Privacy Policy

Privacy Policy · Effective October 17, 2026 · Last updated October 17, 2026

1. Who we are and what this policy covers

SlimReset Canada ("SlimReset", "we", "us") is a gut-guided weight-loss coaching program operated by BeDoWell Inc. dba SlimReset Canada, 259 Midpark Way SE, Suite 205, Calgary, AB T2X 1M2. This policy covers personal information we handle through the SlimReset Client Portal (slim-reset.com/app), our website, our online store (getslimreset.com), coaching sessions, text messages and email.

We follow the Personal Information Protection Act of Alberta (PIPA) and, where it applies, the federal Personal Information Protection and Electronic Documents Act (PIPEDA). We also follow Canada's Anti-Spam Legislation (CASL) for electronic messages. We are accountable for the personal information in our care, including information we give to service providers to process for us.

2. What we collect

Information you give us

• Account and contact details: your name, email address, mobile number (optional), province or time zone, password (stored only as a secure one-way hash) and communication preferences.
• Health and program information: intake and health history forms, gut analysis and food sensitivity results, nutrient and exposure findings, practitioner-approved reports and plans, weigh-ins and body measurements, food logs, meal plans, check-ins, notes and progress you record in the portal.
• Messages: messages and texts you exchange with your coach or our team, booking requests and notes from coaching sessions.
• Orders and payments: products you buy, shipping and billing addresses, and order history from the portal and our Shopify store. Card details are entered in Moneris's secure checkout. We never see or store full card numbers; if you choose to save a card, Moneris keeps it in its vault and we keep only an encrypted reference, the card type and the last four digits.

Information we collect automatically

• Technical and security information: sign-in times, IP address, browser and device type, and security logs (for example failed sign-in attempts). We use these to keep your account safe and the portal working.
• Delivery records: whether an email or text was sent or delivered. We do not keep copies of email message text in our delivery log.

Information from others

• Your practitioner or coach, and the laboratory or testing partner that processes your gut analysis.
• Sign-in providers, if you choose to sign in with Google, Apple, Microsoft or Facebook (see section 5).

3. How we use your information

We use personal information only for purposes a reasonable person would consider appropriate and that we have explained to you:

• to create and secure your account and confirm your identity;
• to prepare, review and deliver your personalized SlimReset plan, food guide, reports and coaching;
• to let you track progress and communicate with your coach;
• to book and run coaching sessions, including video sessions;
• to process orders, payments, shipping, refunds and receipts;
• to send account, security, booking and order messages you need;
• to send program reminders and tips by text or email, only with your consent;
• to keep the portal secure, prevent fraud and fix problems;
• to meet legal, tax and accounting obligations.

We do not sell your personal information, and we do not use your health information for advertising.

4. Your consent

We ask for your express consent before we collect health information and when you create an account. You can withdraw consent at any time by contacting us, subject to legal or contractual limits (for example, we must keep some order records for tax purposes). If you withdraw consent, we may be unable to provide some or all of the program, and we will explain what that means for you.

If someone else gives us your information (for example a coach inviting you), we only use it to set up the service you asked for.

5. Sign in with Google, Apple, Microsoft or Facebook

You can choose to sign in with an account you already have. This is optional; you can always use an email and password instead.

• What we request: only basic sign-in permissions: for Google, the openid, email and profile scopes (your Google account ID, name, email address and whether Google has verified that email); for Apple, the name and email scopes (your Apple account ID, the name you choose to share on your first sign-in, and your email address, which can be a private relay address if you choose Hide My Email; messages we send to a relay address are forwarded by Apple); for Microsoft and Facebook, the equivalent basic profile and email permissions. We do not request access to your Gmail, contacts, calendar, files or any other data.
• What we keep: the provider name, your provider account ID and a one-way hash of the email address, linked to your SlimReset account, plus the date you last signed in this way. We do not store your provider password or long-term access tokens.
• How we use it: only to sign you in, link the sign-in to your SlimReset account, and fill in your name and email when you sign up.
• Google user data: SlimReset's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not use it to train artificial intelligence models, and we do not transfer it to others except as needed to provide the sign-in feature, to comply with law, or as part of a merger or sale of the business with notice to you. Our staff do not read Google user data unless you ask us to for support, it is needed for security, or the law requires it.
• Turning it off: disconnect the sign-in from the Account page in the portal, or remove SlimReset's access in your provider settings (for Google, myaccount.google.com/permissions; for Apple, Settings > your name > Sign in with Apple on your iPhone, or account.apple.com). You can also ask us to delete the link.

6. Text messages (SMS)

• We text you only if you give us your mobile number and agree to receive texts. Texts come from +1 825-906-7546.
• Texts may include booking confirmations and reminders, check-in reminders, coaching messages and replies from your coach. Message frequency varies with your program.
• Reply STOP to stop texts at any time; we will confirm once and then stop. Reply START to opt back in, or HELP for help. You can also change text settings in the portal.
• Message and data rates from your mobile carrier may apply. Carriers are not liable for delayed or undelivered messages.
• We respect quiet hours in your time zone for non-urgent texts.
• Texts are sent through Twilio. We do not sell or share mobile numbers or text opt-in information with third parties for their own marketing.
• Please do not text urgent medical concerns. If you have an emergency, call 911.

7. Email

We send account, security, booking and order emails (for example email verification, password resets and receipts) because you need them to use the service. Promotional or newsletter emails are sent only with your consent under CASL, always identify SlimReset Canada and include a working unsubscribe link, and we process unsubscribe requests within 10 business days. Our emails are sent through Google Workspace from addresses at bedowell.com.

8. Who we share it with

We share personal information only with people who need it to provide your program, and with service providers who process it for us under contract and confidentiality obligations:

We may also disclose information when the law requires or allows it (for example to respond to a valid court order or to prevent serious harm), or to a buyer or successor of the business who agrees to protect it under this policy, with notice to you.

9. Storage and access outside Canada

Some of our service providers (including Google, Apple, Twilio, Shopify, Microsoft, Zoom, Meta and GoDaddy) may store or access personal information in the United States or other countries. The portal server and its backups are located in the United States or another country where our hosting provider (GoDaddy) operates. While it is outside Canada, your information is subject to the laws of that country and may be accessed by its courts, law enforcement and national security authorities. You can ask our Privacy Officer for information about our policies and practices for service providers outside Canada, or questions about how they collect, use, disclose or store personal information for us.

10. How we protect your information

• All connections to the portal use HTTPS encryption.
• Passwords are stored only as secure hashes, sign-in attempts are rate limited, and sessions expire.
• Sensitive fields (such as saved-card references and pending sign-up details) are encrypted in our database.
• Staff access is limited to people who need it for your care or for support, and access to sensitive records is logged.
• Reports and documents are only available after you sign in, and only to you and your care team.
• We keep secured backups so information can be restored after an incident.

No system is perfectly secure. Please use a strong, unique password and keep your sign-in details private.

11. How long we keep it

We keep personal information only as long as we need it for the purposes above or as the law requires. Generally, we keep client program and health records for as long as needed to provide your program and as required by applicable law and professional record-keeping obligations, and order and payment records for as long as Canadian tax law requires (usually six years). Unconfirmed sign-ups expire after 24 hours. When information is no longer needed, we securely delete or anonymize it.

12. Your rights and choices

• Access: ask for a copy of the personal information we hold about you and how it has been used and shared.
• Correction: ask us to correct information that is wrong or incomplete. You can update your name, mobile number and password yourself in the portal.
• Withdraw consent: stop texts (reply STOP), unsubscribe from promotional email, disconnect a sign-in provider, or ask us to close your account.
• Complaints: contact our Privacy Officer first. If you are not satisfied, you can contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

We respond to written requests within the time the law requires (30 days under PIPEDA and 45 days under Alberta's PIPA). We may need to confirm your identity first. Access is usually free; if a fee applies, we will tell you in advance.

13. Cookies and device storage

The portal uses essential cookies to keep you signed in and to protect forms from misuse. It also stores small settings on your device, such as your light or dark theme. We do not use advertising or cross-site tracking cookies in the portal. If you install the portal on your phone, it may store icons, fonts and food images on your device so pages load faster; it does not store your reports or health information offline.

14. Age requirement

The SlimReset program and portal are intended for adults 18 years of age or older, or younger users with the consent of a parent or legal guardian. We do not knowingly collect information from children.

15. If something goes wrong

If a privacy breach creates a real risk of significant harm to you, we will notify you and the Office of the Information and Privacy Commissioner of Alberta (and the Office of the Privacy Commissioner of Canada where required) as soon as reasonably possible, and keep a record of the breach as the law requires.

16. Changes to this policy

We may update this policy as our services or the law change. We will post the new version here with a new effective date and, for significant changes, tell you by email or in the portal before they take effect.

17. Contact our Privacy Officer

Questions, requests or complaints about privacy can go to our Privacy Officer:

Privacy Officer
BeDoWell Inc. dba SlimReset Canada
259 Midpark Way SE, Suite 205, Calgary, AB T2X 1M2
Email: [email protected]
Phone: +1 877-431-0806