Purpose & scope
The General Data Protection Regulation (GDPR) applies to how we handle the personal data of individuals located in the European Union, European Economic Area, and United Kingdom who visit SylvieDrapeau.com or purchase a Master Your LIFE program. This section explains what data we collect, why, and the rights available to you.
What personal data we collect
- Contact details — name, email address, and any details you provide when you message us or book a call.
- Account & purchase data — program enrollment, transaction history, and communications related to your purchase.
- Payment information — processed by our third-party payment processor; we do not store full card details ourselves.
- Technical data — IP address, browser type, and site usage collected through cookies (see our Cookies Policy).
Legal basis for processing
We only process your personal data when we have a valid legal basis to do so, which may include:
- Consent — when you opt in to emails or marketing communications.
- Contract — when processing is necessary to deliver a program you’ve purchased.
- Legitimate interest — for basic site analytics and fraud prevention, balanced against your rights.
- Legal obligation — where we’re required to retain records for tax or accounting purposes.
Your rights under GDPR
If you’re located in the EU, EEA, or UK, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”), where applicable.
- Restrict how we process your data.
- Port your data to another provider in a structured, machine-readable format.
- Object to processing based on legitimate interest or direct marketing.
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email [email protected]. We’ll respond within 30 days.
How long we keep your data
We retain personal data only as long as necessary to deliver our programs, meet legal and accounting obligations, and resolve disputes. Purchase and payment records are typically retained for the period required by Canadian tax law. Marketing contact data is kept until you unsubscribe or request deletion.
International data transfers
Sylvie Nicole Drapeau, M.Ed. operates from Québec, Canada. If you’re located in the EU, EEA, or UK, your data may be transferred to and processed in Canada or other countries where our service providers operate. Where this happens, we rely on providers that maintain appropriate safeguards, such as standard contractual clauses, to protect your data to a standard consistent with GDPR.
Data security
We use reasonable technical and organizational measures — including secure hosting, restricted access, and trusted third-party processors — to protect your personal data against unauthorized access, loss, or misuse. No online system is 100% secure, but we take this responsibility seriously.
Contact
Questions about this policy, a rights request, or how your data is handled are always welcome. If you’re not satisfied with our response, you also have the right to lodge a complaint with your local data protection supervisory authority.
Talk to us anytime
We’d rather answer your questions directly than have you guess.
This GDPR Policy forms part of our Privacy Policy and applies to all EU, EEA, and UK visitors and clients of SylvieDrapeau.com. Sylvie Nicole Drapeau, M.Ed., Québec, Canada.
