Privacy Policy

Last updated: April 2026

ActivePace / Culturis.ca
info@activepace.ca · activepace.ca


Your Privacy Matters Here

ActivePace was built to serve communities that have historically been underserved — including communities that have had reason to distrust institutions and the systems that hold their data. We take that seriously.

This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have over it. We have written it in plain language, not legal language, because you deserve to understand exactly what happens with your information.

ActivePace is operated by Culturis.ca, headquartered in Canada. This policy complies with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.


Who This Policy Applies To

This policy applies to everyone who uses ActivePace:

  • People seeking care — anyone who visits activepace.ca, searches the directory, reads practitioner profiles, or sends a message through the platform
  • Practitioners — therapists, fitness professionals, dietitians, naturopaths, coaches, and other wellness professionals who register and maintain a listing
  • Facilities — gyms, studios, wellness centres, and clinics that maintain a listing on the platform

What Information We Collect

Information you give us directly

When you search or browse (no account required):
We do not require you to create an account to search the directory or read practitioner profiles. If you browse without an account, we collect only the standard technical data described below under Automatic Data.

When you send a message to a practitioner:

  • Your name
  • Your email address
  • Your phone number (if you choose to provide it)
  • Whether the support is for yourself or someone else
  • Your message content
  • If you propose a booking time: the days and time windows you selected

When you register as a practitioner:

  • Your full name and professional credentials
  • Your email address and phone number
  • Your professional address
  • Your professional category, regulatory body, and licence information
  • Your cultural background and heritage (provided voluntarily — used only to surface you to clients using cultural background filters)
  • Languages you speak
  • Your specializations and areas of practice
  • Your session types, availability windows, and pricing
  • Your profile photo and gallery images
  • Your video introduction (if uploaded)
  • Your philosophy statement and bio
  • Your wellness activities (used to personalise your profile)
  • Payment information (processed by Stripe — we do not store your card details)

When you register as a facility:

  • Facility name, address, and contact information
  • Facility category and description
  • Staff information (names, roles, specializations)
  • Photos and video

Information we collect automatically

When you visit activepace.ca, our web server and analytics tools collect:

  • Your IP address (anonymised after 90 days)
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on each page
  • Search terms entered on the site
  • How you arrived at the site (referring website or search query)
  • Which practitioner profiles you viewed

We use Google Analytics 4 for this. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Cookies

Cookie Purpose Duration
Session cookie Keeps you logged in during your visit Session (closes when browser closes)
WordPress auth cookie Remembers your login across sessions 14 days
Google Analytics Anonymous usage analytics 2 years
WooCommerce cart Remembers your cart if you start registration Session
Stripe Fraud prevention during payment Session

You can control cookies through your browser settings. Disabling cookies may affect your ability to log in or complete registration.


Why We Collect This Information

To operate the directory:
Your practitioner profile information is published on activepace.ca so that people seeking care can find you. This is the core purpose of the platform.

To deliver messages:
When someone sends you a message through the platform, we route it to your registered email address. We do not read your messages beyond what is needed to deliver them and prevent spam.

To process payments:
We use Stripe to process subscription payments. Stripe is a PCI-DSS Level 1 certified payment processor. Your card details go directly to Stripe — we never see or store them.

To personalise search results:
We use cultural background, heritage, and language information to match practitioners with people using cultural background filters. This data is stored and displayed only as you have provided and approved it in your profile settings.

To improve the platform:
Anonymous usage data helps us understand how people use the site, which features are working, and where the experience can improve.

To send you important communications:
We send transactional emails — account confirmation, message notifications, subscription receipts. We do not send marketing emails without your explicit consent.

To comply with legal obligations:
We retain certain records as required by Canadian law.


Sensitive Information

ActivePace handles information that may be considered sensitive under PIPEDA, including cultural and ethnic background, heritage, language, and in some cases health-related information provided by practitioners in their professional bios.

This information is:

  • Collected only with your knowledge and voluntary consent
  • Used only for the purposes described in this policy
  • Never sold to any third party
  • Never used for advertising targeting
  • Stored on servers in Canada (Rebel.com Canadian data centres)

If you are a person seeking care and you send a message to a practitioner, the content of that message — which may contain sensitive personal health information — is transmitted to the practitioner’s registered email address. Exercise the same judgment you would when sending any sensitive email.


Who We Share Information With

We do not sell your personal information. We do not rent it. We do not share it for advertising purposes.

We share information only with the following third parties, strictly for the purposes described:

Service Purpose Data shared Their privacy policy
Stripe Payment processing Name, email, billing details stripe.com/privacy
Google Analytics Anonymous usage analytics Anonymised behaviour data policies.google.com/privacy
Rebel.com Web hosting and server infrastructure All site data stored on their servers rebel.com/legal/privacy
FluentCRM Email automation (notifications only) Name and email address fluentcrm.com/privacy-policy
WP Rocket Site performance caching No personal data wp-rocket.me/privacy-policy

We may also disclose information:

  • If required by law, court order, or government authority
  • To protect the safety of our users or the public
  • In connection with a sale or merger of the business, in which case we will notify you and your data will remain subject to this policy

Practitioner Profiles — Public Information

When you create a practitioner profile on ActivePace, the following information becomes publicly visible on your profile page:

  • Your name and credentials
  • Your professional photo and gallery images
  • Your video introduction (if uploaded)
  • Your professional bio and philosophy statement
  • Your cultural approach statement
  • Your cultural background, heritage, and languages (as you have entered them)
  • Your specializations and services
  • Your session types and availability windows
  • Your session pricing
  • Your city and province
  • Your website URL and social media links (if you choose to add them)
  • Your wellness activities
  • Your recommended facilities

What is not publicly visible:

  • Your personal email address (messages are routed through the platform)
  • Your personal phone number (unless you choose to display it)
  • Your full street address (only city and province are shown)
  • Your payment information
  • Your login credentials

You can edit or remove any publicly visible information at any time by logging into your account and updating your profile.


Data Retention

Data type Retention period
Active practitioner profiles For as long as the subscription is active
Deactivated practitioner profiles 90 days after cancellation, then permanently deleted
Messages sent through the platform 12 months, then permanently deleted
Payment records 7 years (required by Canadian tax law)
Analytics data (anonymised) 26 months
Server access logs 90 days
Account registration data Duration of account + 90 days after deletion

Your Rights Under PIPEDA

As a Canadian resident, you have the following rights regarding your personal information:

Right to access: You can request a copy of all personal information we hold about you. We will respond within 30 days.

Right to correct: If any information we hold is inaccurate or incomplete, you can request that we correct it. You can also update most information directly in your account settings.

Right to withdraw consent: You can withdraw consent for us to use your information at any time. This may mean we can no longer provide the service to you.

Right to delete: You can request that we delete your account and all associated personal information. We will do so within 30 days, subject to data we are legally required to retain.

Right to know: You can ask what personal information we hold about you, why we hold it, and who we have shared it with.

To exercise any of these rights, email us at info@activepace.ca with the subject line “Privacy Request.” We will respond within 30 days. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.


Data Security

We take reasonable technical and organisational measures to protect your personal information:

  • All data is transmitted over HTTPS (SSL/TLS encryption)
  • Our hosting provider (Rebel.com) operates data centres with physical and network security controls
  • Imunify360 firewall and malware protection is active on our servers
  • WordPress admin access requires two-factor authentication
  • Passwords are hashed using industry-standard methods — we cannot see your password
  • Payment data is handled entirely by Stripe and never touches our servers

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we will notify you promptly if we become aware of a breach that affects your personal data.


Children’s Privacy

ActivePace is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at info@activepace.ca and we will delete it promptly.


Changes to This Policy

We may update this policy from time to time. When we make significant changes, we will:

  • Update the “Last updated” date at the top of this page
  • Post a notice on the homepage for 30 days
  • Send an email notification to registered practitioners

Continued use of ActivePace after a policy update constitutes acceptance of the updated terms.


Contact Us

If you have questions, concerns, or requests about your privacy:

ActivePace / Culturis.ca
Email: info@activepace.ca
Website: activepace.ca

Office of the Privacy Commissioner of Canada
30 Victoria Street, Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376
priv.gc.ca


This Privacy Policy was prepared in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), S.C. 2000, c. 5, and is effective as of the date shown above.