Privacy Policy

Look, we get it - nobody actually enjoys reading privacy policies. But here's the deal: at Varenth Forge Fitness, we're not about playing games with your personal info. This document lays out exactly what data we collect when you train with us, why we need it, and how we keep it locked down tight.

We operate outta Vancouver, BC, which means we follow Canadian privacy laws (PIPEDA for those keeping score at home), plus we're GDPR compliant for our international members. Bottom line? Your data's treated with the same respect we give to proper squat form.

If you're doing personal training, nutrition coaching, or body comp analysis, we'll need some health-related info. This helps us program properly and keep you safe:

• Medical history and injury background
• Current fitness levels and goals
• Body composition measurements
• Training performance data (weights lifted, reps, sets)
• Dietary preferences and restrictions
• Progress photos (only if you opt in)

Our website collects some tech data automatically - standard internet stuff. IP addresses, browser type, device info, pages you visit. Nothing creepy, just helps us keep the site running smooth.

We're gonna be real with you - here's exactly what we do with your info:

• Provide services: Can't coach you if we don't know your goals and limitations
• Process payments: Gotta keep the lights on somehow
• Send updates: Class schedules, gym closures, new programs - the important stuff
• Track progress: How else you gonna see those gains?
• Safety reasons: Emergency contacts exist for a reason
• Improve our services: Feedback helps us get better
• Marketing: But only if you said it's cool - we're not spammers

We're not selling your data to random companies or doing anything shady. Your info stays with us unless legally required otherwise.

Your data's stored on secure servers in Canada. We use encrypted cloud storage and physical backups kept at our facility in a locked cabinet (old school, but it works). Only authorized staff can access this stuff, and they're trained on handling it properly.

Active members: we keep your data as long as you're training with us, plus seven years after (tax and legal requirements, not our choice).

Former members: basic contact and payment history stays for seven years for accounting purposes. Training data and health info gets deleted after three years unless you ask us to keep it longer.

Want us to delete everything sooner? Just ask - we'll do what we legally can.

It's your data, so you've got options:

• Access: Wanna see what we've got on file? Just ask and we'll send it over within 30 days
• Correction: If something's wrong, let us know and we'll fix it ASAP
• Deletion: Want out? We'll delete what we legally can (some stuff we gotta keep for taxes/legal)
• Portability: Need your data in a usable format? We'll export it for you
• Object: Don't want marketing emails? Unsubscribe anytime
• Restrict processing: You can limit how we use certain info

To exercise any of these rights, shoot us an email at info@varenthforge.info or stop by the desk. We'll verify it's actually you (for security) and then handle your request.

Yeah, we use cookies. Not the protein kind, sadly. These little bits of code help our website remember you and work better:

• Essential cookies: Keep you logged in, remember your cart - can't really disable these without breaking stuff
• Analytics cookies: Help us see what pages people actually visit, where the site's slow, etc.
• Marketing cookies: Track if our ads are working - you can opt out of these

Most browsers let you control cookies in settings. Block 'em if you want, but some features might not work as smoothly.

We work with a few external companies to keep things running. They only get what they need to do their job:

• Payment processors: For handling your credit card/bank transfers securely
• Email service: Sends our newsletters and updates
• Cloud storage: Where we back up data
• Accounting software: For bookkeeping and tax stuff

All these companies are bound by confidentiality agreements and can't use your data for their own purposes. We vet them carefully to make sure they're legit.

Security's no joke around here. We've got multiple layers protecting your data:

• SSL encryption for all website traffic
• Encrypted database storage
• Regular security audits and updates
• Limited staff access (need-to-know basis)
• Secure physical storage for paper records
• Regular backups in case something goes sideways

That said, nothing's 100% hack-proof (anyone who tells you otherwise is lying). If there's ever a breach, we'll let you know immediately and walk you through what happened and what we're doing about it.

On your end: use a strong password, don't share your login, and log out on shared devices. Basic stuff, but it matters.

Laws change, technology evolves, we add new services - sometimes we gotta update this policy. When we do, we'll post the new version here with an updated date at the top.

For minor tweaks (fixing typos, clarifying wording), we'll just update the page. For major changes that affect how we handle your data, we'll send out an email heads-up and maybe ask you to review and accept the new terms.

It's worth checking back here every now and then, especially if you're the type who actually reads this stuff.

Questions? Concerns? Wanna exercise your data rights? We're here for it.