Privacy Policy

Last updated: January 15, 2026

Journey Logic CX (“Journey Logic”, “we”, “us”, “our”) provides content, programs, and community resources that help creators, coaches, and entrepreneurs build visibility.
Registered address: 31 Ten Oaks Blvd., Ontario, Canada.
Website: https://www.journeylogic.ca

Privacy Officer (Canada): privacy@journeylogic.ca
Under Canada’s PIPEDA, organizations must designate an individual accountable for privacy compliance (often called a Privacy Officer). 

This Policy explains what personal information we collect, how we use it, the legal bases we rely on, how long we keep it, with whom we share it, your rights, and how to contact us. It applies to our website, pages where our livestreams or replays are hosted/embedded, and related services (collectively, the “Service”).

What we collect

Information you provide directly

• Contact and account info (e.g., name, email, phone).
• Community interactions (e.g., messages/posts in our community or comments on public livestream pages).
• Transactions (e.g., billing details if you purchase an offer).
• Preferences (e.g., communication settings).

Information collected automatically

• Usage/technical data (e.g., IP address, device/browser type, pages viewed, referring URLs, and timestamps).
• Cookies & similar tech (pixels, tags, local storage, device identifiers) for core functionality, analytics, and—only with consent—marketing/retargeting. EU cookie consent rules come from the ePrivacy Directive and the GDPR’s consent standard.

Sources of personal information

• Directly from you (forms, registrations, community).
• Automatically via cookies/SDKs when you use the Service.
• Third parties (e.g., email providers, analytics, payment processors, livestream/video platforms) where permitted by law and your settings.

Why we use your information (purposes) & legal bases

We process personal information for the following purposes. Where required (e.g., in the EU/EEA/UK), we identify the GDPR legal bases under Article 6.

1. Provide and improve the Service (operate the site, host livestreams/replays, troubleshoot, security). 
   • Legal bases: contract, legitimate interests, legal obligation (security).

1. Communications (transactional emails, service updates, Q&A reminders, program notices). 
   • Legal bases: contract, legitimate interests. 

1. Marketing with consent (news, offers, events). We comply with CASL: consent, identification, and unsubscribe in every message. You can opt out anytime. 
2. Analytics and performance (understand usage to improve content). Non‑essential analytics run with consent where required; see Cookies below. 
   • Legal bases: consent or legitimate interests, depending on region. 

1. Compliance and enforcement (comply with law, respond to lawful requests, protect rights). 
   • Legal bases: legal obligation, legitimate interests. 

Cookies & similar technologies

We use:

• Essential cookies (security, session, preferences) — no consent required.
• Analytics cookies (e.g., Google Analytics 4/360) — consent where required; we honor choices. GA4 limits user/event data retention by settings; see Data Retention. 
• Marketing cookies (retargeting) — only with prior consent in jurisdictions requiring it. 

You can manage preferences via our cookie banner (EEA/UK) and your browser settings. The ePrivacy/GDPR framework requires informed, freely given, specific consent for non‑essential trackers. 

“Do Not Sell or Share” (California) & Global Privacy Control (GPC)

If you are a California resident, you have the right to opt out of “sale” or “sharing” of personal information (including for cross‑context behavioral advertising). We honor Global Privacy Control (GPC) signals as a valid opt‑out where applicable. Use our homepage link “Do Not Sell or Share My Personal Information” or enable a GPC‑compatible browser/extension. 

International data transfers

We may process data in Canada, the U.S., and other locations where our providers operate. For transfers from the EEA/UK to countries without an adequacy decision, we use Standard Contractual Clauses (SCCs) or other appropriate safeguards under GDPR Chapter V. 

How we share information

We do not sell personal information. We share data only with:

• Service providers/Processors (hosting/CDN, email & marketing automation, analytics, payment processors, livestream/video platforms, community platform). Contracted to use data only per our instructions with appropriate safeguards. (Examples of categories are provided for transparency; exact providers may change over time.)
• Business transfers (merger, acquisition) with notice as required.
• Legal compliance (lawful requests, enforcement, fraud/security).

When we use third parties for analytics/ads, those parties may receive limited data as necessary to provide their services, subject to your consent and opt‑out rights. 

Data retention

We keep personal information only as long as necessary for the purposes outlined above, then delete or anonymize it under documented schedules:

• Account & transaction data: duration of relationship + up to 7 years (tax/legal).
• Marketing contacts: until you withdraw consent or after 24 months of inactivity, whichever comes first.
• Analytics (GA4 user/event data): follows property‑level retention settings (e.g., 2 or 14 months by default; longer options for GA4 360), independent from aggregated reports. 

Retention may vary if required by law or to establish/defend legal claims.

Your rights

Canada (PIPEDA)

You have rights to access, correct, and challenge how we handle your personal information. You may contact our Privacy Officer. PIPEDA is built on 10 fair information principles, including accountability, consent, limiting collection, safeguards, openness, access, and challenging compliance. 

EU/EEA/UK (GDPR)

Subject to conditions and exceptions, you may have the right to access, rectification, erasure, restriction, portability, object, and not to be subject to certain automated decisions. We respond within one month (extendable by two months for complex requests).
You may also lodge a complaint with your supervisory authority. 

California (CCPA/CPRA)

You may have the right to know/access, delete, correct, opt out of sale/sharing, limit use of sensitive personal information, and non‑discrimination for exercising your rights. We also provide Notice at Collection and honor GPC signals. 

How to exercise your rights: Email privacy@journeylogic.ca or use links provided in our footer (where available). We will verify your request consistent with applicable laws.

Children’s privacy

Our Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you are a parent/guardian and believe your child has provided personal information, contact us to delete it. U.S. operators that target children must comply with COPPA; the FTC adopted amendments effective June 23, 2025, with most compliance required by April 22, 2026.

Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we process. However, no method of transmission or storage is 100% secure.

Automated decision‑making / profiling

We do not use automated decision‑making that produces legal or similarly significant effects about you. If we introduce such processing, we will provide required notices and choices (GDPR Art. 22 framework). 

AI‑assisted processing

We may use privacy‑preserving AI tools to summarize support interactions or improve user experience (e.g., de‑identified analytics or content tagging). We do not use AI to infer sensitive attributes or make eligibility decisions. Any AI vendor we use must meet contractual and security requirements consistent with applicable laws. (If this changes, we will update this notice.)

Third‑party links & embedded media

Our site may link to third‑party sites or embed content (e.g., YouTube livestreams/replays). Those third parties may collect data subject to their own policies. Please review their privacy notices.

Regional disclosures

• Quebec/AB/BC private‑sector laws: Where applicable, we follow provincial privacy requirements substantially similar to PIPEDA for intra‑provincial activities. [
• International transfers (EEA/UK): SCCs and other safeguards used for transfers to countries lacking adequacy decisions. 
• Universal Opt‑Out Signals (U.S. states): We recognize GPC where required by state law and in line with evolving enforcement trends. 

Changes to this Policy

We may update this Policy from time to time. We will post changes here and update the “Last updated” date. If changes are material, we may provide additional notice (e.g., email or banner).

Contact us

• Privacy Officer: privacy@journeylogic.ca
• General inquiries: info@journeylogic.ca  

Privacy Policy