Privacy Policy

Soulistic Vibes Wellness (“Soulistic Vibes,” “we,” “us,” or “our”), operated by Jennifer Gagnon, provides online wellness coaching, programs, and related content. This Privacy Policy explains what personal information we collect when you visit our website or use our services, how we use it, the parties we share it with, and the choices and rights you have. It applies to visitors and members in the United States, Canada, and elsewhere.

By using our website and services, you agree to the practices described in this policy. If you do not agree, please do not use the services.

1. Information We Collect

We collect the following categories of information:

• Account & identity data — your name, email address, and the credentials you use to sign in.
• Coaching & program data — information you choose to share through intake forms, quizzes, questionnaires, messages, and your activity within our programs.
• Payment data — when you purchase a program, our payment processor (Stripe) collects your card and billing details. We do not store full card numbers on our servers; we receive limited confirmation data such as the last four digits, card brand, and transaction status.
• Communications — emails, support requests, and other messages you send us.
• Technical & usage data — IP address, browser type, device information, pages visited, and similar diagnostic data, collected automatically through cookies and server logs.

We do not knowingly collect sensitive health diagnoses. Our wellness content is educational and is not a substitute for professional medical advice.

2. How We Use Your Information

• To create and manage your account and deliver the programs you sign up for.
• To process payments, send receipts, and manage subscriptions or refunds.
• To send transactional emails such as confirmations, reminders, and account notices.
• To send program updates and, where permitted, marketing communications — you can opt out of marketing at any time.
• To respond to your questions and provide customer support.
• To maintain security, prevent fraud and abuse, and operate and improve our services.
• To comply with our legal obligations.

Where required by law, we rely on legal bases including your consent, the performance of our contract with you, our legitimate interests in operating the business, and compliance with legal obligations.

3. Third Parties & Service Providers

We share personal information with trusted service providers who process it on our behalf and under contract. We do not sell your personal information.

• Stripe — payment processing. Your payment details are handled directly by Stripe under its own privacy practices.
• Resend — delivery of transactional and program emails on our behalf.
• Cloudflare — website hosting, content delivery, and security and abuse prevention.
• Neon — our managed database provider, which stores account and program data securely.

We may also disclose information when required by law, to enforce our agreements, or to protect the rights, safety, and property of our users or of Soulistic Vibes. If our business is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

4. International Data Transfers

We operate across the United States and Canada and use service providers that may process data in other countries. When personal information is transferred across borders, we take steps to ensure it remains protected in accordance with applicable law, including the use of appropriate contractual safeguards.

5. Data Retention

We keep your personal information for as long as your account is active and as needed to provide the services. After that, we retain information only as long as necessary to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Payment records are typically retained for the period required by applicable financial regulations. When information is no longer needed, we delete or anonymize it.

6. Your Privacy Rights

Depending on where you live, you may have the following rights regarding your personal information. Residents of the European Union and United Kingdom benefit from the GDPR (Articles 15–20); residents of Québec benefit from Québec’s Law 25 (the Act respecting the protection of personal information in the private sector); and residents of other Canadian provinces and U.S. states may have comparable rights.

• Access (GDPR Art. 15) — request a copy of the personal information we hold about you.
• Rectification (GDPR Art. 16) — ask us to correct inaccurate or incomplete information.
• Erasure (GDPR Art. 17) — ask us to delete your personal information, subject to legal exceptions.
• Restriction (GDPR Art. 18) — ask us to limit how we process your information.
• Notification (GDPR Art. 19) — be informed of corrections or deletions communicated to recipients of your data.
• Portability (GDPR Art. 20) — receive your information in a structured, machine-readable format.
• Withdraw consent — withdraw consent at any time where processing is based on consent, and opt out of marketing communications.

Under Québec’s Law 25 you also have the right to be informed of the use of automated decision-making and to request the de-indexing of certain information. To exercise any right, contact us using the details below. We will respond within the timeframes required by applicable law and may need to verify your identity first. You also have the right to lodge a complaint with your local data protection authority, including the Commission d’accès à l’information du Québec.

7. Security

We use technical and organizational safeguards designed to protect your information, including encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a confidentiality incident that presents a risk of serious injury, we will notify affected individuals and the relevant authorities as required by law.

8. Children’s Privacy

Our services are intended for adults and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the services after an update means you accept the revised policy.

10. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact our privacy lead, Jennifer Gagnon, at privacy@soulisticvibes.com.