LEGAL PRIVACY POLICY

Online Privacy Policy

Updated: January 2026

This Privacy Policy explains what information ("Personal Data") is collected from individuals ("Users") and how that information is used, processed, stored, and protected by 1355050 Alberta Ltd (the "Company"). This policy applies to all websites, digital services, and online interactions owned or operated by the Company, including: www.nala-lashassociation.com and www.academy.nala-lashassociation.com (Collectively, the "Site").

By accessing, using, or submitting information through the Site, you consent to this Privacy Policy.

 

SUMMARY OF KEY POINTS

  • You voluntarily provide Personal Data when you fill out forms, purchase products, register for content, or communicate with the Company.
  • AI (Artificial Intelligence) technologies may be used by the Company or its service providers to process Personal Data and generate insights or inferred data.
  • Personal Data is not sold and is only shared with essential service providers or as legally required.
  • You may request access, correction, deletion, or restriction of your Personal Data at any time by contacting: georgia@nala-lashassociation.com 
  • You may unsubscribe from communications at any time.
  • Children under age 13 should not submit any information to the site. 

 

TYPES OF INFORMATION COLLECTED

  • Personal Data You Voluntarily Provide
    • This includes information submitted through forms, checkouts, downloads, registrations, surveys, or direct communication, including but not limited to: 
      • Name
      • Email address
      • Mailing and billing address
      • Phone number
      • Account information
      • Member ID Number
      • Social Media handles
      • Any additional information you voluntarily provide
  • Automatically Collected Data
    • Automatically collected data may include, but is not limited to:
      • IP address
      • Browser type
      • Device indentifiers
      • Pages visited
      • Time spent on the site
      • Referring URLs
      • Click paths and engagement
      • General location information 
    • See the Company's Cookie Policy for details. 
  • AI-Generated or Inferred Data
    • AI tools or automated systems may generate additional insights, including, but not limited to:
      • Predicted interests
      • Behavioral classifications
      • Engagement scores
      • Spam or fraud-risk scores
      • Preferences
      • Content suggestions
    • "Inferred Data" is treated as Personal Data if linked to an individual.

 

HOW INFORMATION IS USED

Personal Data may be used for including, but not limited to:

  • Providing content, products, services, or access
  • Delivering emails and communications
  • Processing payments
  • Responding to inquiries
  • Operating communities or memberships
  • Improving the Site and user experience
  • Fraud monitoring and spam detection
  • Analytics and performance optimization 

 

 USE OF INFORMATION

As a general policy, no personally identifiable information, such as your name, address, or e-mail address, is automatically collected from your visit to the Site. However, certain non-personal information is recorded by the standard operation of the Company’s internet servers. Information such as the type of browser being used, its operating system, and your IP address is gathered in order to enhance your online experience.

Personally identifiable information is information that specifically identifies you (name, email address, ship to/bill to address, phone number).

The Site’s various mailing lists, downloads, special offers, contests, registration forms, and surveys may request that you give us contact information such as your name, mailing and/or e-mail address, demographic information such as your age and gender, and personal preference information such as your preferred software and interests.

Information submitted at the time of submission will be used by the Company only as necessary for our legitimate business interests, including, without limitation, the improvement of our products, services and the contents of the Site.

The Company may also share such information with our business and promotional partners to further those interests.

Personally identifiable information is never sold or leased to any third parties. With your permission, we may use your contact information to send you information about our company and products. You may always opt-out of receiving future mailings as provided below.

The Company does not store any credit card information it may receive in regard to a specific transaction and/or billing arrangement except as necessary to complete and satisfy its rights and obligations with regard to such transaction, billing arrangement, and/or as otherwise authorized by a user. All credit card information is handled by PayPal.

The Company may disclose user information in special cases when we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing injury to or interference (either intentionally or unintentionally) with the Company’s rights or property, other users of the Site, or anyone else that could be harmed by such activities.

 

USE OF ARTIFICIAL INTELLIGENCE

The Company may use Artificial Intelligence ("AI") tools to support and improve its operations, including but not limited to customer support automation, content personalization, email routing, fraud monitoring, analytics, and the creation of summaries, insights, classifications, or recommendations.  

AI tools are used to assist the Company, not to replace human judgment. The Company reviews and verifies AI-assisted output before relying on it, as such outputs may be incomplete or inaccurate. Users should likewise independently verify any information before relying on it. 

I. NO MODEL TRAINING ON IDENTIFIABLE DATA

The Company does not knowingly permit identifiable Personal Data to be used for training or improving AI models. To the extent feasible, the Company use settings and configurations that restrict AI tools from retaining or learning from User-specific information. 

Third-party vendors may process anonymized or aggregated data for service improvement under their own contractual terms. The Company does not control, and is not responsible for, how these vendors train or enhance their AI systems. 

II. THIRD-PARTY AI USAGE

Many of the Company's service providers - such as payment processors, website hosts, analytics platforms, and CRM systems - may use AI within their own products. Their AI processes are governed by their respective privacy policies and terms, which may differ from the Company's practices.

The Company does not control how these providers implement AI and encourages Users to review the privacy policies of any third-party services they interact with. 

 

LEGAL BASIS FOR PROCESSING

Depending on your jurisdiction and the specific purpose for which Personal Data is processed, the Company may rely on one or more of the following lawful bases: 

  • Consent: Where you have clearly and affirmatively agreed to the processing, including by submitting forms, creating accounts, purchasing products, or opting into communications. 
  • Performance of a Contract: Where processing is necessary to provide the products or services you have requested, fulfill orders, manage transactions, or otherwise perform obligations arising from a contractual relationship. 
  • Compliance with Legal Obligations: Where processing is required to comply with applicable law, regulatory requirements, tax obligations, court orders, or other mandatory legal processes. 
  • Legitimate Interests: Where processing is necessary for the Company's legitimate business purposes, such as maintaining the security of the Site, preventing fraud, improving services, conducting analytics, or managing business operations, provided such interests are not overridden by your rights and interests. 
  • Vital Interests: Where processing is necessary to protect your life, health, or physical safety, or that of another individual. 
  • Public Interest: Where processing is necessary for reasons of substantial public interest, including legal, safety, or regulatory functions that serve broader societal needs. 

The applicable lawful basis may vary depending on the nature of your interaction with the Company and the requirements of the relevant data-protection laws in your region. 

 

SHARING OF INFORMATION

The Company may share Personal Data with third parties only as reasonably necessary to operate with the Site, provide requested services, comply with legal obligations, or protect the Company's legitimate business interests. Such sharing may include, without limitation:

  • Essential service providers and contractors, such as website hosting, payment processors, analytics providers, communication platforms, customer-support tools, data-storage vendors, and AI-powered service providers engaged to perform administrative, technical, or operational functions on the Company's behalf. 
  • Legal, regulatory, or governmental authorities when disclosure is required by law, subpoena, court order, lawful request, or to protect the rights, safety, or property of the Company, its users, or the public. 
  • Business transferees in connection with any merger, acquisition, sale of assets, restructuring, financing, or similar corporate transaction, in which case Personal Data may be transferred as part of the business assets. 
  • Trusted collaboration partners involved in delivering co-branded products, joint ventures, affiliate programs, and integrated services, but only to the extent reasonably necessary to fulfill such collaboration.  

All third-party service providers are permitted to process Personal Data solely for the purposes for which it was disclosed and are required to handle such information in accordance with applicable privacy and data-protection laws. 

 

PAYMENT INFORMATION

The Company does not store credit card numbers or fill payment card information, and does not have visibility into such data. Payment processing is conducted solely by third-party processors, including but not limited to: PayPal, and Kajabi Payments, each of which operates independently under its own security, compliance, and privacy standards. 

Certain platforms may offer a "save payment method" or similar functionality. Any stored payment details associated with that feature are maintained only by the payment processor. The Company does not store, access, or manage these details and relies entirely on the processor's security measures for such data. 

 

AUTOMATED DECISION MAKING AND AI-ASSISTED PROCESSING

The Company may use automated systems - including artificial intelligence, machine learning models, and algorithmic tools - to assist in evaluating certain types of information. These systems may be used for purposes such as, but not limited to: 

  • Fraud prevention and risk scoring
  • Spam, abuse, or security threat detection
  • Transaction integrity and payment-related risk assessment
  • Behavioural pattern analysis
  • Personalization of content, recommendations, or user experience 

These automated tools are designed to support and enhance the Company's operations. They do not make decisions that produce legal or similarly significant effects without appropriate human oversight and review. Any determinations that may materially affect your legal rights, access to services, or purchasing ability will involve meaningful human involvement before becoming final. 

The Company continually monitors and updates these systems to maintain accuracy, fairness, and compliance with applicable laws governing automated decision-making and AI. 

 

USER RIGHTS

Depending on your location, you may have several rights regarding your Personal Data. These rights generally include the ability to:

  • Access the Personal Data the Company holds about you
  • Correct inaccurate or incomplete information
  • Delete your Personal Data when permitted by law
  • Restrict how your data is processed
  • Object to certain types of processing, including direct marketing
  • Receive a copy ("data portability") of your Personal Data in a usable format 
  • Withdraw consent at any time if processing is based on consent
  • Opt out of automated processing or certain types of profiling, where applicable

You may exercise these rights by contacting the Company using the information provided in this Policy. The Company will respond in accordance with applicable laws.

Requests may be sent to: georgia@nala-lashassociation.com 

 

CHILDREN'S PRIVACY (COPPA NOTICE)

This Site is not intended for children under the age of 13. In accordance with the Children's Online Privacy Protection Act ("COPPA"), the Company does not knowingly collect, use, or store Personal Data from children under 13 years old. 

The Company recognizes the special obligation to protect personally identifiable information obtained from children aged 13 and under. AS SUCH, IF YOU ARE 13 YEARS OLD OR YOUNGER, THE COMPANY REQUESTS THAT YOU NOT SUBMIT ANY PERSONAL INFORMATION TO THE SITE OR TO THE COMPANY. If the Company becomes aware that Personal Data has been collected from a child under 13, the Company will take reasonable steps to delete that information as quickly as possible. 

Parents or legal guardians who believe that the Company may have collected Personal Data from a child under 13 may contact the Company using the information provided in this Policy so that appropriate action can be taken. 

The Company nonetheless encourages parents to go online with their children.


USE OF COOKIES AND SIMILAR TECHNOLOGIES

Cookies are pieces of information that a website transfers to an individual’s computer hard drive for record-keeping purposes. The Site may use cookies and similar technologies to support and improve your experience. These tools may be used to, including but not limited to: 

  • Remember your settings and preferences 
  • Improve the functionality and performance of the Site
  • Facilitate logins, authentication, and user access
  • Analyze how Users interact with the Site
  • Personalize or enhance the overall experience

Users can disable or manage cookies through their browser settings; however, some features of the Site may not function properly without cookies. 

For more detailed information about the types of cookies used and how they operate, please refer to the Company's Cookie Policy. In simple terms, disabling cookies can prevent certain features from working as intended. For example, videos may not load, pages may not display correctly, login sessions may not stay active, and some content or settings may not appear because the Site cannot remember who you are or what you selected. 

 

SECURITY

The Company uses reasonable and appropriate measures to protect Personal Data from unauthorized access, loss, or misuse. However, no online system can be guaranteed to be completely secure. The Company may also use AI-based security tools to help identify unusual or potentially harmful activity. While these tools improve security, they do not eliminate all risks. 

These measures may include steps such as included but not limited to: 

  • Requiring strong, unique passwords
  • Offering or requiring two-factor authentication
  • Using secure, encrypted connections (HTTPS)
  • Limiting access to Personal Data to authorized personnel
  • Regularly updating software and systems
  • Using firewalls and security monitoring tools
  • Employing AI-based systems to detect unusual or potentially harmful activity 

These practices help protect Personal Data, but no method of online transmission or storage can be guaranteed completely secure.  

 

EXTERNAL LINKS

Links to third-party websites or services may appear on the Site. These sites are not owned or controlled by the Company, and this Privacy Policy does not apply to them. Any information you provide to a third-party site is governed by that Site's own privacy policy and practices. The Company encourages Users to review the privacy policies of any third-party sites before providing Personal Data or engaging with their content.

 

COMMUNITY AREAS AND USER-GENERATED CONTENT POLICY

If you participate in any community spaces offered by the Company (such as discussion boards, forums, groups, or member communities), please be aware that anything you choose to post or share - including Personal Data - may be visible to other members. Other users may read, download, copy, or use the information you share.

Users should be aware that when they voluntarily disclose personal information (e.g., user name, e-mail address, phone number) in the communities or in the chat areas, that information can be collected and used by others and may result in unsolicited messages from other people. You are responsible for the personal information you choose to submit in these instances. Please take care when using these features.

Before posting, please review the Company's Community Guidelines and User-Generated Content Policy for important information about what is appropriate to share and how your content may be used. 

 

OPT-OUT PROCEDURES

Users may unsubscribe from all Company communications at any time by clicking the unsubscribe link included in any email or message. Once you subscribe, the Company cannot add you back to its system or contact you again unless you re-subscribe on your own. 

You always have the option of removing your name from any e-mail list in order to discontinue any such future communications. In order to ensure immediate removal from any list, please follow the specific instructions set forth within the communications you receive from the Company, which you no longer wish to receive. If you are unsuccessful in completing the instructions specified in any such communication, please e-mail us at georgia@nala-lashassociation.com,  including a copy of the undesired email attached to the request, and state you wish to be removed from the mailing list.

If you wish to receive fewer types of communications - rather than unsubscribing from all - you may contact the Company at georgia@nala-lashassociation.com to request removal from specific communication categories, if available. 

 

MALWARE, SPYWARE, AND VIRUSES

Neither the Company nor the Site knowingly permit the use of malware, spyware, viruses, and/or other similar types of software.

 

BUSINESS TRANSFERS

If the Company undergoes a business transition - such as a merger, acquisition, reorganization, or sale of assets - user information may be transferred as part of that transaction. If ownership or control of the Company changes, Users will be notified, and the new owner will be identified. 

Users will be given the opportunity to unsubscribe or request removal from the Company's systems before and after the transition. Any continued use of the new company's services will be subject to that company's privacy policies. 

Customer lists and information are properly considered assets of a business. If the Company merges with another entity, or if we sell our assets to another entity, our customer list and information would be included among the assets transferred.

 

YOUR ACCEPTANCE OF THESE TERMS

By using the Site, you accept the policies and restrictions set forth in this Online Privacy Policy. If you do not agree to this policy, please do not use the Site. This Online Privacy Policy may be revised from time to time by updating this posting. You are bound by any such revisions and should therefore periodically visit this page to review the then-current Online Privacy Policy to which you are bound.

 

SECURITY RISKS

Security for all personally identifiable information is extremely important to the Company. Unfortunately, no data transmission over the internet can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, the Company cannot ensure or warrant the security of any information you transmit via the internet. By transmitting any such information to the Company, you accept that you do so at your own risk.

 

MODIFICATIONS TO THIS POLICY

Updates to this Privacy Policy will be posted on the Site along with a revised "Updated" date. The Company may update this Policy at any time. Your continued use of the Site after any changes are posted constitutes your acceptance of the revised Policy. The company may update or revise this Privacy Policy at any time. Updates take effect immediately upon posting.

  

CONTACT INFORMATION

For questions regarding this Policy, contact:

georgia@nala-lashassociation.com