bitchingtowitching.com (the “Site”) is the online platform for the From Bitching to Witching coaching program. The Site is owned and operated directly by 2797940 Alberta Inc. (collectively referred to as “the Corporation”, “we”, “us”, or “our”), which serves as the data controller for the Site and can be contacted at:

Data Compliance Manager

Contact Method: Online Contact Form 

Purpose

The purpose of this privacy policy (this “Privacy Policy”) is to inform users of our Site of the following:

1. The personal data we will collect;
2. Use of collected data;
3. Who has access to the data collected;
4. The rights of Site users; and
5. The Site’s cookie policy.

This Privacy Policy applies in addition to the terms and conditions of our Site.

GDPR

For users in the European Union, we adhere to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (the “GDPR”). For users in the United Kingdom, we adhere to the GDPR as enshrined in the Data Protection Act 2018.

We have not appointed a Data Protection Officer as we do not fall within the categories of controllers and processors required to appoint a Data Protection Officer under Article 37 of the GDPR.

Consent

By using our Site users agree that they consent to:

1. The conditions set out in this Privacy Policy.

When the legal basis for us processing your personal data is that you have provided your consent to that processing, you may withdraw your consent at any time. If you withdraw your consent, it will not make processing which we completed before you withdrew your consent unlawful.

You can withdraw your consent by: Users can withdraw their consent at any time by submitting their request directly through our designated Online Contact Form.

All submissions routed through this form are securely encrypted and delivered directly to our privacy compliance team for review and action. Additionally, users can withdraw consent for marketing communications instantly by clicking the ‘Unsubscribe’ link at the bottom of any email newsletter.

Note: Withdrawing consent for essential data processing may result in the termination of coaching services if we can no longer safely or effectively fulfill our coaching agreement.

Legal Basis for Processing

We collect and process personal data about users in the EU only when we have a legal basis for doing so under Article 6 of the GDPR.

We rely on the following legal bases to collect and process the personal data of users in the EU:

1. Users have provided their consent to the processing of their data for one or more specific purposes;
2. Processing of user personal data is necessary for us or a third pary to pursue a legitimate interest. Our legitimate interest is not overriden by the interests or fundamenal rights and freedoms of users. Our legitimate interest(s) are: Our legitimate interests include:
   
   Business Analytics: Analyzing website traffic and user engagement to improve our coaching programs, content, and digital user experience.
   
   Direct Marketing: Informing current and past clients about upcoming coaching cohorts, workshops, webinars, or relevant resources.
   
   Security & Fraud Prevention: Protecting our website, booking platforms, and client portals from malicious activity, unauthorized access, or payment fraud.
   
   Intellectual Property Protection: Ensuring our proprietary coaching materials, PDFs, and courses are not distributed unlawfully.;
3. Processing of user personal data is necessary for us to take, at the request of a user, steps before entering a contract or for the performance of a contract to which a user is a party. If a user does not provide the the personal data necessary to perform a contract the consequences are as follows: If a user chooses not to provide the required personal data (such as their full name, contact information, intake responses, and billing details), we will be unable to enter into a coaching agreement with them, process their payments, or deliver our coaching services.;
4. Processing of user personal data is necessary for us to comply with a legal obligation. If a user does not provide the the personal data necessary for us to perform a legal obligation the consequences are as follows: If a user does not provide their essential personal data (specifically billing names, physical addresses, and transactional details), we cannot issue legally compliant tax invoices or receipts.
   
   We are legally obligated to maintain accurate financial and corporate transaction records under Canadian federal and provincial tax laws (such as the Canada Revenue Agency requirements). Failure to provide this data means we must refuse the transaction.; and
5. Processing of user personal data is necessary to protect the life of the user or another natural person.

Personal Data We Collect

We only collect data that helps us achieve the purpose set out in this Privacy Policy. We will not collect any additional data beyond the data listed below without notifying you first.

Data Collected Automatically
When you visit and use our Site, we may automatically collect and store the following information:

1. IP address;
2. Location;
3. Hardware and software details;
4. Clicked links; and
5. Content viewed.

Data Collected in a Non-Automatic Way
We may also collect the following data when you perform certain functions on our Site:

1. First and last name;
2. Email address;
3. Phone number;
4. Payment information; and
5. Coaching goals, current challenges, or any background information volunteered..

This data may be collected using the following methods:

1. Filling out a Contact Form.;
2. Booking a Coaching Discovery Call or scheduling a session via an embedded calendar.;
3. Signing up for a Newsletter or Freebie via an email opt-in form.;
4. Making a Payment for a coaching package or digital product.; and
5. Filling out a Client Intake Questionnaire..

How We Use Personal Data

Data collected on our Site will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this Privacy Policy.

The data we collect automatically is used for the following purposes:

1. Website Functionality; Security & Monitoring; Performance Analytics.

The data we collect when the user performs certain functions may be used for the following purposes:

1. Service Delivery: To schedule coaching sessions, evaluate intake forms, customize coaching programs, and effectively deliver our life coaching services.;
2. Communication & Support: To respond to your inquiries, send session reminders, provide client support, and manage our ongoing professional relationship.;
3. Billing & Financial Transactions: To securely process payments for coaching packages, issue invoices, and maintain legal financial records for corporate tax compliance.;
4. Marketing Communications: With your explicit consent, to send you email newsletters, updates about new coaching cohorts, workshops, or free educational resources. (You can opt out of these at any time; and
5. Legal & Safety Compliance: To comply with our legal obligations under Alberta and Canadian law, and to protect the physical safety and vital interests of our clients in emergency situations..

Who We Share Personal Data With

Employees
We may disclose user data to any member of our organization who reasonably needs access to user data to achieve the purposes set out in this Privacy Policy.

Third Parties
We may share user data with the following third parties:

1. Payment Processing Services (located in the United States/Canada);
2. Cloud-Based Client Management & CRM Platforms (located in the United States/Canada);
3. Calendar Scheduling & Booking Software (located in the United States);
4. Video Conferencing & Communication Tools (located in the United States);
5. Email Marketing & Newsletter Delivery Platforms (located in the United States); and
6. Web Analytics and Performance Monitoring Providers (United States / Global).

We may share the following user data with third parties:

1. To Payment Processors: Your name, email address, billing address, and credit card details are securely communicated to process payments and issue tax receipts.;
2. To Scheduling & CRM Software: Your name, email address, phone number, and any preliminary notes or intake answers you provide when booking a coaching session.;
3. To Video Conferencing Tools: Your name and email address to generate unique coaching session links and calendar invites.;
4. To Email Marketing Platforms: Your name and email address when you voluntarily opt-in to receive our newsletters, updates, or resources.; and
5. To Web Analytics and Performance Monitoring Providers: Anonymized IP addresses, approximate geographic location, device hardware/software specifications, pages viewed, and links clicked..

We may share user data with third parties for the following purposes:

1. Contractual Fulfillment & Service Delivery: To securely schedule coaching appointments, host digital video sessions, manage client files, and successfully deliver our life coaching services.;
2. Secure Transaction Processing: To process credit card payments, handle billing, and maintain accurate financial records for corporate tax compliance.;
3. Operational Analytics: To monitor website traffic, analyze user behavior, and optimize our website functionality and content performance.;
4. Marketing Delivery: To securely host and distribute our email newsletters and promotional updates to users who have explicitly opted in.; and
5. Security & Infrastructure Maintenance: To protect our digital assets, prevent unauthorized system access, and secure our online booking platforms..

Third parties will not be able to access user data beyond what is reasonably necessary to achieve the given purpose.

Other Disclosures
We will not sell or share your data with other third parties, except in the following cases:

1. If the law requires it;
2. If it is required for any legal proceeding;
3. To prove or protect our legal rights; and
4. To buyers or potential buyers of this company in the event that we seek to sell the company.

If you follow hyperlinks from our Site to another site, please note that we are not responsible for and have no control over their privacy policies and practices.

How Long We Store Personal Data

User data will be stored until the purpose the data was collected for has been achieved.

You will be notified if your data is kept for longer than this period.

How We Protect Your Personal Data

We implement industry-standard technical, administrative, and physical security measures to protect user personal data against unauthorized access, loss, alteration, or disclosure:

Data Encryption: Our website uses Secure Sockets Layer (SSL/TLS) encryption to ensure that all data transmitted between your browser and our site is secure.

Secure Infrastructure: We rely exclusively on established, reputable third-party cloud service providers (such as compliant CRM systems, scheduling tools, and email hosts) that maintain robust, enterprise-grade physical and digital data centers.

Access Controls: Access to client records, intake forms, and communication history is strictly limited to authorized personnel who require the data to deliver services. All systems are protected by strong password policies and Multi-Factor Authentication (MFA) where available.

Payment Security: All credit card and billing transactions are processed through secure, PCI-DSS compliant third-party payment gateways (such as Stripe or PayPal). We do not store or have direct access to your raw financial data on our servers.

Device Security: All local devices used to access client management tools are encrypted, password-protected, and regularly updated with the latest security patches.

While we take all reasonable precautions to ensure that user data is secure and that users are protected, there always remains the risk of harm. The Internet as a whole can be insecure at times and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.

International Data Transfers

We transfer user personal data to the following countries:

1. United States;
2. Canada; and
3. Lithuania / European Union.

When we transfer user personal data we will protect that data as described in this Privacy Policy and comply with applicable legal requirements for transferring personal data internationally.

If you are located in the United Kingdom or the European Union, we will only transfer your personal data if:

1. The country your personal data is being transferred to has been deemed to have adequate data protection by the European Commission or, if you are in the United Kingdom, by the United Kingdom adequacy regulations; or
2. We have implemented appropriate safeguards in respect of the transfer. For example, the recipient is a party to binding corporate rules, or we have entered into standard EU or United Kingdom data protection contractual clauses with the recipient.

Your Rights as a User

Under the GDPR, you have the following rights:

1. Right to be informed;
2. Right of access;
3. Right to rectification;
4. Right to erasure;
5. Right to restrict processing;
6. Right to data portability; and
7. Right to object.

Children

The minimum age to use our website is 18 years of age. We do not knowingly collect or use personal data from children under 16 years of age. If we learn that we have collected personal data from a child under 16 years of age, the personal data will be deleted as soon as possible. If a child under 16 years of age has provided us with personal data their parent or guardian may contact our Data Compliance Manager.

How to Access, Modify, Delete, or Challenge the Data Collected

If you would like to know if we have collected your personal data, how we have used your personal data, if we have disclosed your personal data and to who we disclosed your personal data, if you would like your data to be deleted or modified in any way, or if you would like to exercise any of your other rights under the GDPR, please contact our Data Compliance Manager, via our Online Contact Form. 

Do Not Track Notice

Do Not Track (“DNT”) is a privacy preference that you can set in certain web browsers. We do not track the users of our Site over time and across third party websites and therefore do not respond to browser-initiated DNT signals. We are not responsible for and cannot guarantee how any third parties who interact with our Site and your data will respond to DNT signals.

How to Opt-Out of Data Collection, Use or Disclosure

In addition to the method(s) described in the How to Access, Modify, Delete, or Challenge the Data Collected section, we provide the following specific opt-out methods for the forms of collection, use, or disclosure of your personal data:

1. Marketing Emails: You can opt out of receiving promotional or marketing communications from us at any time. You can opt-out by by clicking the ‘Unsubscribe’ link embedded at the bottom of our emails, or by submitting a request via our website contact form.
2. Website Analytics & Cookies: You can opt out of website performance tracking. You can opt-out by by selecting ‘Decline’ on our website’s cookie consent banner upon your first visit, or by configuring your internet browser settings to reject cookies entirely.

Cookie Policy

A cookie is a small file, stored on a user’s hard drive by a website. Its purpose is to collect data relating to the user’s browsing habits. You can choose to be notified each time a cookie is transmitted. You can also choose to disable cookies entirely in your internet browser, but this may decrease the quality of your user experience.

We use the following types of cookies on our Site:

1. Functional cookies
   Functional cookies are used to remember the selections you make on our Site so that your selections are saved for your next visits;
2. Analytical cookies
   Analytical cookies allow us to improve the design and functionality of our Site by collecting data on how you access our Site, for example data on the content you access, how long you stay on our Site, etc; and
3. Third-Party Cookies
   Third-party cookies are created by a website other than ours. We may use third-party cookies to achieve the following purposes:
   1. To analyze website traffic, optimize site performance, monitor user preferences, and securely process third-party form submissions and embedded media..

Additional Clauses

Alberta PIPA & Canadian Cross-Border Compliance Addendum

1. Cross-Border Service Providers: In accordance with the Alberta Personal Information Protection Act (PIPA), users are hereby notified that the Corporation utilizes third-party service providers located outside of Canada (primarily the United States, including form-processing and email service providers) to store, process, and handle personal data. This data is transferred for the purposes of client administration, scheduling, inquiry response, and secure backend communication. Individuals may request access to written information regarding the Corporation’s policies and practices with respect to these international service providers, or direct questions to the Data Compliance Manager via the website’s contact form.

2. Right to Withdraw Consent: Individuals residing in Alberta or other Canadian jurisdictions have the right to withdraw consent to the collection, use, or disclosure of their personal information at any time, subject to legal or contractual restrictions and reasonable notice.

3. Mandatory Breach Notification: In the event of a security incident involving personal information under the Corporation’s custody or control, we will assess the incident. If a reasonable person would consider that the breach poses a real risk of significant harm to an individual, the Corporation will notify the Office of the Information and Privacy Commissioner of Alberta and any affected individuals without unreasonable delay, in accordance with statutory requirements.

Modifications

This Privacy Policy may be amended from time to time in order to maintain compliance with the law and to reflect any changes to our data collection process. When we amend this Privacy Policy we will update the “Effective Date” at the top of this Privacy Policy. We recommend that our users periodically review our Privacy Policy to ensure that they are notified of any updates. If necessary, we may notify users by email of changes to this Privacy Policy.

Complaints

If you have any complaints about how we process your personal data, please contact us through the contact methods listed in the Contact Information section so that we can, where possible, resolve the issue. If you feel we have not addressed your concern in a satisfactory manner you may contact a supervisory authority. You also have the right to directly make a complaint to a supervisory authority. You can lodge a complaint with a supervisory authority by contacting the The Data Protection Authority (DPA) in the EU Member State of your habitual residence, place of work, or place of the alleged infringement..

Contact Information

If you have any questions, concerns or complaints, you can contact our Data Compliance Manager, via our Online Contact Form. 

© 2026 From Bitching to Witching. All Rights Reserved. From Bitching to Witching is a brand asset owned and operated by 2797940 Alberta Inc.