Privacy Policy
Because we actually mean it.
At Your Privacy Girl, privacy is not a checkbox. It is the entire point. This policy tells you exactly what information we collect, why we collect it, and how we protect it. No buried clauses. No surprises.
We also believe that a privacy policy should say something about how a company actually operates. That is why you will find an ethics section in this policy about our use of artificial intelligence. Because if we are going to teach privacy, we have to live it too.
Who We Are
Your Privacy Girl is a Canadian health privacy education company founded and operated by Kristi, a privacy professional with nearly two decades of experience in Canadian privacy. We are based in Calgary, Alberta and serve practices across Canada.
Website: yourprivacygirl.ca
What Information We Collect
When you purchase the Privacy Masterclass Certification or create an account on our platform, we collect:
Your name. Your email address. Your payment information processed securely through WooCommerce. Your course progress and completion records through our learning management system.
We collect only what we need. Nothing more.
Why We Collect It
We use your information to:
Process your enrollment and payment. Give you access to your course. Send you important updates about your certification. Issue your Privacy Masterclass Certification upon completion. Communicate with you about your account.
We do not sell your information. We do not share your information with third parties for marketing purposes. Ever.
Consent
By purchasing the Privacy Masterclass Certification and creating an account on our platform, you are confirming that you have read this policy and consent to the collection and use of your personal information as described here.
Payment Information
Payments are processed securely through WooCommerce. Your payment card information is never stored on our servers. It is handled directly by our payment processor in accordance with PCI DSS standards.
PCI DSS stands for Payment Card Industry Data Security Standard. It is a set of security rules created by the major credit card brands — Visa, Mastercard, and American Express — to make sure your card information is handled safely every time you make a purchase online. In plain terms, it means your payment information goes directly to a certified payment processor. We never see it. We never store it. It never touches our servers.
Your financial information is protected the moment you hit purchase.
Cookies
Yes, our website uses cookies. Here is what that actually means.
Cookies are small text files that are placed on your device when you visit our site. They help the site function properly and help us understand how people are using it.
We use cookies for:
Keeping you logged in to your course account. Remembering your preferences. Understanding basic site traffic through analytics.
We do not use cookies to track you across other websites or sell your data to advertisers.
You can control cookies through your browser settings at any time. Note that disabling cookies may affect how the site and your course platform function.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with access to your certification records. If you request deletion of your account, we will remove your personal information within a reasonable timeframe, except where we are required to retain it for legal or regulatory purposes.
If you have questions about how long we keep your information, reach out to kristi@yourprivacygirl.ca.
How We Protect Your Information
We take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, or misuse. Your course data is stored on our secure learning management platform. We select tools and platforms that take security seriously.
In plain terms that means your information is stored on password protected, encrypted platforms. Access to your personal information is limited to what is necessary to deliver your course and certification. We do not leave doors open that should be closed.
When your information is no longer needed, it is destroyed securely. That means it is not simply deleted from a desktop. It is removed in a way that makes it unrecoverable. Because getting rid of information properly is just as important as protecting it while you have it.
What We Will Never Do
We will never sell your information.
We will never share your data with advertisers.
We will never use your information to market to you without your consent.
We will never make decisions about your account using automated systems without human oversight.
We will never hide what we do with your information in language designed to confuse you.
This is a privacy education company. We hold ourselves to the standard we teach.
Third Party Platforms
We use the following third party platforms to deliver our services:
WooCommerce for payment processing and enrollment. Our learning management system for course delivery and certification.
These platforms have their own privacy policies and security standards. We select partners who take privacy seriously.
Links to Third Party Sites
Our website may contain links to external sites. While we are not responsible for the privacy practices of those sites, we do not link carelessly. We take reasonable steps to ensure that any third party we reference or direct you to is a legitimate and reputable source. We would not send you somewhere we would not go ourselves.
That said, we encourage you to review the privacy policy of any external site you visit. Curiosity about how your information is handled is always a good thing.
Our Use of Artificial Intelligence
At Your Privacy Girl, we believe in transparency. Full stop.
Piper, your guide through the Privacy Masterclass Certification, is an AI generated avatar. She is not a real person. She was built to deliver privacy education in a way that is engaging, memorable, and cinematic. She was created with intention, with care, and with a very specific wardrobe budget.
The course content, the case analysis, the privacy expertise behind every module? That is real. That comes from Kristi. A human being with nearly two decades of lived experience in Canadian privacy.
We use AI as a tool. Not a replacement for expertise. Not a shortcut. A tool.
We do not use AI to make decisions about your account, your data, or your certification. We do not use AI to collect or analyze your personal information beyond what is described in this policy.
If you have questions about how AI is used in our platform or our content, ask. kristi@yourprivacygirl.ca
We will answer you directly. Because that is the standard we hold everyone else to.
Who Wrote This Policy
This policy was written by a privacy professional. Not a lawyer. Not a template generator.
Kristi has spent nearly two decades working across Canadian privacy, touching industries most people never think about when they think of privacy work. She chose health because it is where the stakes are highest, the stories are most compelling, and frankly, the most interesting work is being done.
This policy was written the way she wishes every privacy policy was written. In plain language. With full transparency. Because you deserve to know exactly how your information is handled. And because she knows exactly what it looks like when that standard is not met.
Minors
This platform is intended for healthcare and medical aesthetics professionals. It is not directed at or intended for anyone under the age of 18. If you are under 18, please do not create an account or submit any personal information through this site.
Your Rights
Depending on your province, you have rights regarding your personal information including the right to access it, correct it, and in some cases request its deletion. To exercise any of these rights, contact us at kristi@yourprivacygirl.ca and we will respond promptly.
What Happens If There Is a Breach
In the unlikely event that your personal information is involved in a privacy breach, we will act quickly and transparently.
We will assess the breach and determine the risk of harm to you. If that risk is real, we will notify you directly and without unreasonable delay. We will tell you what happened, what information was affected, and what steps we are taking to address it.
Where required under applicable privacy legislation, we will also report the breach to the appropriate privacy authority.
We will document every breach regardless of whether notification is required. Because accountability does not stop when no one is watching.
Changes to This Policy
If we update this policy we will post the updated version here with a revised date. We encourage you to check back periodically.
Contact Us
Questions about this policy or how we handle your information?
We will get back to you. That is a promise.