LAST UPDATED
04.01.2026

1. Purpose and Scope

Welcome to It’s Cindy Kumar, ElevateHerConsulting Inc. ("Company," "we," "us," or "our"). This Privacy Policy ("Policy") outlines how we collect, use, share, and protect your personal information when you visit our website at www.itscindykumar.com and any related subpages (the "Website").

This Policy applies when you:

• Visit or browse our Website.

• Engage with any features such as chat, user submissions, or electronic messaging on our Website.

• Opt into email newsletters or marketing communications.

• Purchase services, products, or digital products, or join membership programs via our Website.

• Interact with our ads or marketing content on third-party websites or platforms.

This Website is operated from Canada and is intended to serve clients and visitors globally. We are committed to protecting your personal information in accordance with applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act (BC PIPA), the European Union's General Data Protection Regulation (GDPR), the UK GDPR, and, where applicable, other regional or national privacy laws. Where required by applicable law, we will obtain your consent before collecting or processing your personal information.

This Policy does not cover data collected offline or via third-party websites or platforms, including affiliates or service providers.

2. Age Requirements

We do not knowingly collect or solicit personal information from anyone under the age of 16. If you are under 16, please do not submit any personal information to us. If we learn that we have inadvertently collected personal information from someone under 16, we will promptly delete it.

If you believe we have collected such information, please contact us at cindy@itscindykumar.com.

3. Legal Bases for Processing

We process your personal information only when we have a valid legal basis to do so. Depending on the circumstances and your jurisdiction, we rely on one or more of the following:

• Contract Performance: Processing that is necessary to fulfill a contract with you, such as completing a purchase or delivering a service.

• Legitimate Interests: Processing that is necessary for our legitimate business interests (such as improving our Website, marketing our services, or preventing fraud), provided those interests are not overridden by your rights.

• Consent: Where you have given us clear, affirmative consent to process your data for a specific purpose, such as subscribing to a newsletter or opting into marketing communications. You may withdraw consent at any time.

• Legal Obligation: Processing that is necessary for us to comply with applicable laws, regulations, or legal processes.

For individuals in the EU/UK, we rely on Article 6 of the GDPR as the lawful basis for processing. Where we process special categories of personal data, we rely on the applicable legal bases under Article 9 of the GDPR.

4. Information We Collect

We collect various types of personal information from you, which may include:

• Personal Identifiers: Name, email address, phone number, billing address, business name, and job title.

• Financial Information: Payment details such as credit card or banking information (processed securely via third-party payment processors).

• Geolocation Data: IP address, country or region of access.

• Demographic Information: Age, occupation, business size, and industry.

• Internet and Device Activity: Browser type, operating system, and browsing behavior on our Website.

• Authentication Data: Account usernames, passwords, and account security data.

• Media: Photos, videos, or other media you may upload to the Website.

• Digital Product and Course Data: Course progress, completion history, and engagement data.

• Order and Transaction Information: Products or services purchased, order history, and order amounts.

• Customer Service Records: Records of communications with our team, including emails and chat logs.

• User Preferences and Profiles.

• Referral Information: Information provided when you participate in a referral program.

This data is collected directly from you when you provide it (e.g., during registration or purchase) or automatically via cookies and other tracking technologies when you browse our Website.

5. Sensitive Personal Information

Some information we collect may be classified as sensitive personal information under applicable privacy laws, including financial account information, precise geolocation data, and account login credentials. We use sensitive personal information only as necessary to provide the services you request, process transactions, ensure security, and comply with legal obligations. We do not use or disclose sensitive personal information for purposes beyond those permitted by applicable law.

6. Sources of Information

Your personal information may be collected from the following sources:

• Directly from You: When you fill out forms, subscribe to services, create an account, or make purchases on our Website.

• Payment Processors: Such as Stripe or PayPal, to process transactions.

• Analytics Providers: Such as Google Analytics, to monitor traffic and understand user interactions.

• Social Media Platforms: If you connect using social media accounts or interact with our content on social platforms.

• Email Marketing Platforms: Such as Mailchimp or ConvertKit, when you subscribe to our newsletter or download resources.

• Advertising Networks: When you interact with our ads on third-party platforms.

• Fraud Prevention Services: Third-party services that help us detect and prevent fraudulent transactions.

• Automated Data Collection: Via cookies, web beacons, and similar technologies when you browse our Website.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and understand how you use our Website. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Website to function properly. These cannot be disabled.

• Performance and Analytics Cookies: Help us understand how visitors interact with our Website.

• Functional Cookies: Allow us to remember your preferences and personalize your experience.

• Advertising and Targeting Cookies: Used to deliver ads relevant to your interests on our Website and on third-party platforms.

We may participate in affiliate marketing programs. When you click on affiliate links and make a purchase, we may receive a commission, and certain tracking data may be shared with our partners for this purpose.

You can manage your cookie preferences through our cookie consent tool on the Website or through your browser settings. To opt out of the sale or sharing of your personal information through cookies and tracking technologies, see Section 9 below.

8. How We Use Your Information

Your personal information may be used for the following purposes:

• To personalize your experience on our Website.

• To process your transactions, including payments and delivery of services.

• To communicate with you about your account, purchases, or customer service inquiries.

• To deliver marketing and promotional content that may interest you.

• To comply with legal obligations and protect our legal rights.

• To improve Website performance and develop products or services based on analytics.

• To fulfill and manage your orders or service engagements.

• To prevent fraud and protect transaction security.

• To administer loyalty, rewards, or referral programs.

• To track progress and provide feedback for online courses or membership programs.

• To manage and administer subscription services.

• To support customer relationship management (CRM) activities.

• To manage and optimize advertising campaigns.

• To generate testimonials or case studies for marketing purposes, with your consent where required.

9. Data Sharing, Sale, and Sharing

We are committed to being transparent about how your personal information is shared. Your personal data may be shared with the following parties:

Service Providers.

We share information with trusted third-party service providers who assist in operating our business, including payment processors, email marketing and automation platforms, web hosting and IT support providers, analytics providers, fraud prevention and identity verification services, and customer service platforms.

Affiliates and Business Partners.

We may share your personal information with our business affiliates and partners for purposes such as affiliate marketing programs and co-branded promotions or events.

Advertising Networks and Social Media Platforms.

To deliver more personalized ads, we may share information with ad networks such as Google Ads or Meta Ads, and we may use tracking pixels or similar tools to track engagement and optimize advertising.

Legal Authorities.

We may disclose your personal information when required to do so by law, regulation, or legal process, or to protect our legal rights, privacy, safety, or property.

Corporate Transactions.

In the event of a merger, acquisition, restructuring, or sale of our assets, your personal information may be transferred to a third party as part of the transaction. We will notify you of any significant changes.

Sale and Sharing of Personal Information.

We do not sell your personal information to third parties for direct financial compensation. However, we may allow certain third parties (such as ad networks or affiliate partners) to collect information about your activities on our Website through cookies or other tracking technologies. Under certain privacy laws, including the CCPA/CPRA, this activity may be considered a "sale" or "sharing" of personal information.

How to Opt Out of Sale, Sharing, and Targeted Advertising.

You may opt out of the sale and sharing of your personal information through any of the following methods:

• Click the "Do Not Sell or Share My Personal Information" link on our Website.

• Enable a Global Privacy Control (GPC) signal in your browser.

• Adjust your cookie preferences via our cookie consent tool or your browser settings.

• Opt out of targeted advertising by visiting https://optout.networkadvertising.org.

• Opt out of marketing communications via the unsubscribe link in any of our emails.

• Contact us directly at cindy@itscindykumar.com.

10. International Data Transfers

ElevateHerConsulting operates from Canada and serves clients and users globally. When you access our Website or purchase our services from outside Canada, your personal data may be transferred to and processed in Canada or other countries where our third-party service providers operate (including the United States and the European Economic Area).

We take steps to ensure such transfers comply with applicable data protection laws. For transfers from the EU/EEA or UK, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent mechanisms recognized under applicable law.

By using our Website or purchasing our services, you consent to the transfer of your information to Canada and acknowledge that privacy laws in Canada may differ from those in your country of residence.

11. Consumer Rights

You have certain rights regarding your personal data under applicable privacy laws. The specific rights available to you depend on your jurisdiction.

Rights Available to All Users.

• Right to Access: Request access to the personal data we hold about you.

• Right to Correction: Request correction of inaccurate or incomplete data.

• Right to Deletion: Request the deletion of your personal data (subject to legal exceptions).

• Right to Opt-Out: Opt out of the sale or sharing of your data or targeted advertising.

• Right to Data Portability: Request transfer of your data in a commonly used format.

Additional Rights for EU/EEA and UK Residents (GDPR / UK GDPR).

• Right to Restrict Processing: Request that we restrict the processing of your personal data in certain circumstances.

• Right to Object: Object to the processing of your personal data based on legitimate interests or for direct marketing purposes.

• Right to Withdraw Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.

• Right to Lodge a Complaint: File a complaint with your local data protection supervisory authority (e.g., the Information Commissioner's Office in the UK, or your national data protection authority in the EU).

Additional Rights for California Residents (CCPA/CPRA).

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the categories of sources, the business purposes, and the categories of third parties with whom we share data.

• Right to Limit Use of Sensitive Personal Information.

• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

• Right to Opt Out of Sale and Sharing.

Canadian Residents (PIPEDA / BC PIPA).

Canadian residents have rights to access, correct, and challenge the accuracy or completeness of their personal information. You may also withdraw consent to our collection, use, or disclosure of your personal information at any time, subject to legal and contractual restrictions.

How to Exercise Your Rights.

To exercise any of these rights, please contact us at cindy@itscindykumar.com. We will respond to verifiable requests within the timeframes required by applicable law (generally 30 days for GDPR requests; 45 days for CCPA/CPRA requests, with extensions permitted where necessary). We may need to verify your identity before processing your request.

Right to Appeal.

If we decline to take action on your request, you have the right to appeal our decision by contacting us at cindy@itscindykumar.com with the subject line "Privacy Rights Appeal." If your appeal is denied, you may contact your applicable data protection authority.

12. Do Not Track and Global Privacy Control (GPC)

Our Website honors Global Privacy Control (GPC) signals. When we detect a GPC signal from your browser, we will treat it as a valid opt-out request for the sale and sharing of personal information associated with that browser, as required by applicable law.

With respect to Do Not Track (DNT) browser signals, there is currently no industry-wide standard for how websites should respond to DNT signals. We will update this Policy if a uniform standard is adopted.

For more details on GPC, visit https://globalprivacycontrol.org.

13. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Account and transaction data: Retained for the duration of your account or business relationship, plus up to 7 years to comply with applicable tax, accounting, and legal obligations.

• Service engagement data (CFO on Call and advisory): Retained as required under applicable law and your service agreement.

• Marketing data: Retained until you unsubscribe or request deletion.

• Analytics and cookie data: Retained for up to 12 months.

• Legal and compliance records: Retained as required by applicable law.

After the applicable retention period, we will securely delete or anonymize your personal data unless retention is required by law.

14. Data Security

We implement appropriate technical and organizational security measures to protect your data from unauthorized access, loss, or misuse, including encryption, access controls, and secure data storage. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping your account credentials secure. We are not liable for any unauthorized access resulting from your failure to safeguard your login information.

15. Third-Party Platforms and Service Agreements

Our CFO on Call and advisory services may involve the use of third-party platforms, tools, and software. Your use of any such platforms is subject to those platforms' own terms of service and privacy policies. We recommend reviewing the privacy policies of any third-party tools or platforms used in connection with your engagement with us.

16. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal obligations, or the jurisdictions in which we operate. The "Last Updated" date at the top of this page reflects the latest version. If material changes are made, we will notify you via email or post a notice on our Website. Your continued use of the Website following such changes indicates your acceptance of the updated Policy.

17. Contact Us

If you have any questions, concerns, or would like to exercise your privacy rights, you can reach us at:

Cindy Kumar, ElevateHerConsulting Inc.

Email: cindy@itscindykumar.com.

Website Contact Form: www.itscindykumar.com/contact