Privacy Policy
What is collected, why, who else sees it, and how to get it back or have it deleted.
I collect as little as possible, I never sell it, and health information is treated as sensitive, because it is. You can ask to see what I hold, correct it, or have it deleted, at any time.
1Who is accountable
Graham Robert Kingma, carrying on business as Ascent Metabolic Coaching (Ontario Business Identification Number 1001709714), is responsible for the personal information in its care under the federal Personal Information Protection and Electronic Documents Act (PIPEDA).
Privacy contact: Graham Kingma, Privacy Officer
ascentmetaboliccoaching.ca/contact
Stoney Creek, Ontario, Canada
2What is collected, and why
| If you… | What is collected | Why |
|---|---|---|
| Visit the website | Standard analytics: pages viewed, approximate region, device and browser, referring site. Cookies set by Squarespace. | To see which guides are useful and keep the site working |
| Take the readiness quiz | Your answers, and your name and email if you ask for the result | To show your result and, only with your consent, to email it |
| Download a guide or join the list | First name and email address | To send the guide and the newsletter you asked for |
| Book a discovery call | Name, email, phone, and what you write in the booking form | To hold the call and prepare for it |
| Call or text the practice phone number | Your phone number, the date, time and length of the call, any voicemail you leave, the content of any text messages, and your name if you give it. Calls are not recorded. If nobody picks up, an automated assistant may answer, answer basic questions about the practice and take a message. | To answer you, and to keep an accurate note of who asked what |
| Become a client | Intake answers, health history, medications, goals, measurements you choose to share, session notes, payment records | To coach you properly and keep an accurate record |
3What is never done
- Your information is never sold, rented or traded. Not ever, not to anyone.
- Your health information is never used to target advertising.
- You are never added to the mailing list because you booked a call or became a client. The newsletter is a separate, express opt-in.
- Client details are never used in marketing, social media or case studies unless you give specific written permission for that particular use.
4Consent, and taking it back
You give consent by asking for a guide, taking the quiz, booking a call, or completing intake. For health information, consent is express: you are told what it is for before you give it.
You can withdraw consent at any time by emailing me, subject to legal and record-keeping limits set out below. Withdrawing consent for the information I need to coach you safely may mean coaching cannot continue.
Email: every newsletter has a one-click unsubscribe, honoured within 10 business days as required by Canada’s Anti-Spam Legislation. You can also just reply and ask.
5Who else touches your information
I use a small number of service providers. Each is bound to protect your information and to use it only to provide their service to me.
| Provider | What for | Where data is held |
|---|---|---|
| Squarespace | Website and forms | United States |
| Practice Better | Booking, intake, notes, secure messaging | Canada |
| Stripe | Card processing | United States |
| MailerLite | Email list and newsletter | European Union / United States |
| Quo | The practice phone number: calls, voicemail and text messages | United States |
I never see or store your full card number. Stripe handles that directly.
6How long it is kept
| Information | Kept for |
|---|---|
| Newsletter subscribers | Until you unsubscribe, then removed within 30 days |
| Quiz answers with no email given | Not retained in identifiable form |
| Enquiries that do not become clients | 12 months |
| Calls, voicemails and text messages | 12 months, unless they become part of a client record |
| Client records and coaching notes | 7 years after your last session, then securely destroyed |
| Invoices and payment records | 6 years, as required by the Canada Revenue Agency |
After that, records are securely deleted or anonymised.
7How it is protected
Practical safeguards, proportionate to how sensitive the information is: client records held in Practice Better, a platform built for health practitioners and hosted in Canada; multi-factor authentication on every account that holds client data; encryption in transit; access limited to me alone; and no client health information kept in ordinary email or on paper.
No system is perfect. If a breach ever created a real risk of significant harm to you, I would notify you and the Privacy Commissioner of Canada as PIPEDA requires, and tell you plainly what happened.
8Your rights
- See it. Ask for a copy of what I hold about you. I will respond within 30 days, free in most cases.
- Correct it. If something is wrong, tell me and I will fix it.
- Delete it. Ask me to erase your information, subject to records I am legally required to keep.
- Withdraw consent or unsubscribe at any time.
- Complain. Email me first, because I would rather fix it. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.
9Cookies
This site uses cookies that are necessary to make it work, and basic analytics cookies that tell me which pages are read. You can block or delete cookies in your browser settings; the site will still work, though some features may not.
10Changes to this policy
If this policy changes in a way that materially affects you, I will post the new version here with a new date and, where the change is significant, email anyone on the list.
Questions? Send them through the contact page.