Privacy Policy

This policy explains how Blueprint Athlete Development Ltd. collects, uses, discloses and protects personal information through this website, through Blueprint’s own web applications, and in delivering our programs. It is the primary statement of Blueprint’s privacy practices. We handle personal information in accordance with British Columbia’s Personal Information Protection Act (PIPA). The Blueprint Analysis iOS app is covered by its own separate privacy policy, provided with that app.

• 2.1

  Information you give us. Athlete and guardian names, dates of birth, email addresses, phone numbers, mailing address, emergency contacts, program selections, and information you send us by email or form.

• 2.2

  Health and training information. Injuries, medical conditions, allergies, medications, medical clearances, training history, and performance and training data recorded through our coaching platforms.

• 2.3

  Account information. Where you hold an account in one of our web applications, your login identifier and authentication details. Passwords are stored in hashed form and are not visible to us.

• 2.4

  Billing information. Invoice and payment records. We do not collect or store payment card numbers on this website or in our applications. Card details are handled by QuickBooks Online.

• 2.5

  Site information. Basic technical data recorded by our hosting provider when you visit the site, such as IP address, browser type and the pages requested, kept in standard server logs. We do not currently run any analytics, advertising or tracking product on this website.

To confirm and manage registrations; to deliver coaching, programming and performance monitoring; to keep athletes safe and respond to medical situations; to invoice and maintain accounting records; to operate and secure our web applications; to communicate with clients about their programs; and to run and improve our programs and website.

By registering or using the site you consent to the collection and use described here. Where an athlete is under 19, a parent or guardian provides that consent. You may withdraw consent at any time by contacting us, subject to legal and contractual limits — withdrawing consent for essential information may mean we cannot continue to deliver the program safely.

We use only the cookies needed to make the site work. When you sign in, an authentication cookie keeps you signed in until you sign out. Your shopping cart is stored locally in your own browser and is not sent to us until you check out. We do not use advertising or tracking cookies, and we do not currently run an analytics product on this site. Most browsers let you block or delete cookies, but if you block ours you will not be able to sign in or complete a registration.

We send service messages about programs you or your athlete are enrolled in — booking and registration confirmations, copies of signed waivers, invoices and payment notices, and schedule or safety changes. These are part of delivering the service and are not marketing. Where we send promotional or newsletter email we do so only with your consent, as required by Canada’s Anti-Spam Legislation (CASL); every such message includes an unsubscribe link, and you can withdraw that consent at any time without affecting your enrollment or the service messages above.

• 7.1

  Blueprint builds and operates its own registration, enrollment and invoicing applications. Personal information entered into those applications is held in Blueprint’s own systems and is not made available to any third party except as described below.

• 7.2

  We rely on third-party providers for hosting, storage and specific business functions. These currently include Supabase (database, authentication and file storage, including signed waiver documents), Vercel (website and application hosting), Resend (delivery of transactional email such as confirmations, invoices and waiver copies), Intuit QuickBooks Online (customer records, invoicing and card payment processing), Google Workspace (business email, documents and calendar scheduling), and TrainingPeaks (training plan delivery).

• 7.3

  These providers process information only as needed to provide their service to us, under contract, and are not permitted to use it for their own purposes.

• 7.4

  Some of these providers store or process data on servers located outside Canada. Our database and file storage are hosted in the United States (AWS, US East region), and our hosting, email and accounting providers also operate there. Information stored outside Canada may be accessible to foreign courts and law enforcement under the laws of that country.

We do not sell personal information, and we do not share it for advertising. We disclose it only to our service providers as described above, to medical or emergency personnel where necessary to respond to a medical situation, where you direct or consent to it, and where required by law.

Health information is collected only where needed for safe participation and appropriate programming. It is accessible only to coaching and administrative staff who need it for that purpose, and is not disclosed outside Blueprint without consent except in a medical emergency or where required by law.

Registration for athletes under 19 must be completed by a parent or legal guardian. We do not knowingly collect personal information directly from a child without guardian consent. Guardians may review, correct or request deletion of their child’s information by contacting us. Athlete images are used in accordance with the media consent given at registration, and full names are not published alongside images of minors without separate guardian consent.

We keep personal information only as long as needed for program delivery and for our legal, insurance, tax and accounting obligations, after which it is securely destroyed or anonymized. Signed waivers are legal records: we retain a waiver until seven years after the athlete reaches the age of majority (19 in British Columbia). Invoices and accounting records are kept for the period required by Canadian tax law. Because of these obligations, closing an account does not automatically erase records we are required to keep — where that is the case we restrict or anonymize the record rather than keep it linked to a live account.

We use access controls, authenticated accounts, encrypted connections and reputable service providers to protect personal information. Access is restricted at the record level so that staff see only the information their role requires, and administrator accounts are issued by us rather than self-registered. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a breach of our security safeguards creates a real risk of significant harm to you, we will notify you and report the breach to the Office of the Information and Privacy Commissioner for British Columbia, as required by PIPA, without unreasonable delay. We maintain records of security breaches as required by law.

You may request access to the personal information we hold about you, request corrections, request deletion of your account and the information associated with it, ask questions about this policy, or make a complaint. Email us to make a request and we will verify it before we act on it. Deletion requests are honoured except where we are required to retain a record under section 11, in which case we restrict or anonymize it instead. We will respond within the timelines set out in PIPA. Where you are located outside British Columbia, additional rights may apply under the privacy law of your own jurisdiction, and we will handle your request under that law where it applies. If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia.

We may update this policy. The current version and its date are posted on this page, and material changes are published with a new version number.