Privacy Policy
We collect health information about you. This explains exactly what, why, where it goes, and what control you have.
Fuller Health and Performance Inc. (operating as Fuller Health and Performance)
Last updated: 29 August 2026
We collect health information about you. This policy explains exactly what, why, where it goes, and what control you have. Plain language on purpose.
1. Who we are
Fuller Health and Performance Inc.
Stettler, Alberta, Canada
Privacy contact: Jonathan Fuller — jonathan.fullerhealth@gmail.com
We are subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, as an Alberta organization, Alberta's Personal Information Protection Act (PIPA).
2. What we collect
If you only visit the website
- Pages viewed, approximate region, browser and device type, referring site
- Anything you type into a form and submit
If you book a call
- Name, email, phone, and whatever you write in the booking form
If you become a client
This is the sensitive category. We collect:
Identity and contact — name, email, phone, city, date of birth
Health information — injury history, surgical history, current pain and symptoms, medical conditions, medications, medical clearance documents, pregnancy status if you disclose it
Training information — training history, current activity, strength baselines, equipment, schedule, goals
Lifestyle information — sleep, stress, step count, occupation, general eating patterns
Ongoing information — weekly check-ins, session logs, adherence, subjective feedback, messages you send us
Optional information — body weight, measurements, progress photos, technique videos, wearable data. All optional. Coaching works without any of them and declining costs you nothing.
Payment information — handled entirely by a third-party payment provider. That provider, not us, holds your card details. We see your name, email, which plan you bought and whether it is paid. We never see or store your card number. We are not taking online card payments yet; we will name the provider here, and tell you what appears on your card statement, before you are ever charged.
The Practice app — if you use our habit app, we store the practice you chose, your daily check-ins, your weekly reflections and any measurements you enter. Your access link is the only credential; anyone with that link can see your entries, so treat it like a password and tell us if you think it has got out.
3. Why we collect it
| Purpose | Why we need it |
|---|---|
| Writing a safe, individualized program | The core of the service. Without injury and health history we cannot program safely. |
| Adjusting your program each week | Check-ins drive the adjustments. |
| Communicating with you | Coaching is a conversation. |
| Screening for referral | To recognize when your needs exceed coaching. |
| Billing | To take payment and keep records. |
| Legal and insurance records | Signed consents and waivers must be retained. |
| Improving the service | Only ever in aggregate, never identifiable. |
We do not sell your information. We do not rent it. We do not trade it. Ever.
We do not use your health information for marketing.
4. Legal basis — your consent
We collect and use your information because you consent to it.
- Signing the intake and consent documents is your consent for the health information.
- You may withdraw consent at any time by emailing jonathan.fullerhealth@gmail.com.
- Withdrawing consent for health information means we can no longer coach you safely, so coaching would end. We'll tell you that clearly before acting on it.
- Withdrawal doesn't apply retroactively to what we already lawfully did, and it doesn't erase records we're required to retain.
5. Who we share it with
We share the minimum necessary with these service providers:
| Provider | What they get | Where the data lives |
|---|---|---|
| Supabase (database behind The Practice app) | Name, email, your practices, check-ins, reflections and measurements | Canada (Central) |
| Cloudflare (website and app hosting) | Page requests, IP address, anything you submit through a form | Global edge network |
| Google Workspace (email, calendar, docs) | Email correspondence, booking details | United States |
| Documenso | Signed consent, waiver and agreement | European Union |
| Cloud hosting and backup | Records as stored | Canada / United States |
Each is bound by its own privacy commitments and processes data on our instructions.
Two providers are not appointed yet: the coaching app that will hold your
programme, check-ins and messages, and the payment provider that will hold your
card details. Neither exists today and neither holds any of your data. We will
name both in this table, and tell you before any of your information reaches
them.
We may also disclose your information without your consent only where:
- The law requires it — a court order, subpoena, or lawful request
- There is a serious and imminent risk to your safety or someone else's
- It is necessary to establish or defend a legal claim
- The business is sold or merged, in which case you'd be notified and the buyer would be bound by this policy
6. Cross-border transfer
Some providers store data outside Canada, primarily in the United States. While there, the information may be accessible to foreign courts and law enforcement under the laws of that country.
By using the service you consent to this transfer. If that is not acceptable to you, tell us before signing up and we'll discuss what's possible.
7. How we protect it
- Encryption in transit and at rest with all major providers
- Multi-factor authentication on every account holding client data
- Access limited to Jonathan Fuller alone; no employees or contractors have access as of 29 August 2026
- Health information kept in the coaching app, not in loose email threads or spreadsheets
- Devices are password-protected and encrypted
- Regular backups
No system is perfectly secure. If a breach occurs that creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by law, without unreasonable delay.
8. How long we keep it
| Record | Kept for |
|---|---|
| Signed consent, waiver, agreement | 7 years after coaching ends (insurance and legal) |
| Health and training records | 7 years after coaching ends |
| Messages and check-ins | 7 years after coaching ends |
| Payment and tax records | 6 years (Canada Revenue Agency requirement) |
| Progress photos and videos | Deleted on request at any time, otherwise 2 years after coaching ends |
| Enquiries that never became clients | 12 months |
| Website analytics | 26 months |
After the retention period, records are securely destroyed.
9. Your rights
You can, at any time:
Access it — ask for a copy of everything we hold about you. Free, within 30 days.
Correct it — have anything inaccurate fixed.
Withdraw consent — see Section 4.
Delete it — ask us to delete what we hold. We'll delete everything except records we're legally required to keep, and we'll tell you specifically what's being retained and why.
Get it in a portable format — a machine-readable export of your program and records.
Complain — to us first, at jonathan.fullerhealth@gmail.com. If you're not satisfied:
- Office of the Privacy Commissioner of Canada — priv.gc.ca — 1-800-282-1376
- Office of the Information and Privacy Commissioner of Alberta — oipc.ab.ca — 1-888-878-4044
To exercise any right, email jonathan.fullerhealth@gmail.com. We may ask you to verify your identity first.
10. Cookies
The website uses only what's needed to make it work, plus basic analytics that tell us which pages people read. We do not run advertising trackers or sell audience data. Block cookies in your browser if you prefer; the site still works.
11. Children
This service is for adults 18 and over. We do not knowingly collect information from anyone under 18. If we learn we have, we delete it.
12. Changes to this policy
If we change it, the date at the top changes. For any change that materially affects how we handle your health information, we will email you before it takes effect.
13. Contact
Jonathan Fuller
Fuller Health and Performance Inc.
Stettler, Alberta, Canada
jonathan.fullerhealth@gmail.com
We respond to privacy requests within 30 days.