Privacy policy

Marengo Inc. (“Marengo”, “we”) brings group fitness classes and personal coaching into residential buildings across Canada, delivered by certified independent trainers. This policy explains what personal information we collect through this website and through our services, why, who we share it with, how long we keep it, and the rights you have.

It applies everywhere we operate in Canada. We handle personal information in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, provincial private-sector privacy laws, including Québec’s Act respecting the protection of personal information in the private sector and the Personal Information Protection Acts of British Columbia and Alberta. Where these laws differ, we follow the rule that protects you most.

What we collect, and why

Website forms.

• Demo requests (property managers): name, company, role, work email, phone, city, portfolio size and an optional message, to respond and organize a demo.
• Trainer applications: name, email, phone, city, certifications, specialties, service areas, years of experience and an optional résumé link, to evaluate the application and contact you about opportunities.
• Coach requests on a building portal (residents): name, email, optional phone, your building, the coach you chose and your message, to arrange your consultation or match you with a coach.
• “Ask my building” (residents): name, email and building name, to contact that building’s management about Marengo and keep you posted.

Class registration. To join a group class you complete a registration form with your name, unit number, date of birth and email, sign a liability waiver and answer a physical activity readiness questionnaire (PAR-Q). The PAR-Q contains health information. We use it only to confirm you can take part safely and to let your instructor adapt the class. We also keep attendance and waitlist records.

Coaching and payments. If you buy a coaching package, your coach and our coaching platform hold what is needed to deliver it: contact details, goals, training history, any health or injury information you choose to share, and session records. Payments are handled by our payment processor; Marengo never sees or stores your full card number.

Photos and videos. Photos or short videos may be taken during classes and events. We use them only as allowed by the media consent in the class waiver, and you can withdraw that consent for future use at any time.

Communications. We send service messages tied to your registration or purchase, such as confirmations, schedule changes and sign-up links for upcoming classes in your building. We send promotional messages only with your consent, and each one includes a way to unsubscribe.

Technical data. Our hosting provider keeps standard server logs (IP address, time, pages requested) for security and reliability. We do not use them to profile visitors. The site sets one functional cookie, your language preference, which contains no identifier. The site uses no analytics, advertising or third-party tracking. If that changes, those tools will load only after you opt in, and this policy will be updated first.

We collect only what these purposes require, and we do not use your information for an unrelated purpose without your consent. We do not make decisions about you based exclusively on automated processing.

Who we share it with

• Your trainer or instructor. Our trainers are independent contractors bound by confidentiality obligations to Marengo. They receive what they need to deliver your class or coaching, including PAR-Q answers or health information relevant to your safety.
• Your building. For classes held in your building, we may share limited information with the building’s owner or property manager when it is needed to run the class, for example the names and unit numbers of registered participants for access and attendance, or overall participation figures. Photos and videos are shared with them only as allowed by your media consent. We never share your PAR-Q answers or other health information with your building, and we do not share your coaching details with it.
• Service providers acting on our behalf, under contract and only for the services they provide to us:
  • monday.com, client and applicant records;
  • Google Workspace, email and documents;
  • Tally, class registration, waiver and PAR-Q forms;
  • Everfit, coaching platform, programs and bookings;
  • Stripe, payment processing;
  • Hostinger, website hosting and server logs.
• When the law requires it, for example in response to a valid legal demand, or to protect someone’s life, health or safety in an emergency.
• If our business changes hands, through a merger, sale or reorganization, personal information may be transferred to the successor, which must protect it as this policy describes.

We do not sell personal information.

Storage outside your province or Canada

Some of our providers store or process information outside your province and outside Canada, including in the United States and the European Union. Information stored abroad is subject to the laws of that country and may be accessible to its authorities. We assess the protections a provider offers before using it, and we require contractual safeguards from each of them.

How long we keep it

• Demo requests, trainer applications, coach requests and building requests: up to 24 months after our last exchange, unless an agreement or active engagement requires longer.
• Class registrations, signed waivers and PAR-Q forms: at least five years after your last class, or longer if the law or our insurer requires it, because they document your consent and may be needed if a claim arises.
• Coaching and payment records: while you are a client, then as long as tax and accounting laws require (generally six years for financial records).
• Server logs: a few weeks, unless needed to investigate a security incident.

When information is no longer needed, we delete it or anonymize it.

How we protect it

We limit access to the people who need it, use providers with recognized security practices, protect our accounts with strong authentication, and make sure everyone who handles personal information for us knows these rules. Health information goes only to the trainer who needs it.

Your rights

You can ask to access the personal information we hold about you, have it corrected, withdraw your consent (which may mean we can no longer provide a service), or have it deleted when we no longer need to keep it. In Québec you can also ask to receive information you provided to us in a structured, commonly used technological format, or have it sent to another organization. Write to admin@marengohealth.com. We respond within 30 days and may first need to confirm your identity.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or to the authority in your province: the Commission d’accès à l’information du Québec, the Office of the Information and Privacy Commissioner for British Columbia, or the Office of the Information and Privacy Commissioner of Alberta.

Minors

Our services are intended for adults. A person under the age of majority in their province may take part only with the consent and signature of a parent or guardian. We do not knowingly collect information from a child under 14 without the consent of a parent or guardian.

Person in charge of personal information

The person responsible for the protection of personal information at Marengo is Alexandre Fortin, Chief Executive Officer, admin@marengohealth.com.

Confidentiality incidents

If a breach involving your personal information creates a real risk of significant harm (in Québec, a risk of serious injury), we will notify you and the competent privacy regulator as the law requires. We keep a record of every incident.

Changes

We may update this policy as our services evolve. The date above shows the current version, and material changes will be highlighted on this page.