Privacy Policy

Last updated: 20 August 2026

Hexagon works with children, which means the information you share with us deserves more care than most. This page explains exactly what we collect, why we collect it, who can see it, and how you can ask us to change or delete it. If anything here is unclear, call us on 416 889 1074 and we will explain it in plain language.

1. Who we are

Hexagon ("Hexagon", "we", "us") operates children's enrichment programming at 36 Broadlands Blvd, North York, Ontario, M3A 1J3, Canada. We are the organization responsible for the personal information described in this policy.

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy law.

2. What we collect

Information you give us directly

When you complete the enquiry form on our website, or contact us by phone or email, we may collect:

• Parent or guardian name, email address and phone number
• Your child's first name and grade
• The school your child attends
• Which program you are interested in, and your intended start date
• How you heard about us, and the name of a referring family if applicable
• Anything you choose to tell us in the notes field, which may include allergies, medical needs or other details about your child

Information collected at registration

If your family enrolls, we collect additional information needed to care for your child safely. This typically includes emergency contacts, authorized pickup persons, allergy and medical information, consent for outings and transit travel, and photo permissions.

Information collected automatically

Our website uses Google Analytics to understand how visitors use the site. This records information such as pages viewed, approximate location (city level), device and browser type, and how you arrived at the site. It does not tell us who you are by name. See section 7 for the full list of services our site relies on.

3. Why we collect it

• To answer your enquiry and send you program information
• To keep your child safe — allergies, medical needs, emergency contacts and authorized pickup
• To run the programs you have registered for, including billing and scheduling
• To communicate with you about your child's day, program changes and reminders
• To apply discounts correctly, including sibling, referral and carpool credits
• To improve our website and programming, using aggregate analytics

We collect the minimum needed for these purposes. We do not collect information about your child "just in case".

4. Children's information

Hexagon serves children aged 6 to 12. We collect information about children only from a parent or legal guardian, never from the child directly, and only for the purposes set out above. Our website is written for parents and is not directed at children, and we do not knowingly collect information submitted by a child through it.

Photographs and video. We may take photographs or short video of activities. We ask for your written permission in the registration package before using any image of your child in marketing, on our website or on social media, and you may withdraw that permission at any time by emailing us. Withdrawing permission does not affect your child's place in any program.

5. Who we share it with

We do not sell your personal information, and we never have. We share it only in these situations:

• Our staff and guides, who need allergy, medical and pickup information to care for your child safely
• Service providers who operate parts of our business on our behalf, listed in section 7
• Emergency and medical personnel, if your child requires urgent care
• Where required by law, including any legal obligation to report a child protection concern

6. Where it is stored, and for how long

Some of our service providers store data on servers outside Canada, including in the United States. Information stored in another country may be accessible to that country's courts and law enforcement under its own laws.

We keep enquiry information only for as long as it is useful for following up with you. We keep registration, health and billing records for as long as your child is enrolled, and then for the period we are required to keep them for tax, insurance and liability reasons. We set a retention limit for each type of record and review those limits regularly. Once a limit is reached, records are securely destroyed.

If you would like to know how long we hold a particular record about you or your child, ask us and we will tell you.

7. Cookies and analytics

Our website uses the following third-party services:

• Google Analytics — website usage measurement. Google's privacy policy. You can opt out with the Google Analytics opt-out add-on.
• Formspree — delivers our enquiry form submissions to our inbox.
• Google Maps and Google Calendar — the map and the "Book a Time" scheduler embedded on our site.
• Google Fonts — used on this privacy page and our error page only. Our main pages load their typeface from our own server, so they make no request to Google for it. Where Google Fonts is used, loading it sends your IP address to Google.
• Netlify — hosts this website. Like any web host, it keeps short-term server logs that include IP addresses.

You can block or delete cookies in your browser settings. The site will still work, though the embedded map and booking calendar may not display.

8. How we protect it

We limit access to personal information to the people who need it to do their job. Accounts holding family information are password protected. Paper records containing health or emergency information are kept secured on site. All staff are police checked and are required to keep family information confidential.

No method of storage or transmission is perfectly secure. If a breach occurs that creates a real risk of significant harm, we will notify affected families and the Office of the Privacy Commissioner of Canada as PIPEDA requires.

9. Your rights

You may, at any time:

• Ask what we hold about you or your child, and receive a copy
• Correct anything inaccurate
• Withdraw consent for photographs, marketing emails or other optional uses
• Ask us to delete information we are not legally required to keep
• Complain if you think we have handled your information badly

Email info@myhexagon.ca and we will respond within 30 days. If you are not satisfied with our answer, you may contact the Office of the Privacy Commissioner of Canada.

10. Changes to this policy

If we change how we handle personal information, we will update this page and change the date at the top. If the change is significant, we will tell enrolled families by email rather than relying on you to notice.