PRIVACY POLICY

Eccentric Iron Fitness ("we", "us", or "our") is committed to protecting your privacy. This policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our services, or communicate with us.

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act (PIPA), Canada's Anti-Spam Legislation (CASL), the California Consumer Privacy Act (CCPA/CPRA), the CAN-SPAM Act, the Telephone Consumer Protection Act (TCPA), and A2P 10DLC messaging regulations.

1. ACCOUNTABILITY & PRIVACY OFFICER

Our Privacy Officer is responsible for ensuring compliance with applicable privacy legislation. For questions, concerns, or to exercise your privacy rights, contact:

Carver Lloyd, Privacy Officer
Eccentric Iron Fitness
#2418-11280 Pazarena Place, Maple Ridge, BC V2X 9H8
Email: privacy@eccentriciron.ca
Phone: (604) 200-3390

2. INFORMATION WE COLLECT

We collect personal information that you provide directly to us, including:

  • Contact information: name, email address, phone number, mailing address
  • Fitness and health data: age, weight, height, gender, activity level, fitness goals, body measurements, training history, and nutritional information collected through our calculator and coaching services
  • Communication data: messages you send through our contact form, booking forms, or directly to coaches
  • Account and billing data: payment information processed through third-party payment processors

We also automatically collect certain technical information when you visit our website, including IP address, browser type, referring URL, pages visited, and cookies. This data is collected through standard web analytics tools.

3. WHY WE COLLECT YOUR INFORMATION

We collect and use your personal information only for the following identified purposes:

  • To provide personal training, nutrition coaching, and fitness programming services
  • To communicate with you about your training program, appointments, and account
  • To process payments and manage billing
  • To send promotional offers, newsletters, and fitness tips via email (with your express consent)
  • To send SMS/text messages including appointment reminders, promotions, and fitness tips (with your separate express consent)
  • To personalize your experience and improve our services
  • To comply with legal obligations

We will not use your information for purposes beyond those stated above without obtaining your additional consent.

4. CONSENT

We obtain your consent before collecting, using, or disclosing your personal information. Consent may be express or implied depending on the sensitivity of the information:

  • Express consent is required for fitness and health data (which we treat as sensitive personal information), marketing email communications, and SMS/text messages. Express consent is obtained through clear opt-in mechanisms on our forms.
  • Implied consent may be relied upon for basic contact information when you initiate a service inquiry or existing business relationship.

You may withdraw your consent at any time by contacting our Privacy Officer, by unsubscribing from emails, or by replying STOP to any SMS message. Withdrawal of consent may affect our ability to provide certain services.

5. SMS & TEXT MESSAGING

If you opt in to receive SMS/text messages from Eccentric Iron Fitness, the following applies:

  • Message frequency varies based on your coaching program and preferences
  • Message and data rates may apply depending on your mobile carrier plan
  • You may opt out at any time by replying STOP to any message
  • For help, reply HELP to any message, or contact us at privacy@eccentriciron.ca
  • Consent to receive text messages is not a condition of any purchase

We will not sell, rent, or share your mobile phone number or SMS opt-in consent data with any third parties for marketing or promotional purposes. Mobile opt-in consent information will not be shared with or sold to third parties or affiliates for any purpose.

6. DISCLOSURE TO THIRD PARTIES

We do not sell your personal information. We may share your information with the following categories of third-party service providers who assist us in operating our business:

  • CRM and communications: GoHighLevel (for contact management, email, and SMS delivery)
  • Database hosting: Supabase (PostgreSQL database with row-level security)
  • Website hosting: Vercel (for website delivery and serverless functions)
  • Payment processing: third-party payment processors as specified in coaching agreements
  • Analytics: web analytics providers for aggregate usage statistics

These providers are contractually bound to use your information only for the purposes we specify and to protect it with appropriate safeguards. We may also disclose information when required by law or to protect our legal rights.

7. CROSS-BORDER DATA TRANSFERS

Your personal information may be stored or processed outside of British Columbia, Canada, including in the United States, where it may be subject to the laws of those jurisdictions. Our third-party service providers (including GoHighLevel, Supabase, and Vercel) may process data in the United States.

We take reasonable steps to ensure that any third-party service providers that process your information outside of Canada provide a comparable level of protection. By using our services, you acknowledge and consent to the transfer and processing of your information outside of Canada.

8. DATA RETENTION

We retain your personal information only as long as necessary to:

  • Fulfill the purposes for which it was collected
  • Maintain records required by law (including tax and business records)
  • Retain consent records for a minimum of 3 years after the end of the business relationship (as required by CASL)

When personal information is no longer needed, we securely dispose of it using appropriate methods.

9. SECURITY SAFEGUARDS

We protect your personal information with reasonable administrative, technical, and physical safeguards, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Row-level security on database tables
  • Access controls limiting who can view personal information
  • Secure authentication for administrative access
  • Regular review of security practices

10. YOUR RIGHTS

Under PIPEDA, BC PIPA, and applicable US privacy laws, you have the following rights:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request that we correct inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal retention requirements)
  • Withdraw consent: Withdraw your consent to the collection, use, or disclosure of your information at any time
  • Opt out of marketing: Unsubscribe from promotional emails or SMS at any time
  • Non-discrimination: You will not be discriminated against for exercising your privacy rights

To exercise any of these rights, contact our Privacy Officer at privacy@eccentriciron.ca or by phone at (604) 200-3390. We will respond within 30 business days.

11. ADDITIONAL RIGHTS FOR CALIFORNIA RESIDENTS

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • The right to know what personal information we collect, use, and disclose
  • The right to request deletion of your personal information
  • The right to correct inaccurate personal information
  • The right to opt out of the sale or sharing of your personal information
  • The right to limit use and disclosure of sensitive personal information
  • The right to not be discriminated against for exercising your privacy rights

We do not sell or share your personal information as defined by the CCPA/CPRA. To exercise your rights, contact us at privacy@eccentriciron.ca.

12. EMAIL COMMUNICATIONS

All commercial emails from Eccentric Iron Fitness include our valid physical mailing address and a clear mechanism to unsubscribe from future communications. Unsubscribe requests are honored within 10 business days. We will not sell, transfer, or share your email address with third parties for their marketing purposes without your consent.

13. PRIVACY BREACH NOTIFICATION

In the event of a privacy breach that creates a real risk of significant harm to affected individuals, we will notify the affected individuals and the Office of the Information and Privacy Commissioner of British Columbia (OIPC) as required by BC PIPA, as well as the Office of the Privacy Commissioner of Canada as required by PIPEDA.

14. COOKIES & TRACKING

Our website uses essential cookies to ensure proper functionality. We may also use analytics cookies to understand how visitors use our site. You can control cookie settings through your browser preferences.

15. COMPLAINTS

If you have a complaint about our privacy practices, please contact our Privacy Officer first. If you are not satisfied with our response, you may file a complaint with:

  • Office of the Privacy Commissioner of Canada: www.priv.gc.ca
  • Office of the Information and Privacy Commissioner for British Columbia: www.oipc.bc.ca

16. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised "Last Updated" date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

17. CONTACT US

If you have questions about this Privacy Policy, contact our Privacy Officer:

Eccentric Iron Fitness
Attn: Privacy Officer
#2418-11280 Pazarena Place, Maple Ridge, BC V2X 9H8
Email: privacy@eccentriciron.ca
Phone: (604) 200-3390

Last updated: March 19, 2026

View our Terms & Conditions