Privacy Policy

At FitSmart, your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.

Last updated: November 21, 2025

1. Information We Collect

We collect the following types of personal information:

• Personal Information: Name, email address, phone number, delivery address, postal code
• Account Information: Username, password (encrypted), account preferences
• Order Information: Meal preferences, dietary requirements, delivery schedules, subscription details
• Health Information: Weight goals, dietary restrictions, medical conditions (with your consent)
• Payment Information: Payment method details (processed securely through Stripe - we do not store full card numbers)
• Usage Data: Website interactions, order history, feedback, preferences
• Communication Data: Messages, inquiries, support requests, customer service interactions
• Device Information: IP address, browser type, device information, cookies

2. How We Use Your Information

We use your personal information for the following purposes:

• Order Fulfillment: Process orders, arrange deliveries, manage subscriptions, handle payments
• Personalized Service: Customize meal plans, dietary recommendations, and delivery schedules
• Customer Support: Respond to inquiries, resolve issues, provide assistance
• Account Management: Create and manage your account, authenticate users, maintain account security
• Marketing & Promotions: Send offers, newsletters, health tips (with your consent)
• Service Improvement: Analyze usage patterns, enhance user experience, develop new features
• Legal Compliance: Comply with legal obligations, protect our rights, prevent fraud
• Communication: Send order confirmations, delivery updates, important service notifications

3. Marketing Communications

With your consent, we may use your contact information to send you:

• Special offers and discounts
• New meal plan announcements
• Health and nutrition tips
• Customer success stories
• Seasonal promotions
• Newsletter updates

You can opt-out of marketing communications at any time by clicking the unsubscribe link in our emails, updating your account preferences, or contacting us directly at info@fitsmart.ca.

4. Data Protection & Security

We implement industry-standard security measures to protect your personal information:

• Encryption of data during transmission (SSL/TLS)
• Secure storage of personal information
• Access controls restricting personal information to authorized personnel only
• Regular security assessments and updates
• Secure payment processing through Stripe (PCI DSS compliant)
• Regular backups and disaster recovery procedures

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

5. Data Sharing & Disclosure

We do not sell your personal information to third parties. We may share your information with:

• Service Providers: Delivery partners, payment processors (Stripe), email service providers, analytics services (only for order fulfillment and service delivery)
• Legal Requirements: When required by law, court order, or government regulation
• Business Protection: To protect our rights, property, or safety, or that of our customers
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
• With Your Consent: When you explicitly consent to sharing

Third-Party Services: We use Stripe for payment processing. Stripe's privacy policy applies to payment information. We also use Google Analytics and Firebase for analytics. These services have their own privacy policies.

6. Your Rights (Under PIPEDA)

As a Canadian resident, you have the following rights regarding your personal information:

• Right to Access: Request access to your personal information we hold
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Withdraw Consent: Withdraw consent for collection, use, or disclosure of your information
• Right to Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Right to Object: Object to certain uses of your personal information
• Right to Data Portability: Request a copy of your data in a portable format
• Right to Complain: File a complaint with the Privacy Commissioner of Canada if you believe your privacy rights have been violated

To exercise any of these rights, please contact us at privacy@fitsmart.ca or use the contact information below.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Improve user experience and website functionality
• Show relevant content and personalized offers
• Authenticate users and maintain security

You can control cookies through your browser settings. However, disabling cookies may affect website functionality.

8. Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes for which it was collected
• Comply with legal, regulatory, or accounting requirements
• Resolve disputes and enforce our agreements

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your personal information may be processed and stored outside of Canada, including in the United States. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with Canadian privacy laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on our website
• Sending an email notification (for material changes)
• Updating the "Last updated" date at the top of this policy

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

This Privacy Policy is governed by the laws of Canada and the province in which you reside.