Privacy policy
Effective November 1, 2026 · Website zenoviayoga.com and the Zenovia app
Who we are
Zenovia is a hot yoga studio located at 249, rue Bellehumeur, Gatineau (Québec) J8T 8N8, operated by Zenovia Yoga inc. (NEQ 1182438847). This policy explains which personal information we collect on the website and in the Zenovia app, why, and how you stay in control of it, in accordance with Québec’s Act respecting the protection of personal information in the private sector (Law 25).
The person responsible for the protection of personal information is Mélanie Renaud, President. You can reach her at info@zenoviayoga.com or at the studio’s address.
What we collect, and why
| Information | What it is used for |
|---|---|
| Name, email, password | Create and protect your account, identify you at the front desk, send you emails about your bookings and purchases. Your password is encrypted: no one at the studio can read it. |
| Phone, date of birth | Optional. Reach you if a class is cancelled, check eligibility for a rate (student, 65 and over). |
| Language and email preferences | Write to you in French or English, and respect your choice to receive notification emails and news, or not. |
| Bookings and attendance | Manage spots, the waitlist, late cancellations and the no-show rule; studio attendance statistics. |
| Purchases, receipts and fees | Your passes, credits, receipts and, when applicable, late cancellation fees. The law requires us to keep accounting records for 6 years. |
| Payment card | Renew your membership, pay in the app and at the front desk, and charge the late cancellation fees described in our rules. The card number is entered in Square’s secure form and kept by Square: Zenovia only sees and keeps the brand, the last 4 digits and the expiry date. |
| Signed waiver and contract | Proof that you read and accepted the practice conditions before your first class, with your name and signature. |
| Studio team only | Teachers’ profile photo (shown in the schedule), work schedule and hours worked (payroll). |
| Contact form messages | Answer you. |
We do not sell your information, we do no targeted advertising and the app uses no advertising tracking tools. On your device, it only keeps your sign-in session and your language choice.
Who else has access
At the studio, only the people who need it for their work have access: the front desk sees your member file, teachers see their class lists, management sees sales. We also use these providers, who process information only on our behalf:
- Supabase: database and accounts, on servers located in Canada (Montréal).
- Vercel: hosting of the website and the app.
- Square: payments and saved cards.
- Resend: sending of automatic emails (confirmation, password, spot opened up, receipts).
- Google Workspace: the studio’s mailbox, when you write to us.
- GitHub: encrypted database backups, kept 30 days.
- Google Fonts: the website’s fonts are loaded from Google’s servers, which receive your IP address.
Some of these servers are located outside Québec. Before entrusting them with information, we checked that they offer adequate protection (encryption, restricted access, contractual commitments).
How long we keep it
- Your account: as long as it is active. You can delete it at any time.
- Receipts and sales: 6 years, without your name once the account is deleted.
- Signed waivers: 3 years after your last visit, as proof of consent.
- Contact form messages: 1 year.
- Backups: 30 days.
Your choices and your rights
You can ask to access your information, have it corrected, withdraw a consent or have it deleted. You can also file a complaint with the Commission d’accès à l’information du Québec.
Emails and language: in the app, open Account, then Notifications. There you can stop notification emails, subscribe to or unsubscribe from news, and choose French or English. Emails needed for your account (confirmation, password) are always sent.
Delete your account: in the app, open Account, then My details, and tap “Delete my account” at the bottom of the page. Your name, contact details, cards and upcoming bookings are erased immediately, and you can no longer sign in. Only receipts (without your name), past attendance (for our statistics) and the signed waiver are kept, for the periods listed above. You can also write to us at info@zenoviayoga.com.
Security
Exchanges with the website and the app are encrypted (HTTPS), as are the backups. Each team member has their own access, limited to what they need. In the event of a confidentiality incident presenting a risk of serious harm, we will notify you, as well as the Commission d’accès à l’information.
Children
Accounts are for people aged 14 and over. For anyone under 14, the consent of a parent or guardian is required at the front desk.
Changes
If this policy changes, the new version is published on this page with its effective date. An important change will be announced in the app.