Privacy policy

This site and its client portal collect information about gymnasts, many of whom are minors. Here is exactly what is collected, why, where it is stored, for how long, and how to have it erased.

01 Who is responsible

Marie-Laurence Deschênes, choreographer, is the person responsible for the protection of personal information for this site and its client portal. Any question, or request for access, correction or withdrawal is handled directly with her, at the address given at the bottom of this page.

02 What is collected

Through the request form on the public site — the name of the person writing, their email address, the gymnast's name and level, and the message itself. This information is used only to answer the request.

Through the client portal, once an agreement is in place:

• the name of the parent or account holder, their email address and phone number;
• the gymnast's name, club, competition level and season;
• scheduled sessions, message exchanges with Marie-Laurence, and invoices;
• reference videos of the routines and music files uploaded for the gymnast.

No banking information is collected: payments are settled outside the site. No profiling, no advertising, no advertising trackers, and nothing is ever sold to anyone.

03 Consent, and the case of minors

04 What it is used for

The information is used only to create the choreography, schedule and confirm sessions, communicate with the family, deliver the routine's videos and music, and invoice the service provided. It is used for no other purpose.

Automatic reminders. When this option is turned on, the portal sends an email reminder on its own the day before a confirmed session. The reminder contains the date, time, apparatus and location of the session — nothing else. There is no open tracking, no tracking pixel, and no read receipt. A family that would rather not receive them simply says so by email, and they are turned off for that file.

05 Who has access

Marie-Laurence Deschênes has access to all files. One other person has access: the technical administrator who maintains the platform and keeps it running, bound by the same duty of confidentiality, and whose access serves that support purpose only. No one else, at any time. The list of people holding this access is kept up to date in the system and can be provided on request.

Each family can access only its own file: this is enforced by the database itself, not merely by what the site displays.

People you designate. A family may ask that one or more people of its choosing — a second parent, a coach at the centre, a club manager — be copied on communications. Those people then receive messages and session information, reminders included. They never receive invoices, videos, or any file from the record: this limit is enforced by the server, not by what the site displays, so it cannot be worked around from a browser. The list of these people is visible in the file, and the family may remove any of them at any time.

Information is hosted with Supabase, on servers located in Canada (Montreal and Toronto region), and the site is delivered by Vercel.

Portal emails — the sign-in link, the invitation, messages and session reminders — are delivered by Resend, whose servers are located in the United States. Only the recipient's email address and the message content pass through it: no videos, no files, no athlete data. Nothing is retained there beyond the technical delivery window.

Every message sent leaves a record in an internal log — date, recipient, people copied, subject and content — so that it is always clear what was communicated, to whom, and when. This log is readable only by the people named above, and follows the same retention period as the file.

No information is shared with third parties for commercial purposes.

06 How it is protected

• Portal sign-in by single-use link sent by email: no password to remember, lose or have stolen.
• Access by invitation only — it is not possible to create an account yourself.
• Videos and files are held in a private space, reachable only through a temporary link valid for a few minutes, generated for the signed-in person.
• All communications are encrypted (HTTPS).

07 How long it is kept

• Public form requests that led to nothing: erased no later than 12 months after being received.
• Client files, videos and music: kept for the duration of the business relationship, then 24 months after the last session — the time a routine serves two competition seasons. They are then deleted.
• Invoices: kept for as long as applicable tax and accounting obligations require.

A family may request earlier deletion at any time.

08 Your rights

Any person concerned — or the parent of a minor gymnast — may, free of charge:

• consult the information held about them;
• have corrected any inaccurate or incomplete information;
• withdraw consent and request deletion of the file and the videos;
• receive a copy of the information provided, in a structured, commonly used technological format (portability).

An answer is given within a maximum of 30 days. In case of disagreement, a complaint may be filed with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

09 Cookies and visitor statistics

No advertising cookies, no trackers, and no Google or social-network tools are used on this site. Typefaces and technical libraries are served by the site itself: when you view these pages, your browser contacts no company other than the site's host.

The public site measures its traffic using its host's statistics tool, Vercel Web Analytics, chosen because it works without cookies and without identifying anyone. What it records is limited to aggregate data: pages viewed, the site a visit came from, country, device type and browser. No IP address is kept and no visitor profile is built: these statistics cannot tell who visited the site. They serve only to show which pages are useful.

These measurements apply to the public pages only. The client portal and the dashboard — the only places holding information about gymnasts — are not measured at all.

The portal keeps in the browser a session token strictly necessary to keep the person signed in; it disappears on sign-out.

10 Confidentiality incident

Should an incident present a risk of serious injury, the persons concerned and the Commission d'accès à l'information are notified promptly, and the incident is recorded in a register, as the law requires.

11 Changes

Any change to this policy is published on this page, with an updated date. Families registered on the portal are notified by email if the change is significant.