, such as cardio, strength, balance and movement tests.
– Body measurements, such as height, weight, waist and body-fat estimates.
– Your workout plans, progress notes and messages with your coach.
– Signed agreements and waivers (signed electronically through OpenSign).

Live and online sessions
– If you join a live class or coaching session through Google Meet, Google processes your name, email and the video and audio of the session. We don’t record sessions unless we ask you first.

Website use and cookies
– Like most websites, ours uses cookies: small files saved in your browser. WordPress and WooCommerce use them to keep you logged in and remember your cart. HubSpot uses them to understand how visitors use the site and connect form sign-ups to visits.
– We use Google Search Console to see how people find our site in Google search. It gives us overall search data, not your personal details.
– You can block or delete cookies in your browser settings. Some parts of the site, like logging in or checkout, may not work without them.

Why we collect it

We only collect what we need to:

• answer your questions and book your free discovery call;
• recommend a plan that fits your goals;
• screen you safely before exercise and design training that suits your health and fitness;
• track your progress and coach you;
• manage your membership, payments and agreements;
• send the Friday Email, if you asked for it;
• run, secure and improve our website;
• meet our legal, tax and insurance obligations.

If we ever want to use your information for a new purpose, we’ll ask you first unless the law allows or requires it without consent.

Your consent

By filling out a form, signing up or becoming a client, you agree to us collecting and using your information for the purposes explained here. We ask for clear, express consent before collecting health information and before adding you to the Friday Email list.

You can withdraw your consent at any time (see “Your choices” below). If you withdraw consent for health screening, we may not be able to train you safely, and we’ll explain what that means for you.

Your health information

Health and body information is sensitive, and we treat it that way.

• We use it only to coach you and keep you safe while training.
• Only your coach can see it.
• We never sell it, and we never use it for advertising.
• We don’t share it with anyone, including your doctor, unless you ask us to or the law requires it.

Clients under 18

A parent or guardian must give consent and sign the agreement and health screening for anyone under 18. The parent or guardian can make access, correction and withdrawal requests on the young person’s behalf.

Who we share it with

We never sell or rent your personal information. We share it only with trusted service providers that help us run DhattFit, and only what they need to do their job:

• Bluehost: hosts our website, client portal and the data stored in them.
• HubSpot: our forms, contact list and the Friday Email.
• Stripe: processes payments.
• OpenSign: electronic signatures for agreements and waivers.
• Google: Google Meet for live sessions, Google Search Console for search data, and Google Workspace or Drive for our business files.

These providers must protect your information and use it only for the services they provide to us.

Information stored outside Canada. Some of these providers, including Bluehost, HubSpot, Stripe and Google, may store or process information in the United States or other countries. When information is outside Canada, the laws of that country apply, and courts or government authorities there may be able to access it. If you’d like more information about how our service providers outside Canada handle your information, or have questions about it, contact Sukh Dhatt using the details above.

We may also share information if the law requires it (for example, a court order), to protect someone’s safety in an emergency, or with professional advisers such as our accountant, lawyer or insurer when needed.

How long we keep it

We keep your information only as long as we need it for the reasons above, or as long as the law requires:

• Enquiries and quiz answers from people who don’t become clients: up to 2 years after our last contact.
• Client records (health screening, assessments, measurements, plans and agreements): while you’re a client and for up to 7 years afterwards, in case of insurance or legal questions.
• Payment and tax records: as long as tax law requires (generally 6 years).
• Friday Email: until you unsubscribe. We keep a record of your consent and unsubscribe so we respect your choice.

After that, we securely delete or anonymize it.

How we protect it

• The website and client portal use encrypted (HTTPS) connections.
• The client portal needs a password, and each client can see only their own records.
• Only Sukh and authorized DhattFit coaches can see client records, and only when they need to.
• Card payments are handled by Stripe, so card numbers never touch our systems.
• Paper forms, if any, are kept locked away and shredded when no longer needed.

No system is perfectly secure. If a breach creates a real risk of significant harm to you, we’ll tell you and report it to the privacy commissioner, as the law requires.

Your choices and rights

See or correct your information. You can ask what personal information we hold about you, how we use it and who we’ve shared it with, and ask us to fix anything that’s wrong. Email info@dhattfit.ca. We’ll reply within 30 days. We may need to confirm your identity first. In rare cases the law lets us withhold some information; if so, we’ll tell you why.

Withdraw consent. You can withdraw consent to any use of your information at any time, subject to legal or contract limits, by contacting us.

Unsubscribe. Every Friday Email has an unsubscribe link. You can also email us and we’ll take you off the list.

Ask us to delete it. We’ll delete what we can, except what we must keep for legal, tax or insurance reasons.

Questions or complaints

If you have a concern, please talk to us first at info@dhattfit.ca or 587-284-7854. We’ll do our best to fix it.

If you’re not satisfied, you can contact:

• Office of the Information and Privacy Commissioner of Alberta (for Alberta): oipc.ab.ca, 1-888-878-4044
• Office of the Privacy Commissioner of Canada (for clients outside Alberta, or information moving across provincial or national borders): priv.gc.ca

Changes to this policy

We may update this policy as our services change. We’ll post the new version here with a new effective date and let clients know about important changes.

Last updated: October 22, 2026