Legal
Privacy Policy
Last updated: July 24, 2025
1. Who We Are
"Bold and Centered" ("B&C," "we," "our," "us") provides online programs, community, coaching, and events through boldandcentered.ca, a mobile-friendly web app, and private member spaces powered by GoHighLevel. GoHighLevel is certified under the EU Data Privacy Framework and acts as a data processor.
2. What Information We Collect
Account Data
Name, email, phone, profile photo, tiered-membership level. Legal basis: Contractual necessity.
Billing Data
Last-4 card digits, Stripe customer ID, VAT/HST numbers. Stripe processes payments as PCI-DSS Level 1 — raw card data is never stored by us.
Usage & Device Data
IP address, browser type, pages visited, in-app actions. Legal basis: Legitimate interest.
Marketing & Cookie Data
Google Analytics 4 first-party cookies, Meta Pixel events. Legal basis: Consent (cookie banner).
3. How We Use Your Information
- Deliver services — authenticate logins, display content, maintain community forums.
- Process payments & subscriptions with Stripe Checkout (tokenized card data).
- Email for service messages or newsletters/promotions when opted-in per CASL.
- Improve the platform through aggregated analytics reports (no PII sent to Google).
4. Cookies, Analytics & Tracking
A cookie consent banner is displayed on the site. Google Analytics 4 operates as a data processor — IPs are truncated and no PII is sent. Meta Pixel fires only after user consent.
5. Sharing & International Transfers
We never sell data. We share only with Stripe, GoHighLevel/LeadConnector, and Google LLC (Analytics). Both GoHighLevel and Stripe participate in the EU-U.S. Data Privacy Framework.
6. Security
All traffic is forced over HTTPS/TLS 1.2+. Stripe encrypts data in transit and at rest and undergoes annual SOC 2 & PCI audits.
7. Your Rights
Canada (PIPEDA)
Access, correction, deletion, challenge compliance. Email info@boldandcentered.ca
EU/EEA (GDPR)
Access, erasure, data portability, restriction, objection. Same email; complaints to your local DPA.
California & US States
Right to know, delete, opt-out of sale. We do not sell personal data.
8. Retention
Billing records are kept for 7 years (tax law). Inactive community accounts are deleted after 24 months.
9. Contact
Email: info@boldandcentered.ca
10. Changes to This Policy
Updates will be posted here and members emailed for material changes. Continued use after notification equals acceptance of the revised policy.