Privacy Policy

Magalie's Swim School(“we,” “us,” “our”) operates this studio booking, registration, and class management platform. We are committed to protecting the privacy of families, dancers, and visitors to our service.

Contact us at magaliesswimschool@gmail.com, by phone at , or in writing at .

• Account information: name, email, phone, postal address.
• Swimmer information: name, date of birth, medical and allergy notes (when provided), class enrollment history, attendance.
• Payment information: we do not store credit card numbers. Card data is processed by Stripe, our payment processor. We keep a reference to each charge (a Stripe PaymentIntent ID) and the amount, date, and status of each invoice.
• Communications: records of emails sent, absences reported, waiver acceptances, and customer-service messages.
• Technical data: IP address at sign-in (for audit and anti-abuse), browser type, and pages visited.

• Register swimmers, process payments, issue receipts, and deliver classes.
• Send operational emails — registration confirmations, receipts, cancellations, waitlist offers, password resets, and important safety notices. These are required for your account and cannot be unsubscribed from.
• Send marketing emails, newsletters, and announcements. You can unsubscribe from these at any time using the unsubscribe link in any marketing email, or from your dashboard's communication preferences page.
• Maintain the health and safety of our classes (sharing medical notes with the teaching team only).
• Improve the service, respond to inquiries, and comply with legal obligations.

• Stripe — to process payments. See stripe.com/privacy.
• Our email provider — for transactional and marketing email delivery.
• Our teaching and administrative staff — on a need-to-know basis.
• Law enforcement or regulators — only when legally required.

We do not sell your personal information, and we do not share it with advertisers.

Student records (name, date of birth, medical notes, attendance) are collected from, and under the direction of, the student's parent or legal guardian. We apply the minimum collection principle: we only collect student information that is necessary for instruction and safety. Parents can view, edit, or request deletion of their child's records at any time by contacting us.

Active account data is retained while you have an account with us. After an account is archived (by you or by us), we keep a minimal record for legal, tax, and safety compliance — typically 7 years for financial records (CRA requirement). Audit-log entries are retained for 90 days. Marketing unsubscribe preferences are retained permanently as required by CASL.

Under Canadian privacy law (PIPEDA) you have the right to:

• See what personal information we hold about you or anyone in your household.
• Ask us to correct incorrect information.
• Ask us to delete your account and its personal information (subject to legal retention requirements).
• Unsubscribe from marketing email at any time.
• Complain to the Office of the Privacy Commissioner of Canada if you believe we have mishandled your data.

Send requests to magaliesswimschool@gmail.com. We respond to privacy requests within 30 days.

We use HTTPS in transit, industry-standard password hashing, and role-based access controls in the admin interface. Payment card data is never stored on our servers — Stripe handles this under PCI-DSS. No system is perfectly secure; if you think your account has been compromised, contact us immediately.

We may update this policy from time to time. Material changes will be announced to account holders by email. The “last updated” date at the top of this page always reflects the current version.