Privacy Policy

1. Privacy at North Peak Sport - Overview

The confidential and professional handling of your data is a fundamental concern for North Peak Sport. This privacy policy informs you comprehensively and transparently about what types of data we collect for what purposes, how we process this data, and what rights you have as a data subject. We are committed to complying with all applicable data protection regulations and to protecting your privacy.

For the data protection terms used in this statement, the definitions of the Personal Information Protection and Electronic Documents Act (PIPEDA) as well as the General Data Protection Regulation (GDPR), where applicable, shall apply.

2. Responsibility and Contact Information

The entity responsible for processing personal data in connection with our business coaching and leadership development services is:

North Peak Sport
584 Riverside Lane
Vancouver, BC V5T 2K9
Canada

Email: info@northpeaksport.com
Phone: +1 (778) 961-4238

3. Collected Data and Collection Methods

  • Contact and identification data (name, address, phone number, email)
  • Professional data (company name, position, industry, career history)
  • Coaching-relevant information (development goals, assessment results, feedback inputs)
  • Contract data and payment information
  • Communication data (email correspondence, session notes, action plans)
  • Usage data of our website (IP address, browser type, access times)
  • Feedback and evaluation data (with your consent)

4. Purposes of Data Processing

  • Implementation and customization of our coaching and leadership development services
  • Contract execution and invoicing
  • Communication regarding coaching topics and scheduling sessions
  • Quality assurance and enhancement of our services
  • Distribution of professional development information and event notifications (only with your consent)
  • Fulfillment of legal retention obligations
  • Protection of our IT systems against misuse and security threats

5. Legal Basis for Data Processing

The processing of your personal data is based on the following legal grounds:

  • Contract fulfillment and pre-contractual measures (Art. 6 para. 1 lit. b GDPR)
  • Fulfillment of legal obligations (Art. 6 para. 1 lit. c GDPR)
  • Safeguarding legitimate interests (Art. 6 para. 1 lit. f GDPR)
  • Your explicit consent (Art. 6 para. 1 lit. a GDPR)

The corresponding provisions of PIPEDA and other applicable Canadian data protection laws also apply.

6. GDPR Compliance and Special Protection Measures

As a company with clients from the EU, North Peak Sport is committed to full compliance with the General Data Protection Regulation (GDPR). This means in particular:

  • We process personal data only in a lawful, fair, and transparent manner
  • We collect data only for specific, explicit, and legitimate purposes
  • We limit data collection to what is necessary for the purposes of processing (data minimization)
  • We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk
  • We conduct data protection impact assessments when required
  • We ensure that all employees are appropriately trained and have signed confidentiality agreements

In the event of data protection breaches that are likely to pose a risk to the rights and freedoms of natural persons, we will inform the competent supervisory authority within 72 hours and notify the affected persons immediately if there is a high risk.

For the transfer of personal data to countries outside the EU/EEA, we ensure that appropriate guarantees are in place, e.g., through EU standard contractual clauses or adequacy decisions of the EU Commission.

7. Data Security Measures

To protect your personal data, we have implemented extensive technical and organizational measures, including:

  • Encrypted data transmission (SSL/TLS)
  • Access restrictions and authentication procedures
  • Regular security audits and system updates
  • Data backup systems and emergency concepts
  • Physical security measures for our IT infrastructure
  • Sensitization and regular training of our employees

8. Storage Duration and Deletion Concept

We store your personal data only as long as necessary for the purposes for which it was collected or as required by legal retention obligations. After these periods expire, your data will be securely and completely deleted or anonymized.

Contract data is typically retained for the duration of the coaching relationship plus 7 years to comply with our legal retention obligations. Communication data is typically deleted 3 years after the last contact, unless longer retention is required.

9. Your Rights as a Data Subject

As a data subject, you have the following rights:

  • Right to information about the personal data stored about you
  • Right to rectification of inaccurate or incomplete data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent that has been given, with effect for the future
  • Right to lodge a complaint with the competent supervisory authority

To exercise your rights, please contact us using the contact information provided above.

10. Disclosure of Data to Third Parties

We will only disclose your personal data to third parties in the following cases:

  • To service providers who act on our behalf and under our instructions (processors)
  • To external coaches or consultants who are contractually obligated to maintain confidentiality
  • If there is a legal obligation to disclose data
  • If you have explicitly consented

All processors have been carefully selected and are contractually bound to comply with data protection regulations.

11. Updates to the Privacy Policy

We reserve the right to update this privacy policy as needed to adapt it to changed legal situations or changes in our data processing activities. The current version is always available on our website.

We recommend that you regularly review this privacy policy to stay informed about changes. In case of significant changes, we will inform you in an appropriate manner.

Last updated: April 2025