Privacy policy

450 Jiujitsu (“450 Jiujitsu,” “we,” “our”) is committed to protecting your personal information in accordance with Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), Canada's Anti-Spam Legislation (CASL), and the Personal Information Protection and Electronic Documents Act (PIPEDA).

This policy explains what information we collect, why, who we share it with, and what your rights are.

Company name

450 Jiujitsu Inc.

Address

4885 Autoroute 440, Laval, QC H7P 4W6

Quebec Enterprise Number (NEQ)

1178424173

Privacy Officer

Matthieu Ruyssers

Privacy Officer email

info@450jiujitsu.com

Phone

(450) 512-5528

Depending on how you interact with us, we may collect:

• Identity: first name, last name, date of birth, address, phone, email
• Emergency contacts: name and phone number of a relative
• Health information: medical conditions, injuries, restrictions (via the liability waiver form)
• Membership: package type, payment history, class attendance, belt promotion ceremonies
• Payment: last 4 digits of credit card (the full number is never stored by 450 Jiujitsu — it is processed directly by our payment processor)
• Communications: SMS conversations (including with our virtual assistant Riley), emails, phone calls
• Website: IP address, browser, pages visited, analytics data
• Photos and videos: captured during events, only with explicit consent
• Marketing preferences: consent to receive newsletters and promotions

• Manage your membership and provide our services (classes, events, belt promotions)
• Process your payments and issue tax receipts
• Communicate with you (class reminders, schedule changes, invoices)
• Answer your questions through our virtual SMS assistant (Riley) or other channels
• Meet our legal obligations (tax records, liability waivers)
• Improve our services (anonymized attendance analysis, feedback)
• With your explicit consent, send you marketing communications

We never sell your information. We share it only with service providers (processors) who help us operate:

• Membership management platform: Keido (formerly PushPress) — member data, attendance, subscriptions
• Payment processor: Stripe — card transactions
• Communication services: Google Workspace (email), Twilio (SMS)
• Artificial intelligence services: Agence Alivro Inc. (Quebec) — operates our virtual assistant Riley. Technical subprocessors: Anthropic PBC (U.S. — Claude AI model), Supabase (Canada — database), Railway (Canada — hosting), Langfuse (U.S. — observability)
• Web analytics: Google Analytics (U.S.)
• Advertising: Meta Platforms (U.S. — if you arrive through a Facebook or Instagram ad)
• Website hosting: Vercel (U.S.)

We have signed data processing agreements (DPAs) with each of these providers.

Some of your information is processed outside Quebec, primarily in the United States:

• AI services (Anthropic, Langfuse, Twilio): U.S.
• Web analytics and advertising (Google, Meta): U.S.
• Web hosting (Vercel): U.S.

We have assessed the risks associated with these transfers (Privacy Impact Assessment — PIA) and implemented contractual and technical measures to protect your information in accordance with Law 25. A copy of this assessment is available on request from our Privacy Officer.

Beyond these periods, your information is deleted or anonymized.

Under Law 25, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your information (subject to legal retention obligations — e.g., tax records)
• Receive your information in a structured, commonly used format (portability)
• Withdraw your consent to marketing communications at any time
• Be informed of any automated decision based solely on automated processing of your information
• File a complaint with the Commission d'accès à l'information du Québec (CAI) if you believe your rights are not being respected: cai.gouv.qc.ca

To exercise any of these rights, contact our Privacy Officer (see Section 14). We will respond within 30 days.

Our virtual SMS assistant Riley uses artificial intelligence to answer your questions. Riley does not make any final decision about you (registration, pricing, class access) — she provides information and routes you to a human for any decision. Any significant decision is made by a human employee.

You can request to speak directly to a human at any time.

Our site uses:

• Essential cookies for site functionality
• Analytics cookies (Google Analytics) to understand site usage
• Advertising cookies (Meta pixel, Google Ads) if you arrive through an ad, to measure effectiveness

You can disable non-essential cookies through your browser settings.

We protect your information through:

• Encryption in transit (HTTPS) and at rest (encrypted databases)
• Access limited to authorized personnel under the principle of least privilege
• Two-factor authentication on internal systems
• Regular security reviews of our providers
• Access logs and audit trails for sensitive changes

In the event of a privacy incident that may pose a serious risk, we will notify you and the CAI within 72 hours, in accordance with Law 25.

We send marketing communications (newsletters, promotions) only with your explicit or implied consent. Every message includes:

• Clear identification of the sender
• A functional unsubscribe mechanism (one-click)
• Our contact information

To unsubscribe: click the link in any marketing email, or reply “STOP” to a marketing SMS.

We may update this policy. The date at the top of the page indicates the last revision. Significant changes will be communicated to you by email or through a notice on your next visit.

Privacy Officer:

Name

Matthieu Ruyssers

Email

info@450jiujitsu.com

Mailing address

4885 Autoroute 440, Laval, QC H7P 4W6

Phone

(450) 512-5528

You also have the right to file a complaint with the Commission d'accès à l'information du Québec (CAI): cai.gouv.qc.ca