Privacy Policy

AnJil's Acrobatics respects your privacy and the privacy of the participants in our programs — many of whom are children. This policy explains what personal information we collect, why we collect it, how we protect it, and what rights you have under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information We Collect

We collect only what we need to run our programs safely and to bill for them.

• Account holder information: your name, email address, phone number(s), relationship to the participant, mailing address, and an emergency contact name and phone number.
• Participant information (including children): the participant's name, date of birth, and any medical identifier or medical notes you choose to provide so we can keep them safe during activities.
• Payment information: we use Stripe to process payments. Your card details are submitted directly to Stripe — they never pass through, and are never stored on, our website. We retain only Stripe's identifiers and a record of what was charged.
• Records of your activity with us: enrolments, attendance, invoices and payments, and any waiver you acknowledge.
• Newsletter subscription: if you sign up for our mailing list, we store your email address and the date you subscribed — nothing else. You do not need an account to subscribe, and every message we send carries a one-click unsubscribe link.
• Limited technical information: the IP address recorded when you submit our contact form, when a sign-in is attempted, when you submit a newsletter signup, and when a waiver is acknowledged. The waiver IP is kept deliberately, as part of the consent record; the others are kept only to limit abuse of those forms.

2. How We Use Your Information

• To register participants and manage class rosters and waitlists.
• To keep participants safe — instructors may need medical notes and emergency contacts.
• To issue invoices, process payments, and keep the financial records the law requires.
• To contact you about schedules, cancellations, and your account.
• To send you our newsletter, if you asked for it — and only until you unsubscribe.
• To protect the site against abuse (for example, limiting repeated failed sign-in attempts).

We do not use your information for advertising, and we do not build advertising profiles.

3. Consent

We collect your information with your consent, given when you create an account, register a participant, or acknowledge a waiver.

Where a participant is a child, the account holder is their parent or guardian, and consent is given by that adult on the child's behalf. When you acknowledge a waiver we record the version of the waiver you agreed to, the name you typed, the date and time, and your IP address. That record is how we demonstrate consent was given, so we keep it (see section 6).

You may withdraw your consent at any time — see section 7 — subject to the records we are legally required to keep.

4. Cookies and Tracking

This website sets one cookie, and it is strictly necessary: a session cookie that keeps you signed in as you move between pages. It contains no personal information, expires when you close your browser, is marked HttpOnly and SameSite=Lax, and is sent only over a secure connection when the site is served over HTTPS. Your session ends after 30 minutes of inactivity, and in all cases after 12 hours.

We use no analytics, advertising, or third-party tracking technologies — no Google Analytics, no advertising pixels, no social media trackers. Nothing on this site follows you to other websites. Because the only cookie we set is strictly necessary to provide the service you asked for, no cookie consent banner is required.

5. Who We Share Your Information With

We do not sell, rent, or trade your personal information. We share it only with the service providers we need to operate:

• Stripe — our payment processor. Card details go directly to Stripe and are governed by Stripe's privacy policy.
• Our web hosting provider — which stores the website and its database on our behalf.
• Our email provider — which delivers the messages we send you.

We may also disclose information where we are legally required to do so, such as in response to a lawful order.

6. How Long We Keep Your Information

7. Your Rights Under PIPEDA

You have the right to:

• Access the personal information we hold about you and your participants, and be told how it has been used and who it has been shared with.
• Correct information that is inaccurate or incomplete.
• Withdraw your consent to our collection and use of your information.

To exercise any of these rights, write to us at anjilsacrobatics@hotmail.com. We will respond within 30 days, at no cost to you, and provide the information in a form you can understand. If we need more time or must refuse part of a request, we will tell you why.

Please note: some records must be kept even after you withdraw consent or close your account — specifically invoices and payment records (required by tax law) and waiver acknowledgments (legal records). Withdrawing consent may also mean we can no longer provide our programs to you, because we cannot run a class safely without emergency and medical information.

8. Children's Information

Most participants in our programs are children, and we treat their information with particular care.

• A child's information is provided and controlled by their parent or guardian, who holds the account.
• We collect only the child's name, date of birth, and the medical information you choose to give us so instructors can respond appropriately.
• Medical notes are visible only to the account holder and to studio staff — never published, and never included in our system logs.
• Photographs published on this website have their embedded metadata — including any GPS location recorded by the camera — automatically removed before publication.
• A parent or guardian may request access to, correction of, or removal of their child's information, or ask us to take down a photograph, by writing to anjilsacrobatics@hotmail.com.

9. How We Protect Your Information

• The site is served over HTTPS, so information is encrypted in transit.
• Passwords are stored only as secure one-way hashes — we cannot see your password.
• We never store credit card numbers; payments are handled entirely by Stripe.
• All database access uses prepared statements, guarding against injection attacks.
• Every form is protected against cross-site request forgery.
• Access to participant information is restricted to the account holder and authorised studio staff.

No system can be guaranteed completely secure, but we take these safeguards seriously and review them as the site changes.

10. Privacy Breaches

We maintain records of any breach of our security safeguards involving personal information. Where a breach creates a real risk of significant harm, we will notify the affected individuals and the Office of the Privacy Commissioner of Canada, as PIPEDA requires.

11. Changes to This Policy

We may update this policy from time to time. The current version is always posted on this page, with the "Last Updated" date at the top. Material changes will be brought to your attention.

12. Contact Us

For any privacy question, or to exercise the rights described in section 7:

AnJil's Acrobatics
53 Clark Road, Rothesay, NB E2E 2K9
anjilsacrobatics@hotmail.com
+1 (506) 653-1109

If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.