Privacy Policy

Your trust is part of the practice. This Privacy Policy explains howMirage Society & Yoga (“Mirage”, “we”, “us”, “our”), operated byBloom Business Consulting Inc. and based in Ajax, Ontario, Canada, collects, uses, shares and protects your personal information when you visit our website, join our mailing list, book through our Ticket Tailor booking system, or attend a class, sound bath, gathering or micro-retreat.

We follow the Personal Information Protection and Electronic Documents Act(PIPEDA) and its ten fair information principles. In plain terms: we collect only what we need, we tell you why, we ask for your consent, and we keep it safe.

Contents

1. Accountability
2. Information we collect
3. How we use your information & your consent
4. When we share information
5. Third-party tools
6. Data security
7. How long we keep information
8. Your rights: access, correction & deletion
9. Cookies & website analytics
10. Minors
11. Changes to this policy
12. Contact us

1. Accountability

Mirage is responsible for the personal information under our control, including information handled on our behalf by the service providers described below. We have designated a Privacy Officer who oversees our compliance with this policy and PIPEDA. You can reach our Privacy Officer at hello@miragesociety.co.

2. Information we collect

Information you give us

• Contact details — your name, email address and, where provided, phone number, when you sign up for The Weekly Mirage Edit, submit a website form, or contact us.
• Booking & account details — the classes, sound baths, gatherings and retreats you book, your attendance history, memberships, passes and preferences, collected through Ticket Tailor.
• Payment information — processed securely by Stripe (directly or through Ticket Tailor). We receive confirmation of payment and limited details such as the card type and last four digits. We never see or store your full card number.
• Health & wellness information — when you complete our waiver or intake questions, you may tell us about injuries, health conditions, pregnancy or other considerations relevant to safe participation, along with an emergency contact. We treat this as sensitive information and collect it only with your express consent.
• Communications — messages you send us by email, social media or website forms, and questions you type into our on-site concierge chat.
• Photos & media — images or video taken at our gatherings, as described in our Participant Release & Waiver.

Information collected automatically

When you visit our website, our hosting and security providers automatically receive standard technical information such as your IP address, browser type, device type, pages visited and the date and time of your visit. We use this to keep the site secure, working properly and to understand, in aggregate, how it is used.

3. How we use your information & your consent

We use your personal information to:

• process bookings, payments, memberships, refunds and cancellations;
• send booking confirmations, reminders, schedule or venue changes and other service messages;
• keep you safe — for example, so instructors can offer modifications and we can reach your emergency contact if needed;
• respond to your questions and requests;
• send The Weekly Mirage Edit, event announcements and offers, only where you have opted in;
• improve our offerings, schedule and website; and
• meet our legal, insurance, tax and accounting obligations.

How we obtain consent

• Express consent — we ask for your clear, affirmative consent (for example, a checkbox you tick yourself) before we collect health information or add you to our marketing emails. Our emails comply with Canada’s Anti-Spam Legislation (CASL) and every one includes an easy unsubscribe link.
• Implied consent — when you book a session, we rely on your implied consent to use your details for that booking and related service messages.

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may limit our ability to provide certain services (for example, we cannot hold a booking without a name and email). To withdraw, unsubscribe from any email or write to hello@miragesociety.co.

We will not use your information for a new purpose without first asking for your consent, unless the law permits or requires it.

4. When we share information

We do not sell, rent or trade your personal information. We share it only:

• with the trusted service providers listed below, who process it on our behalf and only for the purposes we set;
• with an instructor, facilitator or partner venue hosting your session — limited to what they need, such as your name on the attendee list and any health considerations you have asked us to pass on;
• where required or permitted by law — for example, to respond to a valid legal request, protect someone’s safety in an emergency, or with our insurers and professional advisors; and
• in connection with a sale or reorganization of our business, under confidentiality obligations and subject to this policy.

5. Third-party tools

We use a small number of carefully chosen providers to run our business. Each is contractually or by its own terms required to protect your information, and each has its own privacy policy, which we encourage you to review.

Storage outside Canada

Some of these providers store or process information outside Canada, including in the United States and the European Union. While it is there, it is protected by our providers’ safeguards but may be accessible to courts, law enforcement and national security authorities of those jurisdictions under their laws.

6. Data security

We protect personal information with safeguards appropriate to its sensitivity, including:

• encrypted (HTTPS) connections across our website and booking pages;
• PCI-compliant payment processing through Stripe, so card data never touches our systems;
• access limited to team members who need it, with strong passwords and two-factor authentication where available;
• sharing health information only with the instructor or host who needs it for your session; and
• choosing reputable providers with recognized security practices.

No method of transmission or storage is completely secure. If a breach of security safeguards involving your information creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires, and keep a record of the breach.

7. How long we keep information

We keep personal information only as long as needed for the purposes described above, then securely delete or anonymize it. As a guide:

• Mailing list — until you unsubscribe or ask us to remove you;
• Booking and account records — while your account is active and for a reasonable period after;
• Financial records — as long as tax law requires (generally six years);
• Signed waivers and any incident reports — up to seven years after your last participation, so we can respond to insurance or legal matters.

8. Your rights: access, correction & deletion

You are always welcome to ask about your information. You may:

• Access — ask whether we hold personal information about you, how it has been used and to whom it has been disclosed, and receive a copy;
• Correct — ask us to fix anything inaccurate or incomplete;
• Delete — ask us to delete your information. We will honour your request unless we must keep certain records for legal, insurance or accounting reasons, in which case we will tell you what we are keeping and why;
• Withdraw consent — including unsubscribing from marketing at any time; and
• Complain — raise a concern with us, or with the Office of the Privacy Commissioner of Canada.

To make a request, email hello@miragesociety.cowith the subject line “Privacy Request”. We may ask you to confirm your identity before acting on it. We will respond within 30 days, and there is no charge for a reasonable request. If we cannot grant all or part of a request, we will explain why, as PIPEDA permits.

If you are not satisfied with our response, you may contact theOffice of the Privacy Commissioner of Canadaat 1-800-282-1376.

9. Cookies & website analytics

Our website uses essential cookies and similar technologies to function, stay secure and remember basic preferences. Embedded tools such as our Ticket Tailor booking may set their own cookies under their own policies. Analytics and marketing cookies are only used if you opt in through the cookie banner, and you can opt in or opt out at any time using Cookie settings at the bottom of every page. See ourCookie Policy for details. You can also block or delete cookies in your browser settings, though some parts of the site may not work as intended.

10. Minors

Our website and offerings are designed for adults. We do not knowingly collect personal information from anyone under 18 except with the consent of a parent or legal guardian (for example, for a family-friendly event). If you believe a minor has shared information with us without that consent, please contact us and we will delete it.

11. Changes to this policy

We may update this policy as our offerings, tools or the law change. The “Last updated” date at the top shows when it was last revised. If we make a significant change in how we use your personal information, we will let you know by email or on our website, and ask for your consent where required.

12. Contact us

For any privacy question, request or concern, please reach our Privacy Officer:

Privacy Officer, Mirage Society & Yoga
Bloom Business Consulting Inc.
Ajax, Ontario, Canada
hello@miragesociety.co