Privacy Policy

This policy explains what Kelly Duffin collects from you, why, who else touches it, and what you can ask for. Kelly Duffin is a sole proprietor based in Dundas, Ontario, Canada, and is responsible for the personal information described here.

What is collected

When you buy or enquire. Your first and last name, the name you prefer to be called, your email address, your phone number including its country code, and your time zone. Payments require card details, which go directly to our payment processor and are never seen or stored by Kelly Duffin.

Your intake answers. The custom audio, meditation and mentorship purchases each ask you to describe what you are working through. Depending on what you buy, that can include the situation or block you are navigating, beliefs and patterns you want to release, how your nervous system responds under pressure, what you want your life to look like, and anything else you choose to add. These answers are personal and often private. They exist for one reason: so that Kelly can make the thing you paid for. They are not sold, rented, published, or shared with anyone for marketing.

Speaking enquiries. Event or podcast name, date, audience size and demographic, and estimated budget.

Technical information. Standard web server records, and a bot check that runs when you submit a form. The forms also remember your contact details in your own browser so you do not have to retype them if you come back on the same device. That stays on your device. There is no advertising pixel and no analytics tracker on this site.

Why it is collected

• To deliver what you bought, including writing and recording custom work to your answers.
• To take payment and keep a record of the transaction.
• To contact you about your order, your sessions, and anything you have asked about.
• To send marketing email, but only if you ticked the box asking for it.
• To keep the forms from being flooded by bots.

Consent, and marketing email

The consent box on every form is unticked until you tick it. If you do not tick it you will still hear from Kelly about anything you actually bought or asked about, because that is part of providing the service, but you will not be added to marketing. If you did tick it, every marketing email carries an unsubscribe link and it works immediately. You can also just reply and ask to be taken off.

Who else handles your information

Kelly Duffin uses a small number of established services to run the business. Each one only receives what it needs.

• GoHighLevel (LeadConnector) hosts the forms and surveys, stores the customer records, and sends the email. Most of what you submit lives here.
• Stripe processes card payments. Your card details go straight to Stripe. Kelly Duffin receives confirmation that a payment succeeded, not your card number.
• Cloudflare runs the bot check on form submission.
• Zoom hosts the 1:1 sessions, where one is part of what you bought.
• Google Fonts serves the typefaces on this site, which means your browser requests a file from Google when the page loads.

These providers operate in Canada, the United States and elsewhere, so your information may be stored or processed outside your own country and will be subject to the laws there.

How long it is kept

Customer records, intake answers and order history are kept while the working relationship is live and afterwards for as long as needed to answer questions, honour obligations, and meet tax and record-keeping requirements. If you ask for your information to be deleted, Kelly will delete what is not legally required to be kept, and will tell you what has to stay and why.

What you can ask for

You can ask to see the personal information held about you, to have it corrected if it is wrong, to have it deleted, to withdraw consent to marketing, or to get a copy of what you submitted. Kelly will respond within a reasonable time and will not charge you for a straightforward request. If you are in the European Economic Area or the United Kingdom, you also have the rights available to you under the GDPR, including the right to object to processing and the right to complain to your local data protection authority. If you are in Canada, you can raise a concern with the Office of the Privacy Commissioner of Canada.

Children

This is not intended for anyone under 18, and information is not knowingly collected from them.

Security, honestly stated

Kelly Duffin uses reputable providers, keeps access to customer records limited, and does not handle card details directly. No service can promise perfect security, and this one does not. If a breach ever affects your information in a way that creates a real risk of harm, you will be told.

Changes

If this policy changes, the date at the top changes with it. If a change is significant and affects how your information is used, you will be told directly rather than expected to notice.

Contact

Questions, requests and complaints about privacy go to Kelly Duffin, Dundas, Ontario, Canada.