Lynne Zimmerman | lynnezimmerman.com

Effective Date: June 19, 2026

Your privacy matters to us. This Privacy Policy explains how Lynne Zimmerman collects, uses, stores, and protects your personal information when you visit lynnezimmerman.com or use our programs and services. We are committed to complying with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), and the General Data Protection Regulation (GDPR) where applicable to visitors from the European Union or European Economic Area.

1.Who We Are

Lynne Zimmerman is a Canadian nutrition education brand. We are the data controller responsible for the personal information you share with us through this website and our Kajabi-powered platform.

Contact: [email protected] | lynnezimmerman.com

2.Information We Collect

Information you provide directly:

Your name and email address when you create an account, enroll in a program, or opt into our email list
Payment and billing details when you make a purchase (processed by Stripe, we do not store your full card details)
Messages and inquiries submitted through our contact form or email

Information collected automatically:

IP address, browser type, device information, and pages visited
Cookies and similar tracking technologies (see Section 5)
Referring website and time spent on pages

We do not collect sensitive personal information such as health records or government identification. Our programs are designed for adults, and we do not knowingly collect data from anyone under the age of 18.

3.How We Use Your Information

We use your personal information to:

Deliver the programs and services you have purchased and maintain your account access
Send purchase confirmations, account updates, and customer support communications
Send marketing emails and newsletters, only with your consent under CASL and GDPR
Understand how visitors use our website and improve our content and offerings
Comply with Canadian tax and business law record-keeping requirements

We will never sell, rent, or trade your personal information to third parties for their own marketing purposes.

4.Legal Basis for Processing

For Canadian residents (PIPEDA): We collect and use your information with your knowledge and consent, or where permitted by law. Consent may be express (for example, opting in to our email list) or implied (for example, providing your email to complete a purchase).

For EU/EEA residents (GDPR): We process your data on the following legal bases:

Contract: to fulfill your purchase and deliver program access
Consent: for marketing emails and non-essential cookies
Legitimate interests: to improve our website and prevent fraud
Legal obligation: to comply with applicable laws

5.Cookies and Tracking

Our website uses cookies and similar technologies to support site function and understand usage. We use the following types:

Essential cookies: required for the website and checkout to function. These cannot be disabled.
Analytics cookies: help us understand how visitors use our site, using tools such as Google Analytics. Data is anonymized where possible.
Marketing cookies: used to track ad conversions and deliver relevant content when paid advertising campaigns are active (see Section 6 regarding Meta Pixel).

You can control or disable non-essential cookies through your browser settings at any time. Doing so will not affect your ability to browse the site or access purchased programs, though some features may behave differently.

EU/EEA visitors may be presented with a cookie notice on first visit. By continuing to use our website, you consent to our use of cookies in line with this policy.

6.Third-Party Services

We use the following third-party services to operate our business. Each has its own privacy policy governing how they handle your data:

Kajabi: our website hosting, program delivery, email marketing, and membership platform. Kajabi processes your account information, purchase history, and program activity on our behalf. kajabi.com/privacy
Stripe: our payment processor. Stripe handles all payment transactions and is PCI-DSS compliant. We do not store your full credit card details. stripe.com/privacy
Google Analytics: used to understand website traffic and visitor behaviour. Data is collected via cookies and may be processed in the United States. policies.google.com/privacy
Meta Pixel: used to track ad conversions from Facebook and Instagram campaigns. The Meta Pixel is active only when paid advertising campaigns are running. facebook.com/privacy/policy

All third-party providers are contractually required to protect your data and may only use it to perform services on our behalf. Where these providers are located outside of Canada, your information may be subject to the laws of the country in which they operate, including the United States.

7.Email Marketing and CASL

We comply with Canada's Anti-Spam Legislation (CASL). We will only send you commercial emails if:

You have given us express consent by opting into our email list, or
You have an existing business relationship with us (for example, a recent purchase), giving us implied consent for a limited period

Every marketing email includes a clear and easy unsubscribe link. You can also unsubscribe at any time by emailing [email protected]. All unsubscribe requests are processed within 10 business days.

8.Your Rights

Canadian residents (PIPEDA):

Access the personal information we hold about you
Request correction of inaccurate or incomplete information
Withdraw consent for non-essential uses
Request deletion of your data, subject to our legal retention obligations

EU/EEA residents (GDPR): In addition to the rights above, you have the right to data portability, the right to object to processing, and the right to restrict processing. You also have the right to lodge a complaint with your national data protection authority.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

9.Data Retention

We retain your personal information only as long as necessary:

Active accounts and program access: for the duration of your access period (12 months from purchase) plus a reasonable administrative period
Purchase records: up to 7 years, as required by Canadian tax law
Email marketing lists: until you unsubscribe or request deletion

When data is no longer needed, we securely delete or anonymize it.

10.Data Security

We take reasonable steps to protect your personal information, including SSL/TLS encryption across our website, secure account access through Kajabi, and PCI-DSS compliant payment processing through Stripe. While we use commercially reasonable safeguards, no method of internet transmission is entirely secure, and we cannot guarantee absolute security.

11.International Data Transfers

Some of our third-party service providers, including Kajabi and Stripe, are based in the United States. By using our services, you acknowledge that your information may be transferred to and processed in countries with different privacy laws than your own. We take reasonable steps to ensure appropriate safeguards are in place where required.

12.Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page reflects the most recent update. Your continued use of our website after any changes constitutes your acceptance of the revised policy.

13.Contact and Complaints

For questions, concerns, or a privacy request, contact us at: [email protected] | lynnezimmerman.com

Canadian residents who are not satisfied with our response may contact the Office of the Privacy Commissioner of Canada: www.priv.gc.ca | 1-800-282-1376

EU/EEA residents may lodge a complaint with their local data protection authority.