Last updated: October 30, 2026
MetaRate (“MetaRate”, “we”, “us”) provides mobile resting metabolic rate (RMR) testing using indirect calorimetry for individuals, clinics, gyms and health professionals in Oakville, Burlington and Mississauga, Ontario. This Privacy Policy explains how we collect, use, disclose, retain and protect your personal information, including information about your health, and the choices you have.
MetaRate is currently operated by Alonso Rodríguez Mortellaro, 5205 Glen Erin Drive, Mississauga, Ontario L5M 5N7, Canada. MetaRate Inc. is expected to be incorporated in February 2027; from that date, MetaRate Inc. will be the organization responsible for your personal information under this policy, and we will update this page accordingly.
1. Laws that apply to us
We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair information principles. Ontario does not have a general private-sector privacy law, so PIPEDA governs our commercial activities in Ontario.
MetaRate offers general wellness testing. We are not a hospital, laboratory or medical clinic, and we do not diagnose or treat any condition. When a test is requested by, or performed on behalf of, a regulated health professional who is a health information custodian under Ontario’s Personal Health Information Protection Act, 2004 (PHIPA) — for example, a physician or registered dietitian — we act as that professional’s agent for the test and follow PHIPA’s rules and their instructions for that information. In every case, we protect health-related information to a standard consistent with PHIPA.
Canada’s federal government has proposed replacing PIPEDA (Bill C-36, the Protecting Privacy and Consumer Data Act). If it becomes law, we will update this policy.
2. Information we collect
Contact and booking information
- Name, email address, phone number and the city or address where the test will take place
- Appointment details, communications with us and, if you join our early access list, your email address and preferences
- Billing details needed to issue receipts (card payments are handled by our payment processor; we do not store full card numbers)
Health and test information
- Information needed to perform the test safely and accurately: age, sex, height, weight, and your answers to a short pre-test screening (for example, recent food, caffeine, exercise, medications or conditions that may affect the result)
- Measurement data from the metabolic analyzer: oxygen consumption (VO₂), carbon dioxide production (VCO₂), respiratory exchange ratio and calculated resting energy expenditure
- Your MetaCheck report and any notes about the conditions of the test
- The name and contact details of a professional you ask us to share results with
Website information
Our website currently uses only essential browser storage needed for it to work. We do not use advertising cookies, tracking pixels or analytics that identify you. If this changes, we will update this policy and ask for your consent where required.
3. How we collect it
We collect information directly from you (by email, phone, booking forms and the pre-test screening), from the metabolic analyzer during your test, and — when a clinic, gym or health professional refers you — from that organization, with your knowledge.
4. Why we use it
- To schedule, prepare for and perform your test
- To confirm the test is appropriate and the result is reliable
- To produce your MetaCheck report and explain it to you
- To share results with a professional you designate
- To send appointment and service messages, and early access updates if you asked for them
- To process payments, keep business records and meet legal obligations
- To improve the quality of our service using de-identified, aggregated information that cannot reasonably identify you
We do not use your health information for advertising, and we do not sell, rent or trade personal information.
5. Consent
We ask for your express consent before collecting health information and before each test. You can withdraw consent at any time by contacting us, subject to legal or contractual restrictions; withdrawing may mean we cannot perform or complete a test. You can unsubscribe from early access or marketing emails using the link in any message or by writing to us.
6. When we share information
- With professionals you choose. We share your results with a physician, dietitian, trainer, clinic or gym only with your consent.
- With service providers. Trusted providers that help us operate (for example, website hosting, email, scheduling, payment processing and the analyzer manufacturer’s software) process information only on our instructions and under confidentiality and security obligations.
- When required by law. For example, to comply with a court order or a legal obligation, or to protect someone’s safety in an emergency.
- Business transfer. If MetaRate is sold or reorganized, information may transfer to the successor, which must protect it as described here.
7. Where your information is stored
Our records and MetaCheck reports are stored on secure servers located in Mexico, with backup copies in the United States. Some other service providers (for example, email or scheduling) may also process information outside Canada. While stored outside Canada, your information is subject to the laws of those countries and may be accessible to their courts, law enforcement and national security authorities. We use contractual and security measures, including encryption in transit and at rest and restricted access, to provide a level of protection comparable to what you would receive in Canada. By booking a test, you acknowledge that your information will be stored outside Canada as described here.
8. How long we keep it
- Early access list: until you unsubscribe, or 12 months after commercial launch if you do not book a test
- Test records and MetaCheck reports: 7 years after your last test, unless a longer period is required by law or by the professional who requested the test
- Financial records: as required by tax law (generally 6 years in Canada)
When information is no longer needed, we securely destroy it or make it anonymous.
9. How we protect it
We use administrative, technical and physical safeguards appropriate to the sensitivity of health information, including encrypted connections (HTTPS), access limited to people who need it, strong authentication, secure storage of devices and records, and confidentiality commitments from anyone who handles personal information. No system is completely secure, but we work to reduce risk and review our safeguards regularly.
10. Privacy breaches
If a breach of our safeguards creates a real risk of significant harm, we will notify affected individuals and report it to the Office of the Privacy Commissioner of Canada as PIPEDA requires (and, where PHIPA applies, notify the responsible custodian and the Information and Privacy Commissioner of Ontario). We keep a record of every breach for at least 24 months.
11. Your rights
- Ask what personal information we hold about you, how it is used and to whom it has been disclosed
- Receive a copy of your information, including your test data
- Ask us to correct information that is inaccurate or incomplete
- Withdraw consent
- Ask us to delete information we no longer need to keep
We will respond within 30 days and may need to confirm your identity first. Access is free of charge in most cases. If we cannot grant a request, we will explain why.
12. Age requirement
Our services are intended for adults 18 years of age and older. We do not knowingly collect personal information from anyone under 18.
13. Questions and complaints
Our Privacy Officer is responsible for our compliance with this policy:
Privacy Officer, MetaRate
Email: hello@metarate.ca (subject: Privacy)
5205 Glen Erin Drive, Mississauga, Ontario L5M 5N7, Canada
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. Where PHIPA applies, you may also contact the Information and Privacy Commissioner of Ontario.
14. Changes to this policy
We may update this policy as our services or the law change. The date at the top shows the latest version. If we make significant changes, we will notify people on our lists by email.