The short version
- The public site sets no cookies unless you accept the advertising cookie, which loads Meta's pixel to measure our ads. Visit counts are anonymous.
- Signing in to the client portal sets one cookie that keeps you signed in, and nothing else.
- We collect personal information only when you send it: a form, a booking, a message.
- We never sell it. We share it only with the tools that run the business, all listed below.
- Tyson DesMarais is the person in charge of protecting it. Anything on this page starts with an email to contact@mindsystem.ca.
Who is responsible
MIND System is a coaching business based in Ontario. Tyson DesMarais, the founder, is the person in charge of the protection of personal information. Requests, corrections, and complaints go to contact@mindsystem.ca.
What we collect, and why
- What you type into a form. Your name, contact details, and whatever you choose to tell us about your situation. We use it to answer you and to prepare for the conversation you asked for.
- Booking details. When you schedule a call: your name, email, and the time you picked.
- Messages. What you send by email, so the conversation can continue where you left it.
- Client records, if you become a client. The information needed to coach you: goals, habits, training, and check-in notes. Anything you share about your health is treated as sensitive, used only for your coaching, and never used in marketing.
- Portal sign-in, if you become a client. Your email, the password you choose (we store a scrambled form of it, never the password itself), and the times you sign in.
- Site analytics. Anonymous counts of pages and visits, with no cookies, no personal identifiers, and no tracking across other sites.
- Advertising measurement, only if you accept it. If you tap Accept on the cookie choice bar, Meta's pixel records the pages you view here so we can measure our ads. See Cookies below.
What we do not do
We do not sell personal information. We do not build profiles of visitors. The public site sets no cookies unless you accept the advertising cookie. The cookie choice bar, which appears on your first visit, asks before that one cookie is set, and nothing from Meta loads until you accept. The client portal sets one cookie when you sign in, so that you stay signed in. The portal needs it to work, it tracks nothing, and it ends when you sign out. If we ever add another cookie that needs your consent, this page changes first and asks for it.
Cookies
The public site sets no cookies unless you accept the advertising cookie. Only after you tap Accept on the bar does the site load Meta's pixel to measure our advertising. It sets one cookie and sends the pages you view on this site to Meta in the United States. Decline, or give no answer, and nothing from Meta loads. The client portal's sign-in cookie is described under The client portal below.
The tools that hold your information
When you send us information, it is stored and processed by the services below. Each acts on our instructions, and we send each one only what its job needs.
- Vercel hosts this website. Servers in the United States. The films play from Vercel's storage, so pressing play asks that host for the file, sending your IP address and setting no cookie.
- Supabase holds client portal accounts and dashboards. Servers in Montreal, Canada.
- Tally runs the contact and booking forms. Servers in the European Union.
- Plausible counts site visits, without cookies or identities. Servers in the European Union, reached through this site's own domain.
- Meta measures our advertising, only after you accept. Servers in the United States.
- Mailgun receives and routes email sent to mindsystem.ca addresses. Servers in the United States.
- Google Workspace email and documents, including the portal sign-in and account emails. Servers in the United States and Canada.
- Notion holds client records. Servers in the United States.
- n8n, hosted on Railway internal automation. Servers in the United States.
Some of these services store information outside Canada and outside Quebec. That means it can be subject to the laws of those places while it sits there. We choose services with strong security practices and limit what we send to each one.
How long we keep it
As long as it serves the purpose you gave it to us for: answering you, coaching you, or keeping the business records the law requires. When you ask us to delete your information, we delete everything the law does not require us to keep.
Your rights
You can ask us, at any time, to:
- show you what we hold about you,
- correct anything that is wrong,
- delete it,
- stop using it, by withdrawing your consent.
Write to contact@mindsystem.ca. You get an answer within thirty days. If the answer does not satisfy you, you can complain to the Office of the Privacy Commissioner of Canada. Quebec residents can also complain to the Commission d'accès à l'information du Québec.
The client portal
If you become a client, your portal holds health information about you: your screening answers, body measurements, blood-work notes, medications, diagnoses, goals and session notes. It also holds your account details and the times you sign in. This section says what happens to that information; everything above still applies.
Why we hold it. Tyson uses it to design and adjust your program and to check you are safe to train. It keeps your dashboard private to you. Nothing in it is used for marketing.
Where it is, and who processes it. The database sits with Supabase in Montreal, Canada. Vercel serves the pages and the sign-in from the United States, and the account emails go out through Google. Information held outside Canada and outside Quebec can be subject to the laws of those places while it sits there. Outside the portal, your client record also lives in the tools listed above.
Who can see it. You, and Tyson. DreamzZ Origin Inc. operates the system under contract and can reach the database for maintenance. No one else.
How long we keep it. Your dashboard and its files stay for 12 months after your program ends, so you can still ask what decisions were based on. Your account stays 30 days after the dashboard is removed, in case you return, and is then deleted. The access log keeps each entry for 24 months, then the entry is deleted or stripped of your address and browser details. Sign-in attempt records last 7 days. Your consent record stays 24 months after your program ends. Backups of the database are kept for 7 days.
Your rights in the portal. Everything under Your rights above applies here. You can also ask for a copy of your dashboard, or for it to be deleted. Write to contact@mindsystem.ca; you get an answer within thirty days.
The sign-in cookie. The portal sets one cookie so you stay signed in. It lasts up to 30 days, ends when you sign out, and is the only cookie the portal sets.
If something goes wrong. An online system can be breached. If a breach creates a real risk of harm to you, we tell you and the Office of the Privacy Commissioner of Canada as the law requires, and we say what happened and what you can do.
Your consent. The first time you sign in, the portal asks you to agree to all of this, in its own words, before your dashboard opens. We record the text you agreed to and when. You can withdraw that consent at any time by writing to contact@mindsystem.ca. We then remove your dashboard, and coaching continues in person or ends, your choice.
Changes
When this policy changes, the date at the top changes with it, and meaningful changes get a plain note on this page rather than a silent edit.