Privacy Policy
Our Commitment to Your Privacy
Langr Vitae Inc. is committed to protecting the privacy of every client. Our approach to data management is built on a simple principle: your personal identity and your health data are never stored together. This policy explains how we collect, use, protect, and manage information in connection with our services and website, in accordance with Canadian privacy legislation, including the Nova Scotia Personal Health Information Act (PHIA) and the Personal Information Protection and Electronic Documents Act (PIPEDA). Our data governance practices are guided by ISO standards for information security and privacy management.
Consent
We collect, use, and disclose your personal health information with your consent, except where PHIA permits or requires us to do so without consent. At or before the time of your first visit, you will be informed of the purposes for which your information is collected and how it will be used. Consent may be verbal, written, or knowledgeable implied consent in accordance with PHIA. You have the right to withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice
What We Collect
We collect two distinct categories of information:
-
Identification Information:
-
Basic contact and identification details (such as name, date of birth, and email address) collected solely for the purpose of scheduling, communication, and service delivery.
-
-
Health & Wellness Data:
-
Assessment data gathered during your visit, including, but not limited to, self-reported health status, body composition measurements, biomarker results from capillary blood sampling (e.g. blood glucose, biological age) and VO2 max.
-
This data is collected exclusively for the purpose of quantifying your current state of health and supporting your health journey. None of the data we gather is solely or purposively diagnostic of an allopathic illness or disease.
-
How We Store Your Data
All health and wellness data at Langr Vitae is stored anonymously. Upon registration, each client is assigned a unique 6 character alphanumeric Client ID. From that point forward:
-
All assessment data — biomarkers, fitness results, body composition, and related records — is stored and referenced exclusively by Client ID. No name, email, or other personal identifier is attached to this data.
-
Any identification information (the link between a Client ID and a client's name or contact details) is held separately, in a secure, ISO-compliant database. This linkage data is subject to strict access controls and is managed in accordance with ISO information security guidelines.
-
No single record or system combines both your personal identity and your health assessment data simultaneously.
Where assessment data is stored or processed using third-party cloud services, it is transmitted and stored by Client ID only. No personally identifying information accompanies data held by third-party providers. All third-party providers engaged to store or process client data are required to operate under contractual terms that include privacy and security obligations consistent with PHIA. Langr Vitae, as custodian, remains responsible for ensuring that any agent or third-party provider handling personal health information on our behalf does so in a manner that complies with applicable privacy legislation. Third-party providers are selected on the basis that they operate secure, compliant environments appropriate for anonymized data.
Data Security & Compliance
Our data governance framework is guided by the Personal Health Information Act (PHIA) of Nova Scotia, Canada and follows the International Organization for Standardization (ISO) procedures for information security and privacy management. Our approach covers:
-
Access controls: health and wellness data is accessible only to authorized personnel on a need-to-know basis. All personnel have committed to a strict confidentiality policy.
-
Data classification: identification data and anonymized assessment data are managed as separate, distinct data sets.
-
Secure storage: systems used to store client data — both internal and third-party — are selected on the basis of their security credentials and compliance posture.
-
Ongoing review: data handling is audited regularly to ensure continued alignment with applicable standards and legislation.
-
Breach notification: in the event of a privacy breach that, in our reasonable opinion, is likely to cause harm or embarrassment to an individual, we will notify the affected individual promptly. We maintain a record of all security breaches of our electronic information systems, including the corrective measures taken.
How We Use Your Information
Your information is used only for the following purposes:
-
Quantifying your state of health and delivering optimization services
-
Communicating with you regarding your assessment, results, or follow-up
-
Scheduling and managing your client relationship
-
Complying with applicable legal and regulatory obligations
We do not sell, rent, or share your personal information with any third party for commercial or marketing purposes.
Website & Cookies
When you visit our website, we may automatically collect non-personal, aggregate usage data to help us improve your experience — such as general browsing behaviour, browser type, and broad geographic region. This data cannot be used to identify you individually.
Our website may use essential cookies necessary for basic functionality. We do not use advertising or tracking cookies. You may disable cookies in your browser settings, though some site features may be affected.
We do not collect personal health information through our website. Any information submitted via a contact or intake form is subject to the same protections described in this Policy.
Data Retention
Langr Vitae maintains a written retention schedule for personal health information, as required under PHIA. Client data is retained for the period specified in that schedule, which reflects applicable legal, regulatory, and operational requirements. When the applicable retention period has expired and no legal hold or access request is outstanding, personal health information is securely destroyed in a manner that makes reconstruction not reasonably foreseeable. Because health assessment data is stored anonymously by Client ID, de-identification of the record is achieved by removing the identification linkage. Clients are encouraged to contact our Privacy Officer to request a copy of our retention schedule or to enquire about the retention period applicable to their records
Your Rights
You have the right to:
-
Access the personal information we hold about you
-
Request correction of inaccurate or incomplete information
-
Request deletion of your personal data
-
Lodge a complaint with the Nova Scotia Review Officer (the independent oversight body under PHIA), or with the Office of the Privacy Commissioner of Canada
To exercise any of these rights, please contact us as at knapp@langrvitae.com. We will respond to access and correction requests within 30 days.
Contact
For any questions, concerns, or requests related to your privacy or this Policy, please contact:
Langr Vitae Inc. — Privacy Officer
5645 Kane St.
Halifax, Nova Scotia, B3L 3G6
Email: knapp@langrvitae.ca