Privacy Policy

Effective date: December 30, 2025. By using leathicia.com (the “Site”) and any related services, you agree to this Privacy Policy.

Leathicia.com is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, when we may share it, how long we retain it, and the choices you have regarding your information

Table of Contents

1. Who we are
2. Scope (website data vs. professional services)
3. Personal information we collect
4. How we use your information
5. Legal basis/consent (plain language)
6. Sharing and disclosure (we do not sell your data)
7. Cookies, analytics, and advertising
8. Comments and Gravatar
9. Embedded content (YouTube)
10. reCAPTCHA
11. How long we retain your information
12. Your rights
13. Security (how we protect information)
14. Data breach / incident response
15. Children
16. Changes to this policy
    References

1) Who we are

Leathicia.com ("we", "us", "our") is operated by Leathicia Turgeon-Dalpé. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit the Site, contact us, book services, or purchase digital products.

Contact (privacy): hello@leathicia.com

2) Scope (website data vs. professional services)

This Privacy Policy covers personal information collected through the Site and related communications (including email and phone) when you:

• Browse the Site
• Subscribe to a newsletter
• Submit a form (including booking/intake forms)
• Purchase a course or digital product (WooCommerce/LearnDash)
• Leave comments

Professional services confidentiality (important): If you engage in professional services, additional confidentiality and recordkeeping obligations apply. We handle information in accordance with professional standards and applicable laws, which means we treat information shared for professional services as confidential, limit access to it, store it securely, and keep records as required by professional and legal obligations.

3) Personal information we collect

Depending on how you interact with us, we may collect:

• Identity & contact: name, email address, phone number, city/province
• Account & purchase: account login details, order history, course access information
• Booking/intake submissions: information you provide in forms (including sensitive information if you choose to share it)*
• Communications: emails, messages, and notes from phone calls related to scheduling or services*
• Comments: comment content, IP address, browser user agent string
• Technical & usage data: device info, pages viewed, approximate location, referral source
• Cookies & similar technologies: as described below

We collect only what is reasonably necessary for the purposes described in this policy.

*Professional services confidentiality (intake & communications): If you submit information through booking/intake forms, email, or phone for professional services, it may include sensitive information. Please share only what you feel comfortable sharing through these channels. We take steps to protect confidentiality and maintain records in line with OPSQ & CRPO professional standards.

4) How we use your information

We use personal information to:

• Provide and administer the Site and services offered.
• Respond to inquiries and schedule appointments (including by email or phone)
• Process purchases and provide access to courses/products
• Deliver newsletters and educational content (you can unsubscribe anytime)
• Improve the Site and user experience
• Maintain security, prevent fraud, and reduce spam
• Meet legal, regulatory, accounting, and professional obligations

Professional services confidentiality (use limits): Information shared for professional services is handled with a focus on confidentiality. We do not use professional-service information for unrelated marketing purposes.

5) Legal basis/consent (plain language)

When required, we rely on your consent (for example, subscribing to a newsletter or accepting cookies). In other cases, we use information because it is necessary to provide services you request, to comply with legal/professional obligations, or to protect the security of the Site.

Professional services confidentiality (consent): For professional services, consent and confidentiality expectations will be addressed through additional service-specific communications and documentation.

6) Sharing and disclosure (we do not sell your data)

We do not sell your personal information to a third party.

We may share personal information with trusted service providers who help us operate the Site and deliver services, such as:

• Website hosting and WordPress-related services
• Payment processing and eCommerce tools (WooCommerce-related)
• Course delivery (LearnDash)
• Email/newsletter tools
• Security and spam prevention tools (including reCAPTCHA and automated spam detection)
• Analytics and advertising tools (Google Analytics and Meta Pixel)
• Embedded content providers (e.g., YouTube)

These providers receive only the information needed to perform their services and are expected to protect it.

We may also disclose information if required by law, regulation, court order, or to respond to lawful requests. When compelled to disclose client information in legal proceedings, we may seek appropriate guidance.

Professional services confidentiality (disclosure): We aim to protect confidentiality. However, in limited circumstances, disclosure may be required or permitted by law.

Limits to confidentiality (professional services): Confidentiality is a core part of professional services. That said, there are specific situations where we may be required or permitted to share information without your consent. This can include circumstances where there is an imminent risk of serious harm to you or to another person, where there are concerns that a child or a vulnerable person is being maltreated or neglected, or where we are required to disclose information by law (for example, in response to a court order or other lawful demand). When disclosure is required, we aim to share only what is necessary, and when appropriate, we will discuss the situation with you as soon as it is safe and feasible to do so.

7) Cookies, analytics, and advertising

We use cookies and similar technologies to:

• Enable core site functionality (e.g., login, preferences)
• Remember comment details (if you opt in)
• Understand how visitors use the Site (Google Analytics)
• Measure advertising performance and build audiences (Meta Pixel)

You can control cookies through your browser settings. Disabling cookies may affect Site functionality.

Professional services confidentiality (tracking note): We do not intentionally place advertising/analytics tracking inside secure course content or professional-service communications beyond what is necessary to operate the Site. (Your web browser and third-party tools may still collect data when you visit pages that include these technologies.)

8) Comments and Gravatar

If you leave a comment, we collect the data shown in the comments form, plus your IP address and browser user agent string for spam detection.

An anonymized string created from your email address (a “hash”) may be provided to Gravatar to see if you use it. Gravatar’s privacy policy: https://automattic.com/privacy/

9) Embedded content (YouTube)

Pages on this Site may include embedded content (e.g., YouTube videos). Embedded content behaves as if you visited the other website and may collect data, use cookies, and track your interaction.

Professional services confidentiality (embedded content): If you access embedded content, your interaction may be tracked by the third-party provider. If you prefer, you can choose not to play embedded videos.

10) reCAPTCHA

We use reCAPTCHA to protect forms from spam and abuse. reCAPTCHA may collect information about your device and interactions to determine whether you are a human user.

11) How long we retain your information

We retain personal information only as long as needed for the purposes described above, including legal, accounting, security, and professional obligations.

Examples:

• Comments: retained indefinitely unless you request deletion (where feasible). Note that we may remove comments for moderation/legal reasons.
• Website accounts: retained while active; inactive accounts may be anonymized after a period of inactivity of 24 months.
• Purchases: retained seven years, as required for accounting/tax and to provide access to products. We do not store payment card data; it is processed by a third party (PayPal or Stripe).
• Booking/intake and service communications: retained in accordance with applicable professional and legal obligations. Sensitive clinical data is kept in the professional record system.
• Newsletter subscriptions/marketing emails: Kept until you unsubscribe. May be kept on a suppression list after 24 months of inactivity.
• Analytics & advertising data (Google Analytics/Meta Pixel): This information is generally collected in a pseudonymous/technical form and used for analytics and advertising measurement and retained for 24 months.

Professional services confidentiality (records): Professional-service records and related communications are retained and managed in accordance with applicable professional obligations and laws. This means that your record will be archived six months after our last communication and deleted 10 years after our last interaction.

If you want specific retention details for a category of information, contact us.

12) Your rights

Depending on your location and applicable laws, you may have rights to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion (subject to legal/professional obligations)
• Withdraw consent (e.g., unsubscribe from emails)

To make a request, email hello@leathicia.com. We may need to verify your identity.

Professional services confidentiality (access): Requests related to professional-service records may be subject to additional requirements and exceptions under applicable laws and professional obligations.

13) Security (how we protect information)

We use a combination of administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These safeguards may include limiting access to personal information on a need-to-know basis, using strong passwords and (where available) multi-factor authentication, keeping WordPress/plugins/themes and security tools up to date, using encryption in transit (HTTPS) for the Site, using reputable third-party providers for payments and form processing (PayPal & Stripe), maintaining secure backups, and monitoring for suspicious activity.

Despite these measures, no system can be guaranteed 100% secure. If you believe your information has been compromised, contact us.

14) Data breach / incident response

If we become aware of a privacy incident, we will take steps to:

• Contain and reduce the risk
• Assess what information was involved and the likelihood of harm
• Notify individuals and/or authorities when required
• Document the incident and corrective actions

Professional services confidentiality (incidents): If a privacy incident involves information related to professional services, we will take additional steps appropriate to the sensitivity of that information. This may include promptly containing the incident, assessing whether the information involved is sensitive and whether there is a risk of serious harm, documenting the incident and the corrective measures taken, and notifying affected individuals and any oversight bodies or authorities when required by applicable law or professional obligations. We will also review our safeguards and update procedures to reduce the risk of recurrence.

15) Children

This site and the services provided are intended for adults. We do not knowingly collect personal information from children under 14. If you believe a child has provided us personal information, please contact us so we can take appropriate steps.

16) Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on the Site with an updated effective date.

References: A-2.1 ; P-39.1 ; C-26, r. 222.1.4 ; C-26, r. 222.1.2.01 ; CRPO Professional Practice Standards (Jan 2024).