Privacy Policy

This policy covers ironbarfitness.ca, the website of Iron Bar Fitness at 134 Government Road, Weyburn, SK. It says what we collect through the site, why, who handles it and how long we keep it.

When you contact us

The contact form asks for your name, email, phone number and your message. It is emailed to the gym so we can reply. To stop the form being flooded, the site keeps a note of the IP address each message came from.

When you sign up for a membership

The pre-authorized debit sign up asks for your name, email, phone number if you give it, the name on your bank account, your bank's institution, transit and account numbers, and your typed name as your signature. Your institution, transit and account numbers are encrypted before they are stored. Gym staff can only open them from a signed-in staff dashboard, to set up your debit with the bank.

Your bank numbers are erased once staff have set up your debit, if the sign up is cancelled, or automatically if it hasn't been set up within 14 days of signing. Your name, contact details, signature and the date you signed are kept as the record that you authorized the debit. When you sign up, the gym gets a text message and an email with your name, membership and contact details so staff can follow up. The site also keeps a note of the IP address each sign up came from, to stop repeated submissions.

Your first payment is taken on Mindbody, which opens in a new tab and is covered by Mindbody's own privacy policy.

When you shop

The shop runs on Shopify. Your cart is kept by Shopify, and your browser remembers which cart is yours. Checkout, payment and delivery details are handled by Shopify on its checkout pages, so your card number never reaches us, and Shopify's privacy policy covers them.

Analytics, only if you allow it

If you allow analytics in the cookie notice, Google Analytics and Vercel Analytics record which pages are visited and roughly where visitors come from, so we can see how the site is used. Google Analytics sets its own cookies to do that. Both stay off until you allow them, and you can turn them off again at any time.

Error reporting

When a page on this site breaks, our error reporting service, Sentry, receives a report with the page address, your browser and device type and what went wrong, so the problem can be fixed. Only when something breaks, Sentry also keeps a masked replay of how the page behaved just before. In that replay every word on the page and everything you type is hidden and images are blocked, so it shows the layout and clicks and not what you read or wrote. Sentry keeps these reports for as long as its service keeps them, then deletes them.

Who handles it

Propel Digital Solutions builds and runs this website for us. The site is hosted by Vercel and stores sign ups and messages in Supabase. Emails go through Resend and text messages through Twilio. The shop runs on Shopify, error reports go to Sentry, and analytics, if you allow it, goes to Google and Vercel. Several of these services store data in the United States, so your information may be processed outside Canada and be subject to the laws there. We don't sell your information.

How long we keep it

Bank numbers are erased as described above. Everything else is kept only as long as we need it for the reason you gave it to us and to keep the records the law asks for, then deleted.

Your choices and questions

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it, except records the law requires us to keep. For any question about privacy, or to make a request, email ironbarfit@gmail.com or call (306) 842-6164. The cookie policy lists what the site stores in your browser. If we change this policy, the new version goes on this page with a new date at the top.