privacy policy

Privacy Policy

Last Updated: January 19, 2026

At Studio Resistance, we are committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, and disclose your information in compliance with Quebec’s Act respecting the protection of personal information in the private sector (Law 25).

1. Person in Charge of Personal Information (Privacy Officer)

In accordance with Law 25, we have appointed a Privacy Officer to oversee our data protection practices and respond to requests regarding your personal rights.

  • Privacy Officer: Matthieu Massicotte, CEO

  • Email: info@studioresistance.com

  • Address: 1249 Ottawa, Montreal, QC H3C 2B9

2. Personal Information We Collect

We only collect information that is necessary to provide our fitness services and operate our studios.

  • Identity Information: Name, date of birth (for age verification), and contact details (email, phone number, address).

  • Billing Information: Credit card details and transaction history, processed securely through our booking platform.

  • Sensitive Health Data: Physical readiness information or injury waivers required for participation. Because this is health-related, we treat this as sensitive data and apply enhanced security measures to its storage and access.

  • Digital Data: IP address, browser type, and interaction with our website/app.

3. How We Use Your Information & Automated Decisions

We use your information to manage reservations, memberships, and safety.

Automated Decision-Making: We may occasionally use automated systems (provided by our third-party processors) to assist with studio operations, such as managing class waitlists or sending personalized class recommendations based on your attendance history. You have the right to be informed of any such decision made exclusively by automated means and to submit observations to the Privacy Officer regarding these processes.

4. Consent and Cookies

We respect your digital privacy choices:

  • Default Settings: All non-essential tracking technologies (marketing and analytical cookies) are deactivated by default.

  • Activation: You must provide clear, affirmative consent via our cookie banner to activate tracking.

  • Withdrawal: You may withdraw consent at any time by contacting us or adjusting your browser settings.

5. Third-Party Service Providers (Data Processors)

We partner with Momence to manage our booking, scheduling, and payment infrastructure. While Studio Resistance remains the "Data Controller" of your information, we rely on Momence as our Data Processor to perform technical functions.

  • Service Provider Standards: We select partners who demonstrate a commitment to data security and privacy standards that align with Law 25.

  • Data Transfer & Assessment: Because Momence operates on a global infrastructure, your personal information is stored on servers located outside of Quebec (e.g., in the United States). We have conducted a Privacy Impact Assessment to ensure that your information receives an adequate level of protection through their security protocols.

6. Security & Confidentiality Incidents

We implement physical, electronic, and administrative safeguards, including SSL encryption for all transactions.

Incident Notification: In the event of a "confidentiality incident" (such as a data breach) involving your personal information that presents a risk of serious injury, we will notify you and the Commission d'accès à l'information as required by law.

7. Your Rights

Under Quebec law, you have the following rights:

  • Access & Rectification: The right to see and correct your personal data.

  • Withdrawal of Consent: The right to stop the use of your data.

  • Portability: The right to receive your data in a structured, commonly used technological format.

  • De-indexing: The right to request that we stop disseminating your data or remove links to your information.

To exercise these rights, please contact the Privacy Officer listed in Section 1.

8. Data Retention and Destruction

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected or to comply with legal requirements (such as tax or insurance audits).

  • Role of our Data Processor: As our primary database manager, Momence facilitates the storage and eventual deletion of your data. We rely on Momence’s technical deletion protocols to ensure that when a deletion request is made, or when data is no longer required, it is purged from their active systems.

  • Our Commitment: Studio Resistance commits to periodically auditing our database to identify and delete inactive accounts. We make every reasonable effort to ensure that our service providers adhere to the secure destruction or de-identification of data as per our instructions and their internal security policies.

  • Limitations: While we take all reasonable steps to ensure our processors comply with these standards, we acknowledge that the technical execution of data destruction resides within the processor's infrastructure.

9. Privacy of Minors

Studio Resistance does not allow online registration for individuals under 18. Registration for minors (ages 16-17) must be completed in person at our Montreal or Brossard studios with a parent or guardian.

10. Changes to This Policy

We may update this policy to reflect changes in our services or legal obligations. We will notify you of significant changes by updating the "Last Updated" date or via email.