Privacy Policy

Effective date: May 27, 2026

1. Who we are

This Privacy Policy explains how [Nicole Nedelko / legal business name] ("we," "us," or "our") collects, uses, shares, and protects personal information when you visit nicolenedelko.com (the "Site"), contact us, sign up for our communications, or use our wellness coaching services (together, the "Services").

We are based in [Province/State, Country]. We provide wellness and lifestyle coaching with a focus on perimenopause and menopause. We are committed to handling your personal information responsibly and in accordance with applicable privacy laws.

If you have any questions about this policy, contact us using the details in Section 17.

2. Scope and the laws that apply

This policy is designed to align with:

Canada: the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, substantially similar provincial laws including Quebec's Law 25, British Columbia's PIPA, and Alberta's PIPA.

Canada (email): Canada's Anti-Spam Legislation (CASL).

United States: applicable state consumer privacy laws (such as the California Consumer Privacy Act, as amended by the CPRA, and comparable laws in other states) to the extent they apply to us.

United States (email): the CAN-SPAM Act.

Children: the US Children's Online Privacy Protection Act (COPPA) and equivalent provisions in Canadian law.

Which specific rights you have depends on where you live. See Section 13.

3. Information we collect

Information you give us directly

Contact and identity details: name, email address, phone number, and any other details you provide through forms, email, or booking.

Coaching and intake information: information you choose to share when you inquire about, sign up for, or participate in coaching, such as your goals, lifestyle details, and wellness-related concerns. Some of this may relate to your health (see Section 4).

Scheduling information: details needed to book and manage sessions.

Payment information: if you purchase Services, payment is processed by a third-party payment processor ([e.g., Stripe / Square]). We do not store full payment card numbers on our own systems. We may retain limited transaction records (such as date, amount, and the fact of payment).

Communications: the content of messages you send us and our correspondence with you.

Information we collect automatically

When you visit the Site, we and our service providers may automatically collect:

Device and usage data: IP address, browser type, device type, pages viewed, referring pages, and timestamps.

Cookies and similar technologies: see Section 8.

We use [e.g., Google Analytics 4] to understand how visitors use the Site. [Confirm and name your actual analytics provider, or remove if you use none.]

Information from third parties

We may receive information from the platforms we use to run our business, such as our [email marketing platform], [scheduling tool], and [social media platforms] if you interact with us there. [Edit to reflect reality.]

4. Health-related information and important disclaimers

Because our Services focus on perimenopause and menopause wellness, you may choose to share information about your symptoms, health goals, or general wellbeing. Many privacy laws treat health-related information as sensitive, which means we give it extra care:

We collect it only when you choose to provide it, and only to deliver and improve coaching you have asked for.

Where required by applicable law, we rely on your express, opt-in consent before collecting or using sensitive information.

We do not sell sensitive information, and we do not use it for targeted advertising.

Important: [Nicole Nedelko / business name] provides wellness and lifestyle coaching. We are not a licensed medical provider, the Services are not medical advice, diagnosis, or treatment, and they are not a substitute for care from a qualified physician or other healthcare professional. Always consult a qualified provider about medical questions or before making changes to your health regimen.

[If you do NOT bill health insurance and are NOT acting as a regulated health provider, keep the following:] We are not a "covered entity" or "business associate" under the US HIPAA law, and the coaching information you share with us is generally not "protected health information" under HIPAA. [If this is not true for you, remove this and seek legal advice.]

5. How we use your information

We use personal information to:

respond to your inquiries and provide customer service;

deliver, schedule, and manage coaching Services;

process payments and keep business records;

send you administrative messages about your account or sessions;

send newsletters, offers, and other marketing communications where you have consented or where otherwise permitted by law (you can opt out at any time, see Section 14);

operate, maintain, secure, and improve the Site;

understand how our Site and content are used; and

comply with legal obligations and enforce our terms.

We will not use your information for a materially new purpose without your consent, unless permitted or required by law.

6. Our legal basis and consent

In Canada, we collect, use, and disclose personal information with your consent, except where the law permits otherwise. Consent may be express (for example, opting in to our newsletter or sharing sensitive health-related details) or implied (for example, where the purpose is obvious and you voluntarily provide the information, such as emailing us a question). For sensitive information, we seek express consent. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us. Withdrawing consent may limit our ability to provide some Services.

[If you serve Quebec residents, keep this paragraph:] For residents of Quebec, we obtain consent that is clear, free, and informed, and given for specific purposes. Where we collect personal information through technological means, we do so in accordance with Quebec's Law 25.

7. Cookies and tracking technologies

The Site uses cookies and similar technologies to make the Site work, remember your preferences, and measure usage.

Strictly necessary cookies keep the Site functioning.

Analytics cookies help us understand Site usage [e.g., via Google Analytics 4].

[List advertising/marketing cookies only if you actually use them. If you do not run ad tracking, say so, because it strengthens your privacy posture.]

You can control cookies through your browser settings. Disabling some cookies may affect how the Site works.

Browser opt-out signals: Where required by applicable law, we honor recognized opt-out preference signals such as the Global Privacy Control (GPC). [Confirm your cookie/consent tool supports this, or implement one if you market to residents of states that require it.]

8. How we share your information

We do not sell your personal information for money. We share personal information only as follows:

Service providers (processors): companies that perform services for us, such as website hosting, email delivery, scheduling, payment processing, and analytics. Examples may include [hosting provider], [email platform], [scheduling tool], [payment processor], and [analytics provider]. These providers may only use your information to perform services for us and must protect it.

Legal and safety reasons: when required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of you, us, or others.

Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

With your direction or consent: when you ask us to share information or otherwise agree.

We do not use sensitive or health-related information for targeted advertising, and we do not "sell" or "share" it as those terms are defined under US state privacy laws.

9. Cross-border data transfers

We are located in [Country], and some of our service providers are located in the United States or other countries. This means your personal information may be stored or processed outside your province or country, including in the United States, where data protection laws may differ from those where you live and where courts, law enforcement, and regulatory authorities may be able to access it under local law.

[If you serve Quebec residents, keep this:] Before transferring personal information of Quebec residents outside Quebec, we conduct the privacy impact assessment required by Law 25 and take steps intended to ensure the information receives adequate protection.

By using the Services or providing information to us, you understand that your information may be transferred as described above, subject to applicable law.

10. Data retention

We keep personal information only as long as necessary for the purposes described in this policy, to provide the Services, to maintain business and financial records, and to meet legal, tax, and accounting requirements. When information is no longer needed, we securely delete or anonymize it. Specific retention periods depend on the type of information and our legal obligations; you may request more detail by contacting us.

11. How we protect your information

We use administrative, technical, and physical safeguards intended to protect personal information against loss, theft, and unauthorized access, use, or disclosure, appropriate to the sensitivity of the information. These may include access controls, encryption in transit, and limiting access to those who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and the relevant regulators as required by applicable law.

12. Your privacy rights

If you are in Canada

Under PIPEDA and applicable provincial laws, you generally have the right to:

access the personal information we hold about you;

request a correction of inaccurate or incomplete information;

withdraw consent, subject to legal or contractual limits; and

challenge our compliance with privacy law by contacting us, and, if unsatisfied, by contacting the Office of the Privacy Commissioner of Canada (priv.gc.ca).

[If you serve Quebec residents, keep this:] If you are a Quebec resident, Law 25 also gives you the right to data portability (to receive certain information in a structured, commonly used technological format), the right to request de-indexation in certain circumstances, and the right to information about, and to object to, decisions based solely on automated processing. Quebec residents may contact the Commission d'accès à l'information du Québec (cai.gouv.qc.ca). [If we use automated decision-making, describe it here. If we do not, you may state that we do not.]

If you are in the United States

Depending on your state of residence and whether the relevant law applies to us, you may have the right to:

know/access the categories and specific pieces of personal information we have collected;

correct inaccurate personal information;

delete personal information we hold about you;

obtain a portable copy of your information;

opt out of the "sale" or "sharing" of personal information and of targeted advertising and certain profiling (note: we do not sell personal information or use it for targeted advertising); and

be free from discrimination for exercising your rights.

For sensitive information, where applicable law requires, we will limit our use to what you direct or what the law permits.

How to exercise your rights

To make a request, contact us using the details in Section 17. We will verify your identity before responding, which may require you to confirm information we already hold. You may use an authorized agent where the law allows. We will respond within the timeframe required by applicable law (for example, generally within 30 days under Canadian law, with extensions where permitted; US state laws commonly allow up to 45 days, extendable). We will not charge a fee unless the law permits it. If we deny a request, we will explain why, where required, and tell you how to appeal or complain.

13. Email and marketing communications

If you subscribe to our newsletter or other marketing messages:

Canada (CASL): we send commercial electronic messages only with your consent (express or implied as permitted by law), we identify ourselves clearly, and we include a working unsubscribe mechanism in every message.

United States (CAN-SPAM): our marketing emails identify themselves as such where required, include our valid postal address, and include a way to opt out.

You can unsubscribe at any time using the link in any marketing email, or by contacting us. We may still send you non-marketing messages about your sessions, payments, or account.

14. Children's privacy

The Site and Services are intended for adults. We do not knowingly collect personal information from children under 13 (consistent with US COPPA). [If you serve Quebec residents, add:] In Quebec, we do not collect, use, or disclose the personal information of a minor under 14 without the consent of a person with parental authority, except where permitted by law. If you believe a child has provided us personal information, contact us and we will delete it.

15. Third-party links

The Site may link to third-party websites or services we do not control. This policy does not apply to those third parties, and we are not responsible for their privacy practices. Please review their privacy policies.

16. How to contact us

If you have questions, requests, or complaints about your privacy or this policy, contact:

Nicole Nedelko / Honeypot Marketing Inc.

Person in charge of personal information / Privacy Officer
Email: Dan Nedelko / [email protected]
Mailing address: 25 Gill Cove, Cambridge, Ontario, N3E 1A1

17. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Effective date" above and, where appropriate or required, provide additional notice. Your continued use of the Services after an update means you accept the revised policy, to the extent permitted by law.