Skip to main content

Privacy Policy

Effective Date: Sep 27, 2026

www.ultimatecoders.com (the "Site") is owned and operated by Ultimate Coders Franchising Inc.. Ultimate Coders Franchising Inc. can be contacted at:

[email protected]

(844) 326-3377

6981 Millcreek Dr, Unit 11, Mississauga, ON L5N 6B8

1. Purpose:

The purpose of this privacy policy (this "Privacy Policy") is to inform users of our Site of the following:

  • The personal data we will collect;
  • Use of collected data;
  • Who has access to the data collected;
  • The rights of Site users; and
  • The Site's cookie policy.

This Privacy Policy applies in addition to the terms and conditions of our Site.

2. Consent:

Using our Site means you agree to the parts of this Privacy Policy that describe running the Site itself: serving you the pages you ask for, keeping the Site secure, and handling what you type into a form so that we can answer you.

Analytics and advertising are separate, and we do not treat your having used the Site as agreement to either. We ask the first time you visit, and nothing that measures your visit or supports our advertising runs before you answer. You may decline, you may agree to one and not the other, and you may change your mind at any time through "Cookie Preferences" in the footer of every page. Declining costs you nothing here — every page, form and booking works the same either way.

We record what you chose, the time you chose it, and the version of this Privacy Policy you were shown, so that we can tell you later what you agreed to. If we begin using a materially different set of tools than the ones named in section 12, we ask again rather than carrying your previous answer forward.

3. Personal Data We Collect:

We only collect data that helps us achieve the purpose set out in this Privacy Policy. We will not collect any additional data beyond the data listed below without notifying you first.

Data Collected Automatically

When you visit and use our Site, we may automatically collect and store the following information:

  • Location;
  • Hardware and software details;
  • Clicked links; and
  • Content viewed.

Only what is needed to serve you a page and keep the Site secure is collected without your consent. Everything else in that list is collected by the analytics and advertising tools named in section 12, and only if you have agreed to them.

Data Collected in a Non-Automatic Way

We may also collect the following data when you perform certain functions on our Site:

  • First and last name;
  • Date of Birth;
  • Contact Details;
  • Payment information;
  • A child's allergies, medical conditions and medication;
  • An emergency contact and the names of other people allowed to pick the child up;
  • A typed waiver signature, kept with the date, time and IP address it was signed from;
  • Referral codes (who referred whom, and credits given); and
  • The messages between you and your centre: texts, emails, and the details of phone calls (when, which way and how long, the transcript or summary of a voicemail or call where our phone system provides one, and the recording where the centre records calls).

This data may be collected using registration forms, online surveys etc.. The messages are collected when you text, email or call your centre, or it contacts you.

4. How We Use Personal Data:

Data collected on our Site will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this Privacy Policy.

The data we collect automatically is used for the following purposes:

  • Improving User Experience;
  • Personalization;
  • Analytics and Reporting;
  • Technical Optimization;
  • Security and Fraud Detection;
  • Marketing and Advertising;
  • Compliance and Legal Obligations; and
  • Feedback and Improvements.

The data we collect when the user performs certain functions may be used for the following purposes:

  • User Registration and Profiles;
  • Course Enrolment and Feedback;
  • Learning Assessments and Assignments;
  • Support and Customer Service; and
  • Answering the messages you send your centre.

Messages With Your Centre

We keep the texts, emails and call details between your family and your centre together, as one history, so that whoever answers you can see what was said before. The owner and managers of your centre and our head office can read it; teachers cannot.

Each centre may also turn on an AI assistant, made by Anthropic (section 5), separately for texts and for email. It is off unless the centre turns it on. Whichever it is on for, it reads your texts and the details of your phone calls with the centre, even where it is not on for email; it reads your emails only where the centre has turned it on for email. Where it is on, it may:

  • answer a new family's questions about the centre, offer open times for a free trial class and book the one they pick;
  • answer an enrolled family's simple questions about their own children: the next classes, the link to an online class, unused makeup credits, and the days the centre is closed. It reads only the records of the children your centre has linked to the phone number or email address you wrote from, and sends an online class link only to the phone number or email address on that child's registration. It does not answer questions about billing, and it never changes a class, a booking, a payment or anything else on your account; and
  • read your messages to suggest a task for the centre's staff, such as calling you back or changing a class day. For this it never writes to you and changes nothing: a person at the centre reads the suggestion and decides what to do.

When the assistant replies to you by itself, its first message says that it is an AI, and you can ask for a person at any time. At some centres it only drafts a reply, which a person reads before sending.

5. Who We Share Personal Data With:

Employees: We may disclose user data to any member of our organization who reasonably needs access to user data to achieve the purposes set out in this Privacy Policy.

Service Providers: We use a small number of outside companies to run the Site and our business, and they receive only what their function requires. They are:

  • Cloudflare, Inc. (United States) - serves and protects the Site. Receives your IP address, your browser's user agent and the requests you make.
  • Stripe, Inc. (United States) - processes camp and class payments. Receives your payment details, name and email. We never see or store your card number or bank account number.
  • Google LLC (United States) - Google Tag Manager, Google Analytics 4, Google Ads and Google Maps. What each one receives is set out in section 12. Our advertising data reaches more than one Google Ads account, because some of our locations are run by franchisees who advertise for their own centre. Every such account is bound by the same terms and receives the same limited data described in section 12, and none of them receives anything about your child. Separately, our centres' email runs on Google Workspace (Gmail), which holds the emails between you and your centre; under Google's terms for Workspace, it does not use them for advertising.
  • Meta Platforms, Inc. (United States) - measures the performance of our ads. Receives conversion events, and your email, phone number, city and postal code in an irreversible hashed form that Meta can match against but we cannot read back. Only if you have agreed to advertising.
  • Pipedrive OU (Estonia) - our customer relationship system. Receives the contact details and enquiry text you submit through our forms.
  • Anthropic, PBC (United States) - runs the AI assistant described in section 4 ("Messages With Your Centre"), only at a centre that has turned it on. Once a centre turns it on for texts, email or both, Anthropic receives your family's history with that centre: your texts and your phone calls with it (when, which way and how long, and the transcript and summary of a call or voicemail where our phone system provides one), whether it was turned on for texts or for email; and, only where it is on for email, your emails with the centre and the subject lines of the centre's automatic and marketing emails to you. It also receives a summary of older messages, which the AI writes and we keep with your history, and what our records say that it needs in order to answer: for a new family, the parent's full name and email address, the child's full name and grade, and any trial class booked; for an enrolled family, the parent's full name and, for each child, their full name, program, class days and times, whether they are active or on hold, their next classes, unused makeup credits and, when you ask for it, the online class link. We never send it your phone number, payment details, or your child's medical information from our records; it sees only what a message or call itself says. It does not use any of this to train its models.
  • Quo (formerly OpenPhone, United States) - our centres' phone system for calls and texts. Receives your phone number and the calls, voicemails and texts between you and your centre, records calls where the centre has turned recording on, and transcribes or summarizes voicemails and calls for us where the centre uses that feature. Your centre's owner and managers can play a recording from our system; the recording itself stays with Quo.
  • Twilio Inc. (United States) - sends some of our centres' text messages, such as news and follow-ups on an enquiry. Receives your phone number, the message and any reply.
  • SendGrid (part of Twilio Inc., United States) - sends our emails. Receives your name, email address and the email.

Because several of these companies are in the United States, the data they hold may be stored or processed there and may be accessible to authorities in that country under its own laws.

Other Disclosures: We will not sell or share your data with other third parties, except in the following cases:

  • If the law requires it;
  • If it is required for any legal proceeding;
  • To prove or protect our legal rights; and
  • To buyers or potential buyers of this company in the event that we seek to sell the company.

If you follow hyperlinks from our Site to another site, please note that we are not responsible for and have no control over their privacy policies and practices.

6. How Long We Store Personal Data:

User data will be stored until the purpose the data was collected for has been achieved. You will be notified if your data is kept for longer than this period.

Where a period is fixed, it is:

  • Enquiries, bookings and registrations: kept for as long as you are a customer and for seven years afterwards, which is the period Canadian tax and business records law requires.
  • The texts, emails and call details between you and your centre, and the AI assistant's summary of them: kept for the same period as enquiries, bookings and registrations. Call recordings and voicemail audio stay with Quo, under its retention.
  • Analytics: 14 months, after which Google Analytics deletes the underlying records. The aggregate reports built from them contain no individual and are kept indefinitely.
  • Advertising: conversion and audience data is retained by Google and by Meta under their own schedules; a Google Ads remarketing audience expires no more than 540 days after your visit.
  • Cookies: each cookie has its own lifetime, listed in section 12.
  • Your privacy choice: six months, after which we ask again.

7. How We Protect Your Personal Data:

In order to protect your security, we use the strongest available browser encryption and store all of our data on servers in secure facilities. All data is only accessible to our employees. Our employees are bound by strict confidentiality agreements and a breach of this agreement would result in the employee's termination.

While we take all reasonable precautions to ensure that user data is secure and that users are protected, there always remains the risk of harm. The Internet as a whole can be insecure at times and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.

8. Children:

We do not knowingly collect or use personal data from children under 13 years of age. If we learn that we have collected personal data from a child under 13 years of age, the personal data will be deleted as soon as possible. If a child under 13 years of age has provided us with personal data their parent or guardian may contact our privacy officer.

9. How to Access, Modify, Delete, or Challenge the Data Collected:

If you would like to know if we have collected your personal data, how we have used your personal data, if we have disclosed your personal data and to who we disclosed your personal data, or if you would like your data to be deleted or modified in any way, please contact our privacy officer here:

(844) 326-3377

[email protected]

6981 Millcreek Dr, Unit 11, Mississauga, ON L5N 6B8

If you hold an account in the Ultimate Coders parent app and want that account and its data deleted, Delete your Ultimate Coders parent account sets out the steps, what we delete and what we keep.

10. Do Not Track Notice:

Do Not Track ("DNT") is a privacy preference that you can set in certain web browsers. We do not track the users of our Site over time and across third party websites and therefore do not respond to browser-initiated DNT signals.

11. How to Opt-Out of Data Collection, Use or Disclosure:

In addition to the method(s) described in the How to Access, Modify, Delete, or Challenge the Data Collected section, we provide the following specific opt-out methods for the forms of collection, use, or disclosure of your personal data:

  • Analytics and advertising cookies. Open "Cookie Preferences" in the footer of any page. You can withdraw a consent you previously gave, or narrow it to analytics only, and the change takes effect immediately. Withdrawing does not undo measurement that already happened before you withdrew.
  • Marketing emails. Click "unsubscribe" at the bottom of any marketing email.
  • Texts from your centre. Reply STOP to a text from your centre to stop its texts, including the AI assistant's; reply START to turn them back on.
  • The AI assistant. Ask for a person in any message, and the assistant stops answering you; someone from your centre replies instead.

12. Cookie Policy:

A cookie is a small file stored on your device by a website. Some are needed for the Site to work; others exist to measure how the Site is used or to support our advertising, and those run only if you agree to them. You can change your answer at any time through "Cookie Preferences" in the footer of every page, and you can also block or delete cookies in your browser's own settings.

What follows is every tool that runs on this Site, what it collects, and how long it keeps it.

Strictly necessary - always on

These run whether or not you consent, because the Site cannot serve you a page without them. None of them is used for analytics or advertising.

  • Your location choice (Ultimate Coders; cookie location-id, 400 days). Remembers the centre you selected so that prices, schedules and contact details are the ones near you. Stores an internal location number and nothing about you.
  • Your privacy choice (Ultimate Coders; cookie uc-consent, 6 months). Stores the answer you gave to this Cookie Policy, the time you gave it and the policy version it was given against. Without it we would have to ask you on every page.
  • Cloudflare (cookies __cf_bm, 30 minutes; cf_clearance, up to 1 year). Serves the Site and tells human visitors from automated traffic. Collects your IP address, your browser's user agent and the requests you make.
  • Stripe (cookies __stripe_mid, 1 year; __stripe_sid, 30 minutes). Loads only on the camp checkout page and on the payment step of a class registration. Processes your payment and detects card fraud. Collects your payment details and how you interact with the payment form.
  • Google Maps (cookies set by google.com). Draws the maps on our location pages. Google receives your IP address and, if you allow it in your browser, your device's location. This is how the Site shows you where a centre is, so it is not treated as advertising - but it is a request to Google, and you can stop it by blocking third-party requests in your browser.
  • Google Tag Manager (no cookies of its own). Loads the tools below and applies your privacy choice to them. It is loaded on every page precisely so that a "no" can be enforced; it collects nothing by itself.

Analytics - only if you agree

  • Google Analytics 4 (cookies _ga and _ga_*, 2 years). Tells us which pages parents actually use, which programs draw interest, and where people give up. Collects the pages you view, the links you click, a randomly generated visitor number, your approximate location from your IP address, and your device and browser type. It does not receive your name, email, phone number or anything about your child. Retained for 14 months.

If you decline, Google Analytics still runs but sets no cookies, stores nothing on your device, and cannot recognise you between visits or pages; Google estimates aggregate totals from what remains.

Advertising - only if you agree

  • Meta Pixel and Conversions API (cookies _fbp and _fbc, 90 days). Tells us which of our Facebook and Instagram ads lead to a booking, and lets us show our ads to parents like you. When you complete a form, we send Meta the fact that it happened along with your email, phone number, city and postal code converted into an irreversible code (a SHA-256 hash) that Meta can compare against its own records but that cannot be turned back into your details. We never send anything about your child - not a name, not an age, not a grade, not a note you wrote us. If you decline, no Meta tag loads and no event is sent, from your browser or from our servers.
  • Google Ads (cookie _gcl_au, 90 days). Measures which ads led to a booking and lets us show our ads to people who have visited before. Collects the pages you viewed and the ad click that brought you here. When you complete a form, we also send Google the fact that it happened along with your email address, phone number and name converted into an irreversible code (a SHA-256 hash), which Google compares against its own records to tell whether an ad it showed you led to your booking. This is the same technique described for Meta above, and the same limits apply: Google cannot turn the code back into your details, and we never send anything about your child. Your city and postal code are not sent to Google at all, because Google will accept those two only in readable form and we will not send them that way. A remarketing audience you enter expires no more than 540 days later. If you decline, no advertising identifier is stored or read.
  • Where your visit came from (Ultimate Coders; your browser's session storage, until you close the tab). Notes the ad campaign and the Google or Meta ad click that brought you here, and the page you arrived on. When you send one of our forms, we keep them with what you sent, so that we can tell which of our ads bring families to us. If you decline, nothing is kept or sent.

Doing without cookies entirely

Every browser can block or delete cookies, and this Site keeps working when you do - you will simply be asked for your location again, and asked this question again, on each visit.

13. Modifications:

This Privacy Policy may be amended from time to time in order to maintain compliance with the law and to reflect any changes to our data collection process. When we amend this Privacy Policy we will update the "Effective Date" at the top of this Privacy Policy. We recommend that our users periodically review our Privacy Policy to ensure that they are notified of any updates. If necessary, we may notify users by email of changes to this Privacy Policy.

14. Contact Information:

Please contact us if you have any questions or concerns. Our contact details are as follows:

(844) 326-3377

[email protected]

6981 Millcreek Dr, Unit 11, Mississauga, ON L5N 6B8