Privacy Policy

1. Who we are

ZerOne Performance Inc. ("ZerOne," "we," "us," or "our") operates the website at zerone.ca and delivers services through two brands under one roof at West Edmonton Mall: Hockeyology (hockey development and training) and Athleticare (a multidisciplinary health clinic). Skate Lab is the skate-services offering sold through Hockeyology.

We are committed to protecting the privacy of our clients, athletes, patients, and website visitors, and we handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA). Personal health information collected through Athleticare is governed by Alberta’s Health Information Act (HIA) and is described in Section 9.

2. Scope of this policy

This policy describes how we handle personal information collected when you visit our website, create an account, book a service, make a purchase, complete a form or assessment, or otherwise interact with us. It covers both Hockeyology and Athleticare. It does not change the specific rights and protections that apply to your health records under the HIA, which are summarized in Section 9.

3. Information we collect

Information you provide

When you create an account, book a service, make a purchase, complete a form, or contact us, we may collect:

• Name, email address, phone number, and mailing address.
• Date of birth.
• Athlete details (name, date of birth, age group, skill level) when a parent or guardian registers a minor for Hockeyology programs.
• Information you submit through contact forms, assessment questionnaires, applications, or waivers.
• The content of messages you send us by email or through the website.
• Payment details, which are processed by our third-party payment provider and are never stored on our servers (see Section 14).

Information collected automatically

When you use our website, we automatically collect:

• Device and browser information (browser type, operating system, screen size).
• IP address and approximate geographic location.
• Pages viewed, time on page, and how you navigate the site.
• The website or campaign that referred you to us.

Marketing and attribution identifiers

To measure our advertising and understand which campaigns bring people to us, we capture and store marketing identifiers, including campaign tags (UTM parameters), a Google click identifier (gclid), a Meta click identifier (fbclid), Meta browser cookies (_fbp and _fbc), and a Google Analytics client identifier. These are held in your browser and recorded in our own systems alongside the related enquiry or order (see Section 7).

4. How we use your information

We use personal information to:

• Create and manage your account.
• Process bookings, purchases, payments, and program registrations.
• Deliver the services you request and administer memberships and packages.
• Communicate with you about your account, bookings, schedules, and services.
• Send you news, programs, promotions, and events where you have consented to receive them (see Section 11).
• Measure and improve the performance of our advertising (see Sections 5 and 6).
• Improve our website, services, and customer experience.
• Meet our legal and regulatory obligations and protect the safety and security of our clients, athletes, patients, and staff.

5. Cookies and tracking technologies

Our website uses cookies and similar technologies, which fall into three groups:

• Essential cookies are required for the site to work, including account login, booking, and remembering your cookie choice.
• Analytics cookies help us understand how visitors use the site, through Google Analytics 4.
• Advertising cookies measure the effectiveness of our campaigns and support relevant advertising, through the Meta Pixel and Google Ads.

When you first visit, we show a notice that the site uses cookies. By continuing to use the site you consent to the cookies described here. We remember your acknowledgement so the notice does not appear on every visit. You can withdraw your consent at any time by clearing or blocking cookies in your browser settings, and by using the advertising opt-out tools offered by Google and Meta. Disabling some cookies may affect how parts of the site function.

6. Analytics and advertising measurement

We use Google Analytics 4 and Google Ads, and the Meta Pixel for Facebook and Instagram, to understand site usage and to measure our advertising. To make this measurement accurate, we send conversion events in two ways: from your browser, and directly from our server using Google’s Measurement Protocol and Meta’s Conversions API. Server-side measurement is used because browser-based tracking is often blocked, which would otherwise leave our advertising data incomplete.

When we send an event to Meta from our server, we include technical matching information such as your IP address, browser user agent, click identifiers, and the Meta cookies described above. Any email address used for this matching is irreversibly hashed (using SHA-256) before it is sent, so Meta does not receive your email in readable form. Where permitted, we may also upload offline conversion events to Meta from our own records, for example when an offer is fulfilled at our front desk, so that those conversions are attributed to the right campaign.

You can opt out of personalized advertising using the controls in your Google and Meta accounts and your browser’s cookie settings.

7. Our customer and conversion records

We keep our own secure record of enquiries, assessments, and orders so we can deliver services, fulfill offers, and measure our marketing. Each record is linked to you by email and may include your name, the product or program involved, the amount and date, and the marketing and attribution identifiers described in Section 3. This record is hosted by our database provider (see Section 8).

These records hold marketing and transaction information only. They never contain medical or patient health information, which is handled separately as described in Section 9.

8. Service providers we share information with

We work with trusted service providers who process information on our behalf, under contract, only for the purposes we specify:

• Mindbody - booking, scheduling, and payment processing for Hockeyology.
• TELUS Collaborative Health Record (CHR) - the certified electronic health record where Athleticare patient and health information is collected and stored (see Section 9).
• Supabase - the database that holds our customer and conversion records described in Section 7.
• Vercel - website hosting and delivery.
• Google - website analytics (Google Analytics 4) and advertising measurement (Google Ads).
• Meta - advertising measurement and optimization for Facebook and Instagram.
• Klaviyo - email marketing and customer communications.

Some of these providers are located outside Canada, including in the United States, so your information may be stored or processed outside the province and country and may be subject to the laws of those jurisdictions. We select providers that offer appropriate safeguards for the information they handle.

9. Athleticare health information

Athleticare provides health services that may include physiotherapy, sports medicine, diagnostic imaging, casting, concussion care, and related allied health care. Personal health information collected in the course of providing these services is governed by Alberta’s Health Information Act (HIA) and is collected and stored within TELUS Collaborative Health Record (CHR), a certified electronic health record system.

We do not store any medical or patient health information on the ZerOne website or on our own servers or databases. It resides exclusively within TELUS CHR. Your health information is kept separate from your Hockeyology account, your website activity, and our marketing and conversion records, and it is not used for advertising or shared with advertising platforms.

10. Keeping our brands separate

ZerOne operates more than one brand under one roof, and we keep customer data separated between them. If you are a Hockeyology client, you receive Hockeyology communications. If you are an Athleticare patient, you receive Athleticare communications. We do not combine or cross-market between brand customer lists without your consent.

11. Email and electronic messages

We send commercial electronic messages in accordance with Canada’s Anti-Spam Legislation (CASL). We send marketing messages where we have your consent or another lawful basis to do so, every marketing message includes a way to unsubscribe, and we honour unsubscribe requests promptly. Service messages related to your bookings, account, or care are sent as needed to deliver the services you have requested.

12. Data retention

We retain personal information for as long as needed to provide our services, maintain your account, meet our legal and professional obligations, and resolve disputes. When you ask us to delete your account information, we delete or anonymize it within a reasonable time, subject to legal and contractual requirements. Health records held in TELUS CHR are retained in accordance with the HIA and applicable professional regulatory requirements.

13. Your rights

Under PIPEDA and Alberta’s PIPA, you have the right to:

• Access the personal information we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Withdraw your consent to the collection, use, or disclosure of your personal information, subject to legal or contractual limits.
• Ask us to delete your personal information.
• Make a complaint to the Office of the Privacy Commissioner of Canada or to the Office of the Information and Privacy Commissioner of Alberta.

Requests relating to your Athleticare health information are handled under the HIA. To exercise any of these rights, contact us using the details in Section 16.

14. Security

We use appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or loss. Our website uses encryption (TLS) for data in transit. Payment card details are handled by PCI-compliant payment processors and are never stored on our servers. Health information is held in the certified TELUS CHR environment rather than on our own systems.

15. Children’s privacy

Many Hockeyology programs are designed for minor athletes. When a parent or guardian creates an account and registers a minor, we collect the athlete’s name, date of birth, and other details needed to deliver the program, with the consent of the parent or guardian. We do not knowingly collect personal information directly from children without that consent.

16. Contact us

If you have questions about this policy or our privacy practices, or you want to exercise your rights, contact us:

17. Changes to this policy

We may update this policy from time to time. When we make material changes, we will post the updated policy here with a revised "Last updated" date. Your continued use of our website and services after a change takes effect means you accept the updated policy. You can review the companion Terms of Service at any time.