PRIVACY POLICY

Effective Date: June 1, 2026
Last Updated: June 1, 2026

🔒 YOUR PRIVACY AT A GLANCE

We collect: Your name, email, payment info (via Stripe/ThriveCart), and usage data.
We use it to: Deliver programs, communicate with you, and improve our services.
We share it with: Trusted third-party platforms only (listed in Section 6).
We do not: Sell your personal information to any third party. Ever.
You can: Access, correct, or request deletion of your data at any time.
Contact: support@eloisegagnon.com

1. Who We Are

EAC Leadership House Inc. (“Company,” “we,” “us,” or “our”) is a corporation organized under the laws of the Province of Quebec, Canada. We operate online education, coaching, and leadership development programs under the brands EAC Leadership House, Eloise Gagnon, and Power Player Academy.This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our websites, purchase our products or services, or participate in our programs.

Our websites include, without limitation: eloisegagnon.com, powerplayeracademy.com, guidedsuccessculture.com, and all associated subdomains, landing pages, and checkout pages.

Privacy Officer: Eloise Gagnon, Founder — support@eloisegagnon.com

2. Scope of This Policy

This Privacy Policy applies to all personal information collected by EAC Leadership House Inc. through:

• Our websites and digital properties;
• Program enrollment and participation, including Power Player Academy, Power Player CEO, and all other offerings;
• Email communications, newsletters, and marketing;
• Payment and checkout processes;
• Live sessions, webinars, workshops, and community platforms; and
• Any other interaction where you provide personal information to us.

This Policy does not apply to third-party platforms or communities that operate under their own privacy policies (such as Skool, Zoom, or Facebook). Where you use those platforms as part of our programs, their respective privacy policies govern your data on those platforms.

3. Information We Collect

A. Information You Provide Directly

When you interact with us, you may provide:

• Contact information: name, email address, phone number, and mailing address;
• Account and enrollment information: program selections, enrollment dates, and participation history;
• Payment information: billing address and payment card details (processed securely by Stripe and ThriveCart; we do not store your full card number);
• Communications: messages, questions, survey responses, testimonials, and feedback you send us;
• Community contributions: posts, comments, and interactions in Skool or other community platforms; and
• Session participation: voice, video, and chat contributions in Zoom sessions and live programs.

B. Information Collected Automatically

When you visit our websites, we automatically collect:

• Technical data: IP address, browser type and version, operating system, device type, and unique device identifiers;
• Usage data: pages visited, time spent on pages, links clicked, referring URLs, and exit pages;
• Cookie and tracking data: information collected through cookies, pixel tags, and similar technologies (see Section 5 for details); and
• Analytics data: aggregated behavioral data collected via Google Analytics and Meta Pixel.

C. Information from Third Parties

We may receive information about you from third-party platforms, including:

• Facebook and Instagram: if you interact with our social media content or advertising;
• ThriveCart: purchase and transaction data; and
• Email marketing platforms: engagement data such as email opens and link clicks.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

Program Delivery and Account Management

• To process your enrollment and provide access to purchased programs and content;
• To communicate with you about your enrollment, program schedule, and updates;
• To manage your account and respond to your inquiries and support requests; and
• To process payments and manage billing.

Marketing and Communications

• To send you marketing emails, newsletters, and promotional communications about our programs and offerings, where you have provided consent;
• To personalize your experience and tailor content to your interests;
• To retarget you with relevant advertising on platforms such as Facebook and Instagram; and
• To measure the effectiveness of our marketing campaigns.

Business Operations and Improvement

• To analyze website usage and improve our website and program offerings;
• To conduct research and develop new programs and services;
• To comply with our legal obligations; and
• To protect the security and integrity of our business and programs.

📌 LEGAL BASIS FOR PROCESSING (APPLICABLE TO EU/UK CLIENTS)

Where applicable under GDPR or UK GDPR, we process your personal data on the following legal bases:

 • Contract performance: to deliver programs and services you have purchased.
 • Legitimate interests: for analytics, security, and improving our services.
 • Consent: for marketing communications and use of non-essential cookies.
 • Legal obligation: where required by applicable law.
• You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our websites. Cookies are small data files stored on your device that help us recognize you and understand how you use our websites.

Types of Cookies We Use

• Essential cookies: necessary for the website to function. These cannot be disabled.
• Analytics cookies: used by Google Analytics to collect aggregated usage data so we can understand and improve website performance.
• Marketing and advertising cookies: used by the Meta (Facebook) Pixel to measure ad performance and enable retargeted advertising on Facebook and Instagram.
• Functional cookies: used to remember your preferences and improve your experience.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our websites.

For information on opting out of Google Analytics data collection, visit: https://tools.google.com/dlpage/gaoptout

For information on opting out of Meta advertising, visit: https://www.facebook.com/about/privacy

6. Third-Party Service Providers

We share your personal information with trusted third-party service providers only to the extent necessary for them to provide services on our behalf. All third-party providers are contractually required to protect your data and use it only for the purposes we specify.

The following table lists the third-party platforms we currently use that may process your personal data:

Service / Platform	Purpose	Privacy Policy
Stripe	Payment processing	stripe.com/privacy
ThriveCart	Checkout and payment pages	thrivecart.com/privacy-policy
Skool	Online community platform	skool.com/privacy
Zoom	Live sessions and webinars	zoom.us/privacy
Google Drive	Internal file storage and document management	policies.google.com/privacy
Meta (Facebook/Instagram)	Advertising, retargeting, and Pixel analytics	facebook.com/about/privacy
Email Marketing Platform	Email communications and newsletters (e.g. ActiveCampaign, Mailchimp)	Refer to your platform’s policy
Google Analytics	Website analytics and usage tracking	policies.google.com/privacy

We do not sell, rent, or trade your personal information to any third party for their independent marketing or commercial purposes.

Data Transfers Outside Canada

Several of the third-party platforms listed above are based in the United States and other countries outside Canada. By using our services, you acknowledge that your personal information may be transferred to and processed in countries outside Canada, including the United States, where privacy laws may differ from those in your jurisdiction.

Where required, we rely on appropriate safeguards for such transfers, including contractual protections with our service providers. The European Commission has recognized Canada as providing an adequate level of data protection under GDPR adequacy decisions.

7. Use of Artificial Intelligence Tools

We use a limited number of artificial intelligence tools in our business operations to support service delivery and internal workflows. These tools may include AI-powered transcription, note-taking, content drafting, or scheduling assistance.

⚠️ AI TOOLS AND YOUR DATA

When AI tools are used in connection with live sessions (such as AI transcription during Zoom calls), you will be notified at the start of the session.

We do not use your personal information to train third-party AI models, and we do not share identifiable client data with AI platforms for model training purposes.

AI tools we use are subject to their own privacy policies and data processing terms. We select tools that meet appropriate data protection standards.

Program materials and proprietary content are not uploaded into AI systems in ways that would expose client information or violate the intellectual property terms of our Program Participation Agreement.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, to maintain our business records, and to comply with applicable legal obligations.

In general:

• Client account and enrollment records are retained for a minimum of seven (7) years following the end of the client relationship, in accordance with standard business record-keeping requirements;
• Marketing contact lists are retained until you unsubscribe or request deletion;
• Payment and transaction records are retained as required by applicable financial and tax law; and
• Website analytics data is retained in accordance with the retention settings of the applicable analytics platform (typically 26 months for Google Analytics).

When personal information is no longer required, we take reasonable steps to securely delete or anonymize it.

9. Your Privacy Rights

Depending on your location, you may have certain rights with respect to your personal information. We are committed to honoring these rights regardless of where you are located.

Your Right	What It Means
Right to Access	You may request confirmation of whether we hold your personal information and a copy of the information we hold about you.
Right to Correction	You may request that we correct any inaccurate or incomplete personal information we hold about you.
Right to Deletion	You may request that we delete your personal information, subject to our legal obligations to retain certain records.
Right to Withdraw Consent	Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
Right to Object	You may object to our processing of your personal information for direct marketing purposes at any time.
Right to Data Portability	Where applicable (EU/UK clients), you may request a copy of your personal data in a structured, machine-readable format.
Right to Restrict Processing	Where applicable, you may request that we restrict the processing of your personal information in certain circumstances.
California Residents (CCPA)	If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, please contact our Privacy Officer at support@eloisegagnon.com. We will respond to verifiable requests within 30 days (or as required by applicable law). We may ask you to verify your identity before processing your request.

10. Marketing Communications and Opt-Out

We send marketing emails and newsletters in compliance with Canada’s Anti-Spam Legislation (CASL) and applicable U.S. CAN-SPAM requirements. We will only send you marketing communications where you have provided express or implied consent as permitted by law.

You may opt out of marketing communications at any time by:

• Clicking the “Unsubscribe” link at the bottom of any marketing email;
• Emailing support@eloisegagnon.com with the subject line “Unsubscribe”; or
• Updating your communication preferences directly within the email platform.

Please allow up to 10 business days for your opt-out request to be processed. Opting out of marketing communications does not affect your receipt of transactional emails related to active purchases or program enrollments.

11. Children’s Privacy

Our programs, services, and websites are intended for individuals who are at least 18 years of age. We do not knowingly collect personal information from children under the age of 18.

If you believe that a child under the age of 18 has provided personal information to us, please contact us immediately at support@eloisegagnon.com and we will take prompt steps to delete that information from our records.

12. Security of Your Information

We implement commercially reasonable technical, administrative, and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, loss, or destruction.

These measures include, without limitation:

• Use of HTTPS encryption across all our websites;
• Payment processing through PCI-DSS compliant third-party processors (Stripe and ThriveCart); we do not store full payment card numbers;
• Access controls limiting internal access to personal information to those with a need to know; and
• Use of reputable third-party platforms with their own security programs.

⚠️ IMPORTANT: No method of electronic transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. If you have reason to believe your interaction with us is no longer secure, please notify us immediately at support@eloisegagnon.com.

13. Data Breach Notification

In the event of a privacy breach involving your personal information that creates a real risk of significant harm, we will notify you and the applicable regulatory authority as required by law, including Quebec Law 25 and applicable federal privacy legislation.

Notifications will be provided in a timely manner and will include a description of the breach, the type of information affected, and the steps we are taking or have taken to address the breach.

14. Links to Third-Party Websites

Our websites may contain links to third-party websites, platforms, and resources. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices or content of any third-party websites.

We encourage you to review the privacy policy of any third-party website you visit through a link on our websites.

15. Community Platforms and Public Forums

Our programs make use of community platforms, including Skool, where participants may post, share, and interact. Information you share in these community spaces may be visible to other program participants.

Please exercise care when sharing personal information in community forums. This Privacy Policy does not govern personal information you share with other participants in community settings; such sharing is at your own discretion.

Use of Skool and any other third-party community platform is subject to that platform’s own privacy policy and terms of service.

16. Applicable Privacy Law

Our privacy practices are designed to comply with:

• Quebec’s Act Respecting the Protection of Personal Information in the Private Sector (Law 25), as amended;
• Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA);
• Canada’s Anti-Spam Legislation (CASL);
• The European Union General Data Protection Regulation (GDPR), to the extent applicable to EU/UK residents; and
• The California Consumer Privacy Act (CCPA), to the extent applicable to California residents.

Clients in other jurisdictions may have additional rights under local law. We will make reasonable efforts to honor those rights upon request.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or business operations. When we make material changes, we will:

• Update the “Last Updated” date at the top of this Policy;
• Post the updated Policy on our website at eloisegagnon.com; and
• Where required by law or where changes are material, notify you by email to the address on file with at least 14 days’ notice before the changes take effect.

Your continued use of our websites or programs following the effective date of any update constitutes your acceptance of the revised Policy.

18. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer:

EAC Leadership House Inc.
Privacy Officer: Eloise Gagnon
Email: support@eloisegagnon.com
Website: eloisegagnon.com

We will acknowledge your request within 5 business days and respond fully within 30 days (or as required by applicable law). Where a request is complex or numerous, we may extend this period by a further 30 days with notice.

You also have the right to lodge a complaint with the applicable privacy regulatory authority in your jurisdiction:

• Canada: Office of the Privacy Commissioner of Canada — priv.gc.ca
• Quebec: Commission d’accès à l’information du Québec — cai.quebec.gc.ca
• EU/UK: Your local data protection authority
• USA: Federal Trade Commission — ftc.gov