Privacy Policy — Still & Flourish

Still & Flourish (“we”, “us”, “our”) respects your privacy. This policy explains what personal information we collect, why we collect it, and the choices you have. It is written in plain Canadian English and reflects our obligations under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy law.

Insert legal business name, business address, jurisdiction of incorporation, and privacy officer contact email before launch.

Information we collect

Account details you provide — name, email, and password.
Booking and enquiry details — service, preferred dates, notes, and messages you send us.
Order details — items enrolled, subtotal in CA$, and status.
Content interactions — resources you save, courses you view.
Technical information — browser type, device information, and basic access logs required to run the site securely.

How we use your information

To provide the services you request (bookings, courses, resources).
To reply to enquiries and confirm sessions.
To send transactional emails such as booking confirmations, receipts, and password resets.
To send optional newsletter emails only if you opt in.
To keep the platform secure and prevent misuse.

Legal basis and consent

We rely on your consent (for optional communications and analytics), the performance of a contract (for paid services and bookings), and our legitimate interest in running the platform safely.

Sharing

We do not sell your personal information. We share it only with service providers who help us operate the platform (hosting, email delivery, payment processing), and only to the extent necessary. A full list of subprocessors is available on request.

List subprocessors (hosting, email provider, payments) and their regions before launch.

Retention

We keep personal information only as long as needed to provide the service and to meet legal obligations. Account data is retained while your account is active and for a reasonable period afterwards.

Specify retention windows for accounts, bookings, orders, and enquiries before launch.

Your rights

Access — request a copy of the information we hold about you.
Correction — ask us to correct anything that is out of date or wrong.
Deletion — ask us to delete your account and associated data.
Withdraw consent — for newsletter emails and optional analytics at any time.

To exercise any of these rights, contact us at privacy@yourdomain.ca. We will respond within thirty days.

Cookies

We use a small number of strictly necessary cookies to keep you signed in and to remember your consent choices. With your permission, we may also use privacy-respecting analytics. You can change your cookie choices from the “Cookie preferences” link in the footer.

Contact

Questions? Reach us at privacy@yourdomain.ca. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.