Privacy Policy
This policy explains what personal information Natalie Cooper (trading as Cooper Consulting) collects through this website, why, how long it is kept, who it is shared with, and the choices and rights you have. It is written to meet the EU and UK General Data Protection Regulation (GDPR), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec’s Law 25, Canada’s Anti-Spam Legislation (CASL), the US CAN-SPAM Act, and US state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA).
- 1. Who we are
- 2. What we collect and why
- 3. Cookies and similar technologies
- 4. Who we share it with
- 5. International transfers
- 6. How long we keep it
- 7. Your rights
- 8. Emails and newsletters
- 9. Security, children and automated decisions
- 10. Changes and contact
1. Who we are
The website cooperconsulting.ai is operated by Natalie Cooper, trading as Cooper Consulting, 69 Corley Ave, Toronto, ON M4E 1T8, Canada. For the purposes of the GDPR we are the controller of your personal information.
Natalie Cooper is responsible for privacy and the protection of personal information (the “person in charge” under Quebec Law 25). Contact: natalie@cooperconsulting.ai.
2. What we collect and why
We only collect what you give us through the forms on this site, plus the limited technical data any website needs to work.
| Where | What | Why | Legal basis (GDPR) |
|---|---|---|---|
| Contact form | Name, email, company (optional), subject, message, and your consent choices with the date and wording version | To reply to your enquiry and, if you go ahead, discuss and provide our services | Your consent (Art. 6(1)(a)) and steps taken at your request before a contract (Art. 6(1)(b)) |
| “Send me occasional updates” (optional box on the contact form) | Name and email, and a record of your consent | To send occasional updates and resources by email | Your consent (Art. 6(1)(a)); express consent under CASL |
| FAIA mailing list | Name, email, what you’re interested in (optional), and a record of your consent | To send the FAIA newsletter, including news of training, retreats and cohorts | Your consent (Art. 6(1)(a)); express consent under CASL |
| Visiting the site | IP address, browser and device type, pages requested, date and time (in our hosting provider’s server logs); spam checks on form submissions | To deliver the site securely, prevent abuse and fix problems | Our legitimate interest in running a secure website (Art. 6(1)(f)) |
| Fonts | Your IP address, when your browser loads the site’s fonts from Google Fonts | To display the site’s typeface | Our legitimate interest in presenting the site consistently (Art. 6(1)(f)) |
You don’t have to give us any information to browse this site. Name, email and message are needed to reply to an enquiry; if you’d rather not use the form, you can email natalie@cooperconsulting.ai directly. We do not sell your personal information, use it for targeted advertising, or make decisions about you by automated means.
3. Cookies and similar technologies
This site does not use advertising or tracking cookies, and it does not currently use analytics. We use one item of browser storage, which is strictly necessary:
| Name | Type | Purpose | Duration |
|---|---|---|---|
cc-consent-v1 | Local storage (first party) | Remembers your cookie choice so we don’t ask on every visit | Until you clear your browser storage |
Our hosting provider may set technical cookies or similar identifiers needed to deliver the site and process form submissions securely; these are strictly necessary and are not used to track you.
If we ever add analytics or any other optional technology, it will stay off until you switch it on, and this policy will list it. You can change your choice at any time using Cookie settings (also linked in the footer). If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of anything optional.
4. Who we share it with
We share personal information only with service providers who help us run this site and our business, under contracts that require them to protect it and use it only on our instructions:
- Netlify, Inc. (United States) — website hosting and storage of form submissions.
- Google LLC — Google Fonts (United States) — delivery of the site’s web fonts.
- Google LLC — Google Workspace (United States) — our email, and where we keep enquiries and mailing-list sign-ups.
We may also disclose information if required by law, or to protect our rights, safety or property. We never sell personal information or share it for cross-context behavioural advertising.
5. International transfers
Some of our providers store or process information in the United States and other countries. Where information from the EU, EEA or UK is transferred, we rely on the EU–US Data Privacy Framework (and its UK extension) where the provider is certified, or on the European Commission’s Standard Contractual Clauses. For information about people in Canada, including Quebec, we assess and use contractual and other measures to provide a comparable level of protection. Information held abroad may be accessible to authorities in those countries under their laws.
6. How long we keep it
- Enquiries: up to 24 months after our last contact, unless you become a client, in which case we keep records for as long as needed for the work and as required by tax and accounting law.
- Mailing lists: until you unsubscribe. We then keep a minimal record of your consent and unsubscribe for up to 3 years, to show we followed the law, and add your email to a suppression list so you aren’t emailed again.
- Server logs: for the short period set by our hosting provider.
7. Your rights
Wherever you live, you can ask us to tell you what personal information we hold about you, to correct it, or to delete it, and you can withdraw any consent you’ve given at any time (this doesn’t affect anything we did before you withdrew it).
EU, EEA and UK (GDPR)
You have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interests and to object to direct marketing at any time. You can also complain to your local data protection authority (see the list of EU authorities, or the ICO in the UK).
Canada (PIPEDA and provincial laws, including Quebec Law 25)
You can access and correct your personal information, withdraw consent, and challenge our compliance. In Quebec you may also ask how information about you was obtained and, where applicable, request that it be de-indexed or transferred to you in a structured, commonly used format. If you’re not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.
United States (state privacy laws, including California)
Depending on where you live, you may have the right to know what personal information we collect and how we use and disclose it, to access, correct and delete it, to opt out of its sale, sharing or use for targeted advertising (we don’t do any of these), and to appeal a decision we make about your request. We will not discriminate against you for using these rights. You may use an authorised agent; we may ask for proof of their authority. We honour Global Privacy Control signals.
How to make a request
Email natalie@cooperconsulting.ai. We may need to confirm your identity before acting on a request. We will respond within 30 days (or sooner where the law requires) and will tell you if we need longer and why. There is normally no charge.
8. Emails and newsletters
We only send updates or the FAIA newsletter if you have ticked the box to say yes. Every email identifies Natalie Cooper (Cooper Consulting) as the sender, includes our postal address and tells you how to unsubscribe, and we process unsubscribe requests within 10 business days. You can also unsubscribe at any time by emailing faia@cooperconsulting.ai (FAIA newsletter) or natalie@cooperconsulting.ai. Replying to your enquiry is not a marketing email.
9. Security, children and automated decisions
The site is served over an encrypted (HTTPS) connection, access to personal information is limited to Natalie Cooper and the service providers listed above, and we use reputable providers with strong security. No method of transmission or storage is completely secure, but if a breach affecting your information occurs, we will notify you and the relevant authorities where the law requires.
This site is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has sent us information, contact us and we will delete it.
We do not use your personal information for automated decision-making or profiling that has legal or similarly significant effects on you.
10. Changes and contact
If we change this policy, we’ll update the date at the top, and if the change is significant, we’ll tell people on our mailing lists. Questions or requests: natalie@cooperconsulting.ai · 69 Corley Ave, Toronto, ON M4E 1T8, Canada.