Privacy Policy
Last updated: August 6 2026
1. About this policy
Bx Studio (“Bx Studio”, “we”, “us” or “our”) operates barre and Pilates studios in Quebec, as well as the website: https://bxstudio.ca/.
We are committed to protecting the personal information of our clients and website visitors. This policy explains what personal information we collect through our website, why we collect it, who we share it with, how long we keep it, and the rights available to you. This policy is governed by the Act respecting the protection of personal information in the private sector (Quebec), as amended by the Act to modernize legislative provisions as regards the protection of personal information (commonly referred to as Law 25).
This policy applies to our website. Information collected in our studios, over the phone or through our booking system is covered by the relevant sections below.
2. Person in charge of the protection of personal information
Under Law 25, we have designated a person responsible for the protection of personal information within our organization:
Gasia Hindoyan Bx Studio 3075 Promenade du Quartier-Saint-Martin Laval, Quebec H7T 0N7
Email: bxstudio.mtl@gmail.com Telephone:438-699-9107
Any question about this policy, and any request to exercise the rights described in section 11, should be sent to this person.
3. Personal information we collect
3.1 Information you provide directly
Contact form. When you write to us through the contact form on our website, we collect your name, your email address, your telephone number (if you choose to provide it) and the content of your message.
SMS marketing sign-up. If you choose to subscribe to our text message program through a sign-up form displayed on our website, we collect your mobile telephone number and, where applicable, your email address and first name. Subscription is optional and requires your express consent.
3.2 Information collected through the Mindbody booking system
Our website displays a booking interface provided by Mindbody, Inc. within a frame embedded in our pages. Although this interface appears on our website, it is operated by Mindbody.
When you create an account, book a class, purchase a package, or make a payment through this interface, the information you enter is collected and processed directly by Mindbody. This may include your identity, your contact details, your payment information, your booking and attendance history, and any information you choose to add to your client profile.
Bx Studio accesses this information as a client of Mindbody, in order to manage bookings, memberships and class attendance. We do not store your full payment card number on our website or on our own systems.
Mindbody’s own privacy practices are described in its privacy policy.
3.3 Information collected automatically
When you visit our website, certain technical information is collected automatically:
- IP address
- Browser type and version
- Operating system and device type
- Language preference
- Referring page
- Pages viewed, date, time and duration of your visit
- Interactions with the pages (clicks, scrolling, form submissions)
This information is collected through cookies and similar technologies, described in section 5.
4. Why we collect this information
We use personal information for the following purposes:
| Purpose | Information used |
|---|---|
| Responding to your questions and requests | Contact form data |
| Managing bookings, memberships and class attendance | Mindbody account data |
| Processing payments | Payment data (via Mindbody and its payment processor) |
| Operating, securing and maintaining the website | Technical data |
| Measuring website audience and improving our content | Technical and navigation data |
| Sending you marketing communications by text message or email, where you have consented | Contact details, navigation data |
| Meeting our legal, accounting and tax obligations | As required |
We collect only the personal information necessary for these purposes.
5. Cookies and similar technologies
A cookie is a small file placed on your device when you visit a website. We use cookies and similar technologies for the purposes described below.
5.1 Necessary cookies
These cookies are required for the website to function and cannot be switched off. They record your cookie preferences, your language choice, and support security and performance features.
| Technology | Provider | Purpose |
|---|---|---|
| Complianz | Complianz B.V. | Records your consent choices |
| WPML | OnTheGoSystems | Remembers your language preference |
| LiteSpeed Cache | LiteSpeed Technologies | Page loading performance |
5.2 Statistics cookies
These cookies help us understand how visitors use our website, on an aggregated basis.
| Technology | Provider | Purpose |
|---|---|---|
| Google Analytics 4 | Google LLC | Audience measurement, traffic sources, page performance |
| Google Tag Manager | Google LLC | Management of the tags listed in this table |
5.3 Marketing cookies
These cookies are used to build a profile of your interests and to show you relevant advertising or send you relevant marketing messages.
| Technology | Provider | Purpose |
|---|---|---|
| Attentive | Attentive Mobile Inc. | Text message sign-up units, tracking of browsing behaviour, personalization of SMS campaigns |
| Meta Pixel | Meta Platforms, Inc. | Advertising measurement and audience building on Facebook and Instagram |
5.4 Third-party content
Our website displays content served by third parties, which may set their own cookies:
| Content | Provider |
|---|---|
| Booking interface | Mindbody, Inc. |
| Google reviews display | Google LLC |
5.5 Managing your choices
Statistics and marketing cookies are deactivated by default. They are placed only after you have given your consent through the banner displayed on your first visit.
You may withdraw or change your consent at any time.
You can also configure your browser to refuse cookies or to alert you when a cookie is being placed. Blocking necessary cookies may prevent parts of the website from working correctly.
6. Profiling and identification technologies
We are required to inform you when we use technology that allows you to be identified, located or profiled.
Attentive. This technology assigns a unique identifier to your browser, stored in a cookie. It records the pages you view on our website and links this activity to your subscriber profile if you have signed up for our text message program. This allows us to send you text messages tailored to your interests, such as a reminder about a class type you viewed but did not book.
Meta Pixel and Google Analytics 4. These technologies record your activity on our website in order to measure the performance of our advertising and, in the case of Meta Pixel, to build advertising audiences.
These functions are deactivated by default. They are activated only with your consent, and you may deactivate them at any time through the cookie settings described in section 5.5.
We do not make decisions about you based exclusively on automated processing of your personal information.
7. Who we share your information with
We do not sell your personal information.
We share personal information with the following categories of recipients:
Service providers. We use third-party service providers to operate our business and our website. Each provider receives only the information necessary to perform its services, and is bound by contract to protect it.
| Provider | Role | Location |
|---|---|---|
| Mindbody, Inc. | Booking, membership management, payments | United States |
| Attentive Mobile Inc. | Text message marketing platform | United States |
| Google LLC | Audience measurement, tag management, reviews display | United States |
| Meta Platforms, Inc. | Advertising measurement and targeting | United States |
| WHC | Website hosting | Canada |
Legal requirements. We may disclose personal information where required by law, by a court order, or to establish, exercise or defend legal claims.
Business transfer. If Bx Studio is involved in a sale, merger or reorganization, personal information may be transferred as part of that transaction, subject to the protections required by law.
8. Communication of information outside Quebec
Several of our service providers are located outside Quebec, primarily in the United States, as indicated in the table above. This means your personal information may be stored or processed outside the province.
Before entrusting personal information to a service provider located outside Quebec, we assess whether the information would receive protection adequate to the principles of Quebec’s personal information protection legislation, taking into account the sensitivity of the information, the purposes for which it is used, the protection measures in place, and the legal framework applicable in the jurisdiction concerned. Where appropriate, this communication is governed by a written agreement.
9. How long we keep your information
| Information | Retention period |
|---|---|
| Contact form messages | 24 months from the last exchange |
| Client account and booking history (Mindbody) | For the duration of the client relationship |
| Accounting and transaction records | As required by applicable tax legislation |
| Text message subscriber data | Until you unsubscribe, then for the period necessary to honour your unsubscribe request |
| Analytics data | GA4 default is 14 months |
At the end of the applicable period, personal information is destroyed or anonymized.
10. Security
We take reasonable measures to protect personal information against loss, theft, unauthorized access, disclosure, copying, use or modification. These measures include an encrypted connection to our website (HTTPS), restricted access to systems on a need-to-know basis, and the selection of service providers that maintain recognized security standards.
We maintain a register of confidentiality incidents, as required by law. In the event of a confidentiality incident presenting a risk of serious injury, we will notify the affected individuals and the Commission d’accès à l’information du Québec.
No method of transmission or storage is entirely secure, and we cannot guarantee absolute security.
11. Your rights
You have the following rights with respect to your personal information:
Access. You may ask us to confirm whether we hold personal information about you and to obtain a copy of it.
Rectification. You may ask us to correct information that is inaccurate, incomplete or ambiguous, or that was collected or kept in a manner not authorized by law.
Withdrawal of consent. You may withdraw your consent to the use of your information at any time, including your consent to marketing communications and to non-necessary cookies. Withdrawing consent does not affect processing carried out before the withdrawal.
Portability. You may ask to receive the computerized personal information you have provided to us in a structured, commonly used technological format, or ask that it be communicated to another organization.
De-indexing and cessation of dissemination. In the circumstances provided by law, you may ask that we cease disseminating your personal information or that a hyperlink giving access to it be de-indexed.
Complaint. You may file a complaint with the Commission d’accès à l’information du Québec if you are dissatisfied with how we handle your personal information or your request.
How to exercise your rights
Send your request in writing to the person in charge of the protection of personal information, whose contact details appear in section 2. We may ask you to confirm your identity before responding.
We will respond within 30 days of receiving your request. Our response is provided free of charge, although a reasonable fee may apply for transcription, reproduction or transmission, in which case we will inform you of the amount beforehand.
If we refuse your request, we will explain the reasons, indicate the legal provisions relied on, and inform you of your right to have the decision reviewed by the Commission d’accès à l’information du Québec.
12. Minors
Our services and our website are intended for adults. We do not knowingly collect personal information from persons under 14 years of age without the consent of a person having parental authority. If you believe such information has been provided to us, please contact us so that we can delete it.
13. Changes to this policy
We may update this policy to reflect changes in our practices, our tools or the applicable law. The updated version will be published on this page, with a revised date at the top. We encourage you to review it periodically. Where a change is significant, we will inform you by appropriate means.
14. Contact
Questions about this policy or about your personal information: Gasia Hindoyan Person in charge of the protection of personal information Bx Studio 3075 Promenade du Quartier-Saint-Martin, Laval, Quebec H7T 0N7
Independent oversight authority: Commission d’accès à l’information du Québec www.cai.gouv.qc.ca