Privacy Policy
Effective date: 15 September 2026 Last updated: 17 September 2026
1. About this policy
Connec2You respects your privacy. This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, how we protect it, and the choices and rights you have.
It applies to the website at connec2you.com (the "Site") and to our coaching, facilitation, workshop, programme and digital product services (the "Services").
"Personal information" means information about an identifiable individual.
We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. If you are in the European Economic Area or the United Kingdom, section 18 also applies to you. If you are in Quebec, section 19 also applies.
2. Who we are, and who to contact
Connec2You Inc. is the organization responsible for the personal information described in this policy.
Our Privacy Officer is accountable for our compliance with it and will answer any question, access request or complaint.
Privacy Officer: Natalie Stuart Connec2You Inc. 28 Dreamland Lane Mount Albert, Ontario L0G 1M0 Canada [email protected]
3. What personal information we collect
Information you give us directly.
| When | What we collect |
|---|---|
| Using the contact form | Your name, email address and the content of your message. All three are required |
| Booking a consultation | Your answers to our intake questions, and the name, email, phone number and any notes you enter in our scheduling provider |
| Joining a waitlist or subscribing to The Journal | Name and email address |
| Purchasing a Service | Name, email address, billing address, organization name and role, and the details needed to invoice you |
| Coaching, facilitation or programme participation | Your goals, your responses to assessments and reflection exercises, and our working notes from sessions |
| Group sessions, in person or virtual | Attendance, anything you choose to share in the session, and any recording made under section 9 |
Information we collect automatically when you visit the Site. Our website host may collect your IP address, browser and device type, operating system, referring page, the pages you view, the time and duration of your visit, and similar technical information, through cookies and similar technologies. See section 15.
Information from other sources. If you interact with us on LinkedIn or Instagram, we see whatever those platforms make visible to us. If your employer enrols you in a coaching or facilitation engagement, we receive your name, contact details and role from them.
Payment information. We do not collect or store your full credit card number. Payments are processed by our payment providers, which handle card data directly. We receive only confirmation of payment and limited details such as the last four digits, card type and billing name.
Sensitive information. Coaching conversations can touch on personal, health-related or otherwise sensitive matters. We do not ask for sensitive information. We collect only what you choose to share, and we treat anything of this kind with a higher standard of care: restricted access, and no disclosure without your express consent except as set out in section 11.
4. Information about people who are not our clients
Some of what we hold is about people who have never engaged us directly. We want to be clear about that, because it is easy to miss.
People who give feedback in a 360 assessment. Where a client takes part in a 360 assessment, that client nominates colleagues, reports, managers and others to give feedback about them. The assessment provider invites those people and collects their responses on its own platform. If you have been invited to give feedback about someone:
Your individual responses are confidential to you. We see them only in aggregated or anonymised form, and we do not disclose who said what.
We use your feedback for one purpose, which is the coaching conversation with the person you gave feedback about.
You can decline to take part, and you can contact our Privacy Officer at [email protected] with any question about your information.
People our clients talk about. Clients sometimes mention colleagues, family members or others in a session. Anything of that kind that appears in our working notes is held under the same confidentiality and security as the rest of the client record, and is never used for any purpose other than the coaching itself.
People named on an organizational engagement. Where an organization engages us, we receive contact details for the participants and for the people administering the engagement.
5. Why we collect personal information
We identify our purposes before or at the time we collect information. We use personal information to:
Respond to your enquiries and schedule consultations.
Deliver, administer and improve the Services you have booked or purchased.
Prepare for and follow up on coaching, facilitation, workshop and programme sessions.
Process payments, issue invoices and receipts, and keep the financial records we are legally required to keep.
Give you access to digital products, course content and member areas.
Send you service-related messages you would expect, such as booking confirmations, reminders, schedule changes, access details and account notices.
Send you newsletters and marketing about our Services, where you have consented. See section 7.
Understand how the Site is used so we can improve it.
Maintain the security and integrity of the Site and our systems.
Comply with our legal, tax, regulatory and professional obligations, including the ICF Code of Ethics.
Establish, exercise or defend legal claims.
We do not sell your personal information, rent it, or trade it. We do not use your coaching content, session notes, assessment responses or the contents of your messages to train artificial intelligence or machine-learning models, and we do not permit our service providers to do so on our behalf. We do not use any artificial intelligence notetaker, transcription tool or assistant on session content.
6. Consent
We collect, use and disclose personal information with your knowledge and consent, except where the law allows or requires otherwise.
Express consent is asked for where the information is sensitive, where we want to send you marketing, where we want to record a session, and where we want to use your name or story in our marketing.
Implied consent applies where the purpose is obvious and you provide the information voluntarily, for example giving us your email address so we can reply to your enquiry.
Only what we need. We ask for the information we genuinely need to deliver a Service, and we tell you if something is optional.
Withdrawing consent. You may withdraw your consent at any time, subject to legal and contractual restrictions, by writing to [email protected]. We will explain the consequences before we act. For example, we cannot continue a coaching engagement without the information needed to deliver it. Withdrawal is not retroactive and does not affect records we are required to keep.
7. Email and marketing
We send commercial electronic messages in accordance with Canada's Anti-Spam Legislation (CASL).
We add you to our newsletter or marketing list only where you have given consent, for example by subscribing to The Journal, joining a waitlist, or asking to hear from us, or where CASL's implied-consent rules apply, such as an existing business relationship.
Every commercial message we send identifies us, gives our mailing address, and includes a working unsubscribe link that takes effect promptly.
You can unsubscribe at any time using the link in any message, or by emailing [email protected].
Unsubscribing from marketing does not stop essential service messages about a Service you have purchased, such as booking confirmations, schedule changes, access details and receipts.
We keep records of consent as CASL requires.
8. Assessments
Coaching engagements may include one or more assessments, currently the Leadership Circle Profile 360 and the Hogan Leadership Development Assessment.
These are completed on the assessment provider's own platform, not on ours. Your responses and results are held by that provider under its own terms and privacy policy, as well as being handled by us under this one. We tell you which assessment applies before you begin, and we do not run an assessment without your agreement.
Results are used as a coaching tool to open a conversation. They are not clinical, diagnostic or psychological evaluations, and they are never used to make a decision about you without a conversation with you. See section 10.
Where a 360 assessment gathers feedback from other people, section 4 explains how that feedback is handled.
Where your employer sponsors an assessment, what is shared with them is agreed in writing in advance and with your knowledge. Our default is that your individual results are yours alone.
9. Recording of group sessions
We sometimes record group sessions through Zoom so that participants who could not attend can catch up. One-to-one coaching sessions are not recorded unless you ask us to record one and we agree in writing.
Where a session will be recorded, we tell participants before recording starts. You can ask us to stop, ask to be edited out, or take part with your camera off, muted, or through the chat instead.
Recordings are shared only with participants enrolled in that Programme or Workshop. They are not sold, published, or used in marketing. Retention is set out in section 14, and you can ask us to delete a recording you appear in by writing to [email protected].
10. Automated decision-making
We do not make decisions about you by automated means alone. Assessment results are interpreted by a person, in conversation with you, and are never used to make a decision about you without human involvement.
11. Who we share personal information with
We share personal information only as described here.
Service providers. We use third-party providers to run our business. They may access personal information only to perform services for us, under contractual obligations to protect it and to use it for no other purpose.
| Provider | What it does | What it may handle |
|---|---|---|
| Kajabi | Website, course and membership hosting, forms, email delivery, contact records, and site analytics | Name, email, form responses, purchase and access records, site usage |
| Kajabi Payments | Payment processing | Name, billing details, card data handled by the processor rather than by us, transaction records |
| Stripe | Payment processing | Name, billing details, card data handled by Stripe rather than by us, transaction records |
| PayPal | Payment processing | Name, billing details, transaction records, and whatever your PayPal account shares with us |
| Acuity Scheduling | Appointment scheduling for consultations and sessions | Name, email, phone, booking details, anything you enter in the booking notes |
| Zoom | Virtual session delivery and group session recordings | Name, email, meeting attendance, and any recording made under section 9 |
| The Leadership Circle | Leadership Circle Profile 360 assessment | Your responses and results, and the responses of people who give feedback about you |
| Hogan Assessment Systems | Hogan Leadership Development Assessment | Your responses and results |
We do not use an external bookkeeper or accountant. Financial records are handled by us directly.
Organizational clients. Where an organization pays for coaching or facilitation for its people, what we report back to that organization is agreed in writing in advance, with the participants' knowledge. Our default is that individual session content is never reported. Only themes, attendance and progress against agreed goals are shared, and only where all parties have agreed.
Legal and protective disclosures. We may disclose personal information without your consent where the law requires or permits it, including in response to a valid court order, subpoena, warrant or lawful request from a government or regulatory authority, where necessary to establish, exercise or defend a legal claim or to collect a debt, and where we reasonably believe disclosure is necessary to prevent a serious and imminent risk of harm to you or another person.
Business transaction. If our business is sold, merged or reorganized, personal information may be transferred as part of that transaction, subject to the acquirer's agreement to protect it under terms consistent with this policy. We will notify you if a transfer materially changes how your information is handled.
With your consent. Any other disclosure is made only with your consent.
12. Storage outside Canada
All of the service providers listed in section 11 are located in, or store data in, the United States. This means your personal information may be stored or processed outside Canada, and may be accessible to the courts, law enforcement and national security authorities of those countries under their laws.
We use providers that offer a commercially reasonable standard of protection and contractual commitments to safeguard the information they process for us. For more about our practices concerning service providers outside Canada, contact our Privacy Officer at [email protected].
13. How we protect personal information
We protect personal information with safeguards appropriate to its sensitivity. In practice that means:
Multi-factor authentication on our Kajabi account and on our email.
Devices that are encrypted and password locked.
Paper notes kept locked away, and shredded when no longer needed.
Access to client records limited to Natalie Stuart alone.
Session notes kept separately from general business files.
Encryption in transit and at rest through the providers listed in section 11.
Coaching notes and assessment responses are held with the most restricted access of anything we hold.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please do not send sensitive information, and never send payment card details, by email or through a web form.
14. How long we keep personal information
We keep personal information only as long as needed for the purposes it was collected for, or as required by law.
| Information | How long we keep it |
|---|---|
| Enquiries and consultations that do not become engagements | Twelve months from last contact |
| Client records, coaching notes and assessment responses | Seven years after the engagement ends |
| Financial and tax records | Seven years, as required by the Income Tax Act |
| Group session recordings | For as long as participants have access to that Programme or Workshop, and for up to twelve months after it ends |
| Newsletter and marketing lists | Until you unsubscribe, plus a suppression record so that we do not contact you again |
| Records of consent under CASL | Three years after consent is withdrawn |
| Site analytics | As set by Kajabi for its own site analytics |
When personal information is no longer needed, we destroy, erase or anonymize it securely.
15. Cookies and tracking
The Site uses cookies and similar technologies. Cookies are small files stored on your device.
Necessary cookies are set by our website host and are needed for the Site to work, including keeping you logged in, remembering items in a cart, and protecting against fraud. The Site cannot function without them.
Analytics cookies are set by Kajabi's own site analytics, which is part of the platform hosting this Site. They tell us, in aggregate, which pages people visit and how they found us. We do not use a separate third-party analytics service, so this information is not passed to another company for its own purposes.
Marketing and advertising cookies. We do not use any. There is no Meta, LinkedIn or Google Ads pixel on the Site, and no third-party advertising or cross-site tracking technology.
You can control cookies through your browser settings, including blocking or deleting them. Blocking necessary cookies may break parts of the Site, including login and checkout.
Embedded content from other sites, such as a video or a scheduling widget, may set its own cookies, which we do not control.
The Site does not currently respond to browser "Do Not Track" signals, as there is no common standard for doing so.
16. Your rights and choices
Subject to limited legal exceptions, you may:
Access your personal information, and ask for an account of how it has been used and to whom it has been disclosed.
Correct information that is inaccurate or incomplete.
Withdraw consent, including consent to marketing. See sections 6 and 7.
Ask us to delete information we no longer need for a legal or business purpose.
Complain about how we have handled your information. See section 22.
To exercise any of these, email our Privacy Officer at [email protected]. We may ask you to confirm your identity first, so that we do not disclose your information to someone else.
We respond to access requests within 30 days, or tell you within that time if we need an extension and why. Access is free. If a request requires substantial effort we will tell you the cost in advance, and you can withdraw or narrow the request.
When we may not be able to comply. We may refuse or limit access where doing so would reveal personal information about another person, including another participant in a group or someone who gave feedback in a 360 assessment, where the information is subject to solicitor-client privilege, where it was generated in a formal dispute resolution process, or where the law otherwise permits us to refuse. If we refuse, we will tell you why in writing and how you may challenge the decision.
17. Children
The Services are for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact [email protected] and we will delete it.
18. If you are in the EEA or the UK
We work with clients outside Canada. Where the EU or UK General Data Protection Regulation applies to our handling of your information, the following also applies.
Legal bases. We rely on contract, to deliver a Service you have purchased and to take steps before entering into it. On consent, for marketing emails, session recordings, and any sensitive information you choose to share. On legitimate interests, to run and secure our business, understand how the Site is used, and defend legal claims, where those interests are not overridden by your rights. And on legal obligation, to keep financial records and comply with the law.
Your rights. In addition to the rights in section 16, you may have the right to erasure, to restrict processing, to object to processing based on legitimate interests, to data portability, and to withdraw consent at any time. You may lodge a complaint with your local supervisory authority, or with the UK Information Commissioner's Office at ico.org.uk.
International transfers. Your information is transferred to Canada and to the United States. Canada benefits from an EU adequacy decision for commercial organizations subject to PIPEDA. Where a transfer is not covered by an adequacy decision, we rely on Standard Contractual Clauses or another approved safeguard through our service providers.
19. If you are in Quebec
Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25, gives Quebec residents additional rights. In particular, you may ask us to communicate the personal information you provided to us in a structured, commonly used technological format, and you may ask us to cease disseminating information or to de-index a link where dissemination contravenes the law or a court order.
The Privacy Officer named in section 2 is the person in charge of the protection of personal information for these purposes. Contact [email protected] to exercise these rights.
20. If there is a breach
If a breach of our security safeguards creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and notify you as soon as feasible. We keep records of breaches as PIPEDA requires.
21. Changes to this policy
We may update this policy from time to time. The current version is always posted on the Site with its effective date. If we make a material change to how we handle personal information we have already collected, we will take reasonable steps to notify you and, where required, ask for your consent again.
22. How to raise a concern
If you have a question or complaint about your privacy, contact our Privacy Officer first at [email protected]. We will acknowledge your complaint, investigate it, and tell you the outcome and any steps we have taken.
If you are not satisfied with our response, you may contact:
Office of the Privacy Commissioner of Canada 30 Victoria Street, Gatineau, Quebec K1A 1H3 Toll-free 1-800-282-1376, telephone 819-994-5444 priv.gc.ca
Quebec residents may also contact the Commission d'accès à l'information du Québec at cai.gouv.qc.ca. Residents of Alberta and British Columbia may have recourse to their provincial commissioner.
23. Contact us
Privacy Officer: Natalie Stuart Connec2You Inc. 28 Dreamland Lane Mount Albert, Ontario L0G 1M0 Canada
Privacy: [email protected] General: [email protected] connec2you.com
