How we handle your personal data

1. Introduction and data controller

This Privacy Policy explains how Mobilityalive (“we,” “us,” or “our”) collects, uses, stores, and protects personal data when you visit mobilityalive.world, submit forms, purchase educational products, or participate in programs related to stress reset routines and recovery practices.

The data controller responsible for processing is:

• Business name: Mobilityalive
• Address: 100 City Centre Dr, Mississauga, ON L5B 2C9, Canada
• Phone: +1 905-270-7771
• Email: touch@mobilityalive.world
• Website: https://mobilityalive.world

We process personal data in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) where applicable, the EU General Data Protection Regulation (GDPR) for visitors in the European Economic Area, and other relevant international privacy laws.

2. Scope of this policy

This policy applies to personal data collected through our website, email correspondence, phone calls, consulting sessions, challenge programs, and digital product delivery. It does not apply to third-party websites linked from our pages; those sites maintain independent policies.

Our website provides general informational content about stress reset routines. We do not collect health records or special category data under GDPR Article 9 unless you voluntarily include such information in a message—in which case we will minimize retention and delete it upon request when not required for legitimate business purposes.

3. Categories of data we collect

3.1 Data you provide directly

When you complete our contact form, register for programs, or purchase educational materials, we may collect:

• Full name
• Email address
• Phone number (if provided)
• Message content and inquiry topic
• Billing address and transaction references (processed via payment providers)
• Consent records including timestamps and policy version

3.2 Data collected automatically

When you browse our site, limited technical data may be collected through cookies and similar technologies, including IP address, browser type, device type, referring URL, pages viewed, and session duration. See our Cookie Policy for details and control options.

3.3 Data from third parties

We may receive delivery confirmations from email service providers or aggregated analytics from tools you consent to enable. We do not purchase personal data lists.

4. Purposes of processing and legal bases

We process personal data only for specified, explicit purposes:

1. Responding to inquiries: To answer questions about programs, pricing, and educational content (legitimate interest and contractual necessity).
2. Delivering services: To provide consulting guidance, personalized plans, workbooks, and challenge materials you request (contract performance).
3. Billing and compliance: To issue invoices, process refunds, and meet tax or accounting obligations (legal obligation and contract).
4. Website security: To detect abuse, prevent fraud, and maintain system integrity (legitimate interest).
5. Analytics and improvement: Where you consent, to understand how visitors use pages and improve content clarity (consent).
6. Marketing communications: Where you opt in, to send program updates or educational newsletters (consent; you may withdraw at any time).

5. Data retention periods

We retain personal data only as long as necessary for the purposes described:

• Contact form messages: Up to 24 months after last correspondence, unless a longer period is required for dispute resolution.
• Customer and program records: Duration of the relationship plus 7 years for financial records where required by Canadian law.
• Marketing consent logs: Until withdrawal of consent plus 3 years for proof of compliance.
• Server and security logs: Typically 90 days unless investigation requires extension.
• Analytics data: According to the retention settings of the analytics provider, generally 14–26 months with identifiers truncated where possible.

When retention periods expire, we delete or anonymize data using secure methods.

6. Security measures

We implement appropriate technical and organizational safeguards, including:

• HTTPS encryption for data in transit across all site pages
• Access controls limiting employee access to personal data on a need-to-know basis
• Strong authentication for administrative systems
• Regular review of third-party processor security practices
• Procedures for responding to suspected data incidents

No method of transmission over the Internet is completely secure. We encourage you to use strong passwords for any accounts we provide and to avoid sending sensitive health information via contact forms.

7. Sharing and international transfers

We do not sell your personal data. We may share data with:

• Hosting and infrastructure providers located in Canada or other jurisdictions with adequate safeguards
• Email delivery and customer relationship tools under data processing agreements
• Payment processors that handle card transactions independently under their own compliance frameworks
• Professional advisors (lawyers, accountants) bound by confidentiality
• Authorities when required by valid legal process

Where data is transferred outside Canada or the EEA, we rely on standard contractual clauses, adequacy decisions, or comparable mechanisms as required by law.

8. Your rights

Depending on your location, you may have the following rights:

• Access: Request a copy of personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion where no overriding legal basis exists
• Restriction: Request limited processing in certain circumstances
• Portability: Receive data you provided in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests or direct marketing
• Withdraw consent: Where processing is consent-based, without affecting prior lawful processing
• Complaint: Lodge a complaint with the Office of the Privacy Commissioner of Canada or your local supervisory authority

To exercise rights, contact touch@mobilityalive.world with sufficient detail to verify your identity. We respond within 30 days unless extension is permitted by law.

9. Children’s privacy

Our services are directed at adults. We do not knowingly collect data from individuals under 16 without parental consent. If you believe a minor has submitted data, contact us for prompt deletion.

10. Changes to this policy

We may update this Privacy Policy to reflect legal or operational changes. Material updates will be indicated by revising the date at the top of this page. Continued use of the website after changes constitutes acknowledgment of the updated policy where permitted by law.

11. Contact

For privacy questions or requests, contact Mobilityalive at touch@mobilityalive.world or 100 City Centre Dr, Mississauga, ON L5B 2C9, Canada. Phone: +1 905-270-7771.