Privacy Policy

This Privacy Policy explains how Spencer Cao Boxing (sole proprietorship) (“we,” “us,” “our”) collects, uses, and shares personal information.

  1. What we collect

  • Contact and identity: name, email, phone, emergency contact.

  • Training data: session bookings, attendance, notes/recaps, goals.

  • Transaction data: amounts, dates, last 4 digits (processors hold full card data).

  • Technical data: device, IP, cookies/pixels (analytics/ads).

  • Media (optional): photo/video/audio if you opt in.

  1. How we use it

  • Deliver services, schedule sessions, send reminders.

  • Process payments, deposits, renewals (28‑day billing).

  • Track progress and provide recaps.

  • Customer support, safety, and compliance.

  • Analytics and advertising (performance/retargeting).

  • Legal, security, and fraud prevention.

  1. Lawful basis (BC PIPA/PIPEDA)

  • Your consent (forms, e‑sign, SMS/email opt‑ins).

  • Contract performance (coaching, billing).

  • Legitimate interests (ops, dunning, safety).

  • Legal obligations (tax, incident records).

  1. Sharing and processors We use trusted processors to run the business:

  • Payments: Stripe, Square, Afterpay (BNPL).

  • CRM/communications: GoHighLevel (including LC Phone/Twilio SMS), Google Workspace/Calendar/Analytics, email/SMS providers.

  • Ads/attribution: Meta (Facebook/Instagram), Google.

  • Links/streaming: Spotify (content links only). We don’t sell personal information. Processors may store data in the U.S. or other countries.

  1. Cookies and tracking We use cookies, Google Analytics, and Meta Pixel to improve services and ads. You can adjust browser settings and ad preferences.

  2. Retention Keep data only as long as needed for service, legal, or safety purposes, then delete or anonymize.

  3. Your rights

  • Access, correct, or delete your info (subject to legal limits).

  • Withdraw consent for marketing at any time.

  • File a complaint with the Office of the Information and Privacy Commissioner for BC (OIPC).

  1. Security We use reasonable administrative, technical, and physical safeguards. No method is 100% secure.

  2. Children Services are for adults and mature teens with guardian consent. We do not knowingly collect data from children under 13.

  3. Contact Privacy questions/requests:

  1. Changes We’ll post updates here with a new effective date. Material changes may be emailed/SMS’d.