EPIX Privacy and Personal Information Protection Policy

At Studio E.P.I.X. inc. (hereinafter “EPIX”), we place great importance on protecting your personal information. This Privacy Policy applies to our website and our mobile app. 1. COLLECTION OF INFORMATION We collect the information necessary to identify you (including your name, date of birth, home address, email address and phone number), as well as payment information (for example, credit card data processed by our payment platform), which you provide to us through the forms on our website, our mobile app or our online platform, or in person at our studio’s front desk, when you create or update your account, make purchases or sign up for our newsletters. 2. USE OF INFORMATION Your information is used to manage your bookings, process your payments, communicate with you and improve your studio experience. This information is accessible to EPIX’s authorized representatives and to certain of our service providers (including our management, booking and payment platform) acting on our behalf and bound by confidentiality obligations. 3. SMS COMMUNICATIONS (A2P 10DLC COMPLIANCE) By providing your mobile phone number, you expressly consent to receive text messages (SMS) from EPIX. These messages include transactional notifications (class confirmations, waitlist alerts) and promotional information. 4. PROTECTION AND NON-SHARING OF SMS DATA No mobile information will be shared with third parties or affiliates for their own marketing or promotional purposes. This includes opt-in data and consent for text messages. This information is only disclosed to certain of our service providers acting on our behalf, who are bound by confidentiality obligations and may not use it for any other purpose. 5. SMS UNSUBSCRIBE You may unsubscribe from SMS at any time by replying “STOP” to any of our messages. Message and data rates may apply depending on your carrier. 6. COOKIES AND BROWSING Our website uses “cookies” to track browsing preferences and improve the use of the site. You can disable them in your browser settings. 7. SECURITY AND RETENTION We use industry-standard practices to maintain the confidentiality of your data. We keep your information for as long as necessary for the purposes for which it was collected or to meet our legal obligations. Once those purposes have been fulfilled, it is securely destroyed or anonymized. We use certain service providers located outside Québec (for example, our management, booking and payment platform). Your information may therefore be disclosed and hosted outside Québec for these purposes. 8. HEALTH AND FITNESS DATA If you choose to enable Workout Metrics and grant permission through Health Connect on Android or Apple Health on iOS, our app accesses health and fitness data, such as heart rate and calories burned, solely to display workout metrics for your classes. This data is accessed and processed on your device. It is not transmitted to, stored, or retained by us or our app provider. We do not sell this data, share it with third parties, or use it for advertising. The uses and restrictions described in this section apply specifically to health and fitness data accessed through this feature. You can revoke the app’s access at any time through the permissions settings in Health Connect or Apple Health. Our use of information received from Health Connect complies with Google’s applicable Health Connect permissions policy, including its Limited Use requirements. 9. YOUR RIGHTS You have the right to access your personal information, have it corrected, withdraw your consent and request its deletion. To exercise these rights or to file a complaint, please contact our person in charge of the protection of personal information at the contact details below. 10. CONTACT The person in charge of the protection of personal information at EPIX is Simon Fortin. If you have any questions about your data, you can contact him at the following address: simon.fortin@epixtraining.com. 11. CHANGES AND EFFECTIVE DATE This policy may be modified from time to time. Any changes will be published on our website and will take effect upon publication. This policy was last updated on [date].