Privacy Policy
Privacy Policy (SHAB)
Last updated: February 1, 2026
This Privacy Policy explains how SHAB (“we”, “us”) collects, uses, discloses, and protects personal information when you interact with us—on our website, through forms, by booking classes/private sessions, in-studio, or via our mobile app.
We operate from our studio at 345 Rue de la Gauchetière Ouest, Montréal, Québec and can be reached at info@shab.studio and (438) 524-1454.
1) Person in charge of personal information (Privacy Officer)
The person exercising the highest authority in the enterprise is responsible for protecting personal information and may delegate that function in writing.
Privacy Officer: Jean Ghattas, President
Email: info@shab.studio
Phone: (438) 524-1454
Address: 345 Rue de la Gauchetière Ouest, Montréal, QC
2) What personal information we collect
Depending on how you interact with us, we may collect:
A. Identity & contact information
Name, email address, phone number, preferred language/contact method
B. Booking, membership & service information
Classes you book/attend, private sessions requested, schedule preferences, account identifiers, communications with our team
C. Intake information you choose to provide
Fitness goals, training history, injury/limitations information, lifestyle information relevant to coaching (this may be sensitive)
D. Purchases and transaction details
Purchase history and receipts/confirmation details (payment card details are typically handled by payment processors, not stored by us in full)
E. Technical and website usage information
IP address, device/browser details, pages visited, and similar analytics data (often through cookies/pixels)
F. Photos/video (when applicable)
If you participate in photo/video content (e.g., testimonials or studio content), we process that media based on your consent and any release you sign.
3) How we collect information
We collect personal information when you:
Submit a form (e.g., consultation forms or partnership inquiries)
Book a class or private session, or communicate with us about services
Use our mobile app (powered by BSPORT)
Visit our website (which uses third-party infrastructure such as assets delivered via Squarespace-hosted CDNs)
4) Why we use your information
We use personal information to:
Deliver our services (group classes and private sessions such as calisthenics, strength & conditioning, bootcamps, yoga, Pilates, and reformer Pilates)
Schedule and manage bookings, waitlists, reminders, and attendance
Provide consultations (including free consultations where offered)
Respond to questions and provide client support
Improve our operations, programming, and client experience
Send service messages (e.g., booking confirmations, operational updates)
With consent, send marketing communications and run advertising/retargeting (for example via Meta Platforms, Inc. lead forms/ads if you contact us that way)
Protect against fraud, misuse, and security incidents, and comply with legal obligations
5) Consent and your choices
We generally collect, use, and disclose personal information with your consent (express or implied, depending on the context).
You can withdraw consent at any time, subject to legal/contractual restrictions (e.g., we may still need to keep certain records for legal/accounting reasons).
You can unsubscribe from marketing emails using the link in our messages (if applicable).
SMS consent (how it’s obtained and used)
If you choose to receive SMS/text messages from SHAB, we obtain your consent when you explicitly opt in, such as by checking an SMS consent box on a website or lead form, submitting a booking/consultation form that includes SMS opt-in language, opting in through our mobile app, or otherwise confirming you want to receive texts from us. We may also retain records of your opt-in as required by our messaging providers or applicable rules.
If you opt in, we may use your phone number to send you:
Transactional/service messages (e.g., booking confirmations, reminders, waitlist notices, schedule changes, and important service updates)
Customer support messages (responses to your questions)
Marketing/promotional messages (only where you have consented)
You can opt out of SMS at any time by replying STOP (or following any instructions in the message). For help, reply HELP. Message and data rates may apply. SMS consent is not a condition of purchase.
6) Cookies and similar technologies
We may use cookies/pixels and similar tools to:
ensure the site works properly,
understand site performance (analytics),
support advertising and measurement.
You can control cookies through your browser settings. Blocking certain cookies may affect site functionality.
7) Who we share information with
We may share personal information with trusted service providers that help us operate, such as:
Booking/account tools and mobile app services (including BSPORT)
Payment processors (to process purchases)
Website hosting and analytics providers
Communication tools (email/SMS/CRM) used for confirmations and follow-ups
Professional advisors (legal/accounting) when necessary
We do not sell your personal information in exchange for money.
Phone numbers (sharing and selling)
We do not sell phone numbers or SMS consent data, and we do not share phone numbers for others’ independent marketing purposes. We may share phone numbers only with service providers that help us send communications or manage bookings (such as SMS/CRM/booking platforms), strictly to deliver messages and services on our behalf.
8) Transfers outside Québec/Canada
Some service providers may store or process personal information outside Québec/Canada. For example, BSPORT lists a business address in France, which can indicate cross-border processing depending on the service configuration.
When information is communicated outside Québec, we take reasonable steps to ensure it receives appropriate protection.
9) Retention
We keep personal information only as long as needed for the purposes described above, and as required by applicable laws (e.g., financial/transaction records). We then securely destroy, delete, or anonymize it.
10) Security
We maintain safeguards appropriate to the sensitivity of the information (administrative, technical, and physical). For example, app listings indicate encryption in transit and the ability to request deletion (for the app environment), although features may vary by use.
No method of transmission or storage is completely secure, but we work to protect your information.
11) Confidentiality incidents (privacy breaches)
A confidentiality incident can include unauthorized access, use, disclosure, or loss of personal information. If an incident presents a risk of serious injury, we will notify affected individuals and the relevant regulator as required, and we keep a register of incidents.
(If federal private-sector breach rules apply, reporting/notification and record-keeping obligations may also apply when there is a “real risk of significant harm.”)
12) Your rights (access, correction, withdrawal)
You may request:
Access to the personal information we hold about you
Correction of inaccurate or incomplete information
Withdrawal of consent (where applicable)
Submit requests to the Privacy Officer (Section 1). If your request relates to the mobile app, app listings also indicate you can request deletion of app data (where applicable).
13) Children and minors
Our services and app are not intended for children to use independently without appropriate consent. The iOS app listing shows an age rating of 16+. If we ever knowingly collect personal information from a minor where parental/tutor consent is required, we will handle it accordingly.
14) Updates to this policy
We may update this Privacy Policy from time to time. We will post the updated version and change the “Last updated” date.
15) Contact
Questions, requests, or complaints:
Privacy Officer (SHAB)
345 Rue de la Gauchetière Ouest, Montréal, QC
info@shab.studio | (438) 524-1454