Privacy Policy

M PERFORM provides online health and performance coaching from British Columbia, Canada, to clients worldwide. This policy explains what personal information we collect through marcusmackay.co, why we collect it, who else handles it, and what rights you have.

We’ve written it in plain language deliberately. If anything here is unclear, ask us.

Contact: coach@marcusmackay.co Location: British Columbia, Canada

1. What we collect

Information you give us
When you complete an application or enquiry form, you provide:

• Always: first name, last name, email address
• Depending on the form: phone number, company name, your role
• On coaching applications: your health and fitness goals, what you’re able to invest, when you’d like to start, and how you heard about us
• On speaking enquiries: type of engagement, event date, budget range, and any details you add

Some of this — particularly what you tell us about your health and your goals — is sensitive. We treat it accordingly. It is used to assess whether coaching is a good fit and to reply to you. It is never sold, never shared for advertising, and never used to build an advertising profile.

Information collected automatically
Very little, and none of it identifies you.
We use Burst Statistics, which runs on our own server and records anonymous, aggregated visit data — pages viewed, approximate region, device type. It sets no cookies, does not store IP addresses, and cannot identify individuals.
Our host and security plugin keep short-term server and security logs, which include IP addresses, for the purpose of keeping the site running and protecting it from attack.

What we do not do
We do not use advertising cookies, tracking pixels, Google Analytics, or any third-party script that follows you across other websites. See our Cookie Policy.

2. Why we’re allowed to use it

Under the GDPR, and equivalently under Canadian law:
What, Why we may use it

• Replying to your application or enquiry. Steps taken at your request before entering a contract (Art. 6(1)(b))
• Following up on an enquiry you started. Our legitimate interest in responding to potential clients (Art. 6(1)(f))
• Health and goal information you provide. Your explicit consent, given by choosing to send it to us (Art. 9(2)(a))
• Site security and server logs. Our legitimate interest in keeping the site safe (Art. 6(1)(f))

You are never required to give us any of this. Not completing a form simply means we can’t respond.

3. Who else handles your information

We use a small number of service providers. Each one only receives what it needs.
Provider, What it does, What it receives, Where.

• Hostinger. Website hosting. The website and its database, including stored form submissions. See note below.
• Make.com. Connects our forms to our CRM. Name, email, phone or company name from form submissions. United States.
• HubSpot. Customer relationship management. Name, email, phone or company name. United States.
• Google (Gmail). Delivers our notification emails. The contents of form notification emails. United States.
• Google Drive. Encrypted website backups. Backup copies of the site database. United States.
• Wordfence. Website security. IP addresses, for threat detection. United States.
• Burst Statistics. Visitor statistics. Nothing identifying — runs on our own server. Our server.

We do not sell personal information, and we do not share it with advertisers or data brokers.

International transfers
We are based in Canada. Several of the providers above are based in the United States, so information you send us may be stored or processed there.
If you are in the UK, the EEA or Switzerland, this means your information may be transferred outside your home country. These transfers rely on the providers’ own standard contractual clauses and equivalent safeguards. You can ask us for details.

4. How long we keep it

Information. Kept for.

• Enquiries and applications that don’t become clients. 24 months, then deleted.
• Client records. For the duration of coaching and as long as required afterwards for tax and legal purposes.
• Website backups. Rotated regularly; older backups are overwritten.
• Security and server logs. Short-term only.

You can ask us to delete your information sooner — see below.

5. Your rights

Wherever you live, you can ask us to:

• Tell you what information we hold about you
• Correct anything that’s wrong
• Delete it
• Stop using it, or restrict how we use it
• Send you a copy in a portable format
• Object to us using it for a particular purpose

Email coach@marcusmackay.co and we will respond within 30 days. We won’t charge you, and we won’t make it difficult.
If you’re in the EEA or UK, you also have the right to complain to your national data protection authority.
If you’re in Canada, you may complain to the Office of the Privacy Commissioner of Canada, or — since we operate from British Columbia — to the Office of the Information and Privacy Commissioner for British Columbia. This site is handled in line with PIPEDA and British Columbia’s Personal Information Protection Act.

6. Security

The site is served over HTTPS. Access to the WordPress administration area is restricted and protected by a security plugin. Backups are stored in an access-controlled account.
No system is perfectly secure, and we won’t claim otherwise. If a breach ever affected your information, we would tell you and the relevant authority as the law requires.

7. Children

This site and our coaching services are intended for adults. We don’t knowingly collect information from anyone under 16. If you believe a child has sent us information, contact us and we’ll delete it.

8. Changes

If we change how we handle personal information, we’ll update this page and change the date at the top. Material changes will be made clear rather than slipped in quietly.

9. Contact

coach@marcusmackay.co M PERFORM — British Columbia, Canada