Last updated: June 2026
Elevation650 ("we", "us") operates The Self-Agency Project, offering in-person self-defense training and online courses in Alberta, Canada. We comply with Alberta's Personal Information Protection Act (PIPA) and Canada's PIPEDA, and we support school boards' obligations under Alberta's Protection of Privacy Act (POPA, formerly FOIP).
Our designated Privacy Officer is Andrew Kiedyk — admin@elevation650.com — and can answer any question about how personal information is collected, used, stored, or disclosed, including information handled by service providers outside Canada.
We collect only what we need to run the business:
We never sell or rent personal information. We never use student information for advertising, profiling, product development unrelated to the service, or AI training.
When a school or school board purchases seats, student information (name, email, course progress) is collected and used on behalf of, and under the authority of, that school board as permitted by Alberta's Protection of Privacy Act (POPA). The board remains in control of its students' information; we act as its service provider. We use student information only to deliver the training the board purchased — nothing else. We notify boards of any privacy incident affecting their students without unreasonable delay (target: within 72 hours), restrict access to authorized staff only, and return or securely destroy student data at the end of the agreement or on the board's request. Parent/guardian consent for student participation is managed by the school under its own policies. See our Privacy & Schools page for a full compliance summary.
As required by PIPA sections 6 and 13.1, we disclose that we use the following service providers, some of which collect, use, or store personal information outside Canada (United States):
Each provider receives only the minimum information needed to perform its function and is not permitted to use it for any other purpose. Questions about our use of foreign service providers can be directed to our Privacy Officer: admin@elevation650.com.
Our booking system connects to our own Google Calendar (via the Google Calendar API) so confirmed sessions appear on our business schedule and busy times are blocked from booking. This connection accesses only our business calendar — never yours. Use of information received from Google APIs adheres to the Google API Services User Data Policy ( developers.google.com/terms/api-services-user-data-policy ), including the Limited Use requirements.
We send booking confirmations, reminders, and replies to conversations you start. Promotional messages (such as discount codes) are sent only to existing customers or people who asked for them, in line with Canada's Anti-Spam Legislation (CASL); every such text identifies us and you can reply STOP to opt out at any time.
All traffic is encrypted in transit (HTTPS/TLS). Passwords are stored only as salted bcrypt hashes. Access is role-based (admins, teachers, and students each see only what they need), administrative actions on sensitive data are logged, and the database is access-controlled and not publicly reachable.
If a privacy breach creates a real risk of significant harm, we will notify the Office of the Information and Privacy Commissioner of Alberta (OIPC) without unreasonable delay as required by PIPA, notify affected individuals, and notify any affected school board (target: within 72 hours of discovery). Our Privacy Officer coordinates containment, assessment, and remediation.
You may request a copy of your personal information, ask us to correct it, or ask us to delete it (subject to legal retention requirements like signed waivers and tax records). Email admin@elevation650.com and we'll respond within 45 days as required by PIPA.
Youth programs are registered and managed by a parent, guardian, or school. We collect student information only as provided by them for training purposes.
If we change this policy we'll update this page and the date above.