Privacy Policy
At MissFit Montreal, protecting your privacy is a core priority. This policy explains transparently how we collect, use, disclose, retain, and protect your personal information when you use our website and services.
By using our services, you consent to the practices described in this policy.
Information we collect
We collect the information needed to provide our services, manage your membership, and improve your experience. This may include:
- Identity information — First name, last name, date of birth.
- Contact details — Email address, phone number, mailing address.
- Health information — Physical condition data to ensure your safety during training.
- Payment data — Credit card or banking details (processed securely by our payment partners).
How we use your data
Your personal information is used for the following purposes:
Service management
To manage your membership, class registrations, and gym access.
Communication
To send confirmations, schedule updates, or newsletters (if you've opted in).
Improvement
To analyze site usage and improve our offers and services.
Security
To keep our members safe and prevent fraud.
Cookies and tracking technologies
Umami collects anonymous statistics with no cookie or personal data — it runs always-on, without your consent, in compliance with Law 25. The other tools below are subject to your consent:
| Tool | Purpose | Data collected | Consent required |
|---|---|---|---|
| Umami | Anonymous traffic statistics | Pages visited, duration, referral source — no cookie or personal identifier | No (anonymous) |
| Google Analytics 4 (GA4) | Funnel analysis, campaign measurement | Pages visited, events, client cookie ID, anonymized IP | Yes — analytics |
| Microsoft Clarity | Session recordings and click maps, to understand how the site is used | Mouse movement, clicks, scrolling, pages visited, device type — session replay in anonymized form, with form fields and images masked | Yes — analytics |
| Meta Pixel | Measuring Facebook/Instagram ad effectiveness | Pages visited, events, Meta cookie identifiers | Yes — marketing |
| Meta Conversions API (CAPI) | Server-side measurement, sending conversion events to Meta | SHA-256 hash of email/phone, IP, user-agent | Yes — marketing |
You can change your preferences at any time on the Cookie preferences page.
Subprocessors
We share certain data with:
- Google LLC (GA4) — United States
- Meta Platforms Inc. (Pixel + CAPI) — United States
- Microsoft Corporation (Clarity) — United States
- Umami Cloud — Netherlands
- Netlify Inc. (hosting) — United States
- LeadConnector / GoHighLevel (CRM, appointment booking) — United States
- Fliip (member management and free trials) — Canada
Data retention
| Source | Retention period |
|---|---|
| GA4 | 14 months |
| Meta Pixel + CAPI | Meta default (~7 days for events) |
| Umami | 24 months |
| Netlify Functions logs | 7 days |
Your rights under Law 25
Under Quebec's Act respecting the protection of personal information in the private sector (Law 25), you have the right to:
- Access your personal information.
- Request its correction or deletion.
- Withdraw your consent at any time.
- File a complaint with the Commission d'accès à l'information du Québec.
Last updated: May 4, 2026