KR Kinetics is a sole proprietorship operated by Kevin Racine. NEQ: 2282392176. This policy explains how we collect, use, disclose, retain, and destroy personal information in connection with the krkinetics.com website and our services.
1. Who we are
KR Kinetics is operated by Kevin Racine, a sole proprietorship.
NEQ: 2282392176.
Applicable taxes, if any, will be clearly indicated before payment.
The business address and phone number are not publicly displayed. They are communicated in the individual contract before any payment, or upon a justified written request.
2. Privacy Officer
Privacy Officer
Kevin Racine
Owner and Privacy Officer
Email: kev.racine@krkinetics.com
Requests for access, rectification, withdrawal of consent, portability, or privacy-related complaints may be sent to this address.
You can also use the "Get in Touch" form on the site for a general request; privacy-related requests are handled as a priority via the email above.
3. Information we may collect
We limit collection to information that is reasonably necessary for the requested service. Depending on the context, we may collect:
• Identity and contact information: name, email, phone, and billing address when necessary;
• Communication information: content of messages, requests, bookings, and follow-ups;
• Service-related information: goals, experience, schedule, equipment, preferences, and constraints;
• Sensitive information provided with express consent: injuries, pain, limitations, relevant history, health conditions, relevant medications, allergies or intolerances, and other information necessary for the safety and adaptation of the service;
• Administrative information: accepted contract, consents, payments, invoices, and service dates;
• Client reviews: first name, last initial, verification email address, service used, optional goal, rating, comment, submission language, publication consent, and moderation status.
• Necessary technical data: IP address, device type, browser, security logs, and essential cookies, depending on the tools used.
4. How information is collected
Information may be collected directly from you through the contact form, questionnaires (including via booking tools / Google Calendar), emails, videoconference, phone, text messaging, Messenger, booking tools, and follow-up exchanges. Certain technology providers collect or process it on our behalf.
5. Why we use it
• To respond to a request and arrange a consultation;
• To determine whether the requested service is appropriate and safe within the limits of our competence;
• To prepare, deliver, and, where included in the selected service, adjust a training program or nutrition framework;
• To communicate with the client, document relevant changes, and ensure continuity of follow-up;
• To verify the authenticity of a review, obtain and document consent to its publication, moderate its content, publish the authorized elements, and respond to a removal request;
• To manage payments, billing, access requests, and legal obligations;
• To protect the site, accounts, communications, and prevent fraud or privacy incidents.
We do not sell or rent personal information.
6. Consent and sensitive information
Information concerning health, injuries, limitations, or other intimate matters is considered sensitive. It is only collected after express consent given separately (an unchecked box or a separate document). Simply submitting the general contact form does not constitute consent to the collection of detailed medical information.
Consent may be withdrawn, subject to legal requirements. A withdrawal may make it impossible to safely provide the service. We do not request a detailed diagnosis or a complete medical file when this is not necessary.
7. Disclosure to service providers
Information may be processed by service providers only to the extent necessary for their mandate. As of publication, the categories of providers include:
• Site hosting and deployment: Vercel;
• Email and calendar: Google Workspace and Google Calendar;
• Site form and message delivery: Resend;
• Payment and billing: Stripe and Interac e-Transfer;
• Selected communications with the client: Gmail, SMS, and/or Messenger;
• Accounting or professional support, when necessary and subject to confidentiality obligations.
Some providers may process or store information outside Quebec. Before any such use, KR Kinetics assesses the privacy risks and puts in place reasonable contractual and technical safeguards. These providers' own privacy policies also apply to their respective services.
8. Retention periods
We apply a retention schedule based on the nature of the information:
• Contact request with no purchase: up to 30 days after the exchange is closed, unless consent is given to a longer follow-up;
• Pre-consultation questionnaire with no contract: up to 30 days after the decision not to proceed;
• Detailed health and coaching data — one-time service: during design, delivery, and a post-delivery verification period of up to 90 days, then destroyed, except where a specific legal need applies;
• Detailed health and coaching data — Complete Coaching: during the active relationship and up to 90 days after it ends, then destroyed, except where a specific legal need applies;
• Contracts, consents, proof of delivery, and minimal safety notes: generally three years after the end of the service;
• Accounting records, invoices, and proof of payment: for the period required by tax laws, generally six years;
• Privacy incident register: at least five years;
• Rejected, incomplete, or unpublished review: verification information is deleted no later than 90 days after the moderation decision, unless temporary retention is needed to handle a complaint or dispute;
• Published review: the comment, first name, initial, rating, service, and authorized goal may remain displayed for as long as the review remains relevant and consent has not been withdrawn. Proof of consent and minimal verification information may be retained during publication and generally for up to three years after the review is removed, to document authorization and handle a potential dispute.
• Backup copies: according to the limited technical cycle of the host / tools, then erased.
9. Security measures
We use reasonable measures proportionate to the sensitivity of the information, including: accounts protected by multi-factor authentication where available, access limited to the owner, locked and encrypted devices where possible, security updates, reasonable separation of health data from accounting data, controlled backups, and secure destruction. No system is entirely free of risk.
10. Privacy incident
In the event of unauthorized access, use, loss, or disclosure, KR Kinetics promptly takes steps to limit the risk, documents the incident, and, where a risk of serious harm exists, notifies the affected individuals and the Commission d'accès à l'information in accordance with the law.
11. Your rights
Subject to the exceptions provided by law, you may request access to your data, its rectification, clarification of its use and disclosure, withdrawal of your consent, and, where the right applies, its disclosure in a structured, commonly used technological format. Reasonable proof of identity may be requested. A response will be provided within the time period required by law.
You may request the removal of a published review by writing to kev.racine@krkinetics.com. After reasonable identity verification, the public review will be removed within a reasonable time, subject to applicable legal obligations.
13. Minors
The services are intended for people 18 years of age and older. A minor may only provide information or receive a service with the authorization and participation of a holder of parental authority, in accordance with applicable requirements.
14. Complaints and changes
Any complaint related to the protection of personal information may be sent to the officer identified in section 2, at kev.racine@krkinetics.com. This policy may be updated to reflect a legal, technological, or operational change. Significant changes will be communicated appropriately.
For any question about this policy or the handling of your personal information, contact the Privacy Officer at the contact information indicated above.

