1. Introduction
Organicorganic ("we," "us," or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy applies to all visitors and users of the website located at organicorganic.world and describes our practices regarding the collection, use, disclosure, and safeguarding of information in accordance with the General Data Protection Regulation (GDPR), the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada, and other applicable international privacy laws.
By accessing or using our website, submitting a contact form, enrolling in an educational program, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms outlined herein, please discontinue use of our website and services immediately.
Our website provides general informational content about posture awareness and movement habits. We do not offer medical advice, diagnosis, or treatment. Any personal data collected is used solely for the purposes described in this policy and is never sold to third parties for unrelated marketing purposes.
2. Data Controller Information
The data controller responsible for your personal information is:
- Business Name: Organicorganic
- Address: 3401 Dufferin Street, Toronto, ON M6A 2T9, Canada
- Phone: +1 416-789-3261
- Email: touch@organicorganic.world
- Website: organicorganic.world
For any privacy-related inquiries, data subject requests, or concerns about how your information is handled, you may contact us using the details above. We will respond to all legitimate requests within the timeframes required by applicable law, typically within thirty days of receipt.
3. Personal Data We Collect
We collect personal data through various interactions with our website and services. The categories of data we may collect include:
3.1 Information You Provide Directly
- Contact Information: Your name, email address, phone number, and any message content submitted through our contact form.
- Program Enrollment Data: Information provided when registering for educational posture coaching programs, including preferences, scheduling availability, and stated goals.
- Payment Information: Billing name, address, and transaction details when purchasing educational products or consulting sessions. Payment card details are processed by secure third-party payment processors and are not stored on our servers.
- Communication Records: Correspondence exchanged via email, phone, or video consultation sessions related to our educational services.
3.2 Information Collected Automatically
- Device and Browser Data: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
- Usage Data: Pages visited, time spent on pages, click patterns, referral URLs, and navigation paths through our website.
- Cookie Data: Information collected through cookies and similar tracking technologies as described in our Cookie Policy.
3.3 Information from Third Parties
We may receive limited information from analytics providers, payment processors, and advertising platforms when you interact with our website. Such data is processed in accordance with this policy and the respective third party's privacy terms.
4. Legal Basis for Processing
Under the GDPR, we process your personal data based on the following legal grounds:
- Consent: When you submit our contact form, accept cookies, or opt in to marketing communications, you provide explicit consent for us to process your data for the stated purposes.
- Contractual Necessity: Processing required to fulfill our obligations when you enroll in a program, purchase an educational product, or schedule a consulting session.
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our website, analyzing usage patterns, and ensuring network security, provided these interests do not override your fundamental rights.
- Legal Obligation: Processing required to comply with applicable laws, regulations, court orders, or governmental requests.
For Canadian residents, PIPEDA permits collection, use, and disclosure of personal information with meaningful consent, except where otherwise permitted by law. We obtain your consent at or before the time of collection whenever practicable.
5. Purpose of Data Usage
We use your personal data exclusively for the following purposes:
- Responding to your inquiries submitted through our contact form or email
- Delivering educational posture coaching programs, consulting sessions, and purchased materials
- Processing payments and maintaining transaction records
- Sending service-related communications, including enrollment confirmations and scheduling updates
- Improving our website content, user experience, and educational offerings based on aggregated usage analysis
- Complying with legal and regulatory requirements in Canada and applicable international jurisdictions
- Protecting against fraud, unauthorized access, and other security threats
- Sending promotional communications about our educational services, only where you have provided explicit consent
We do not use your personal data to make automated decisions that produce legal or similarly significant effects. All coaching guidance remains educational and non-medical in nature.
6. Data Retention Period
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. Our standard retention periods are as follows:
- Contact Form Submissions: Retained for twenty-four months from the date of submission, after which they are securely deleted unless an ongoing business relationship exists.
- Program Enrollment Records: Retained for five years following the completion of the program or last interaction, to support reference requests and comply with financial record-keeping requirements.
- Payment and Transaction Data: Retained for seven years in accordance with Canadian tax and accounting regulations.
- Marketing Consent Records: Retained for the duration of the consent plus three years after withdrawal, to demonstrate compliance with consent requirements.
- Analytics and Cookie Data: Retained for up to twenty-six months, after which data is anonymized or deleted.
- Server Log Files: Retained for ninety days for security monitoring purposes.
When retention periods expire, personal data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual.
8. Security Measures
We implement comprehensive technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmitted between your browser and our servers
- Secure socket layer (SSL/TLS) certificates ensuring encrypted communication channels
- Access controls limiting personal data access to authorized personnel on a need-to-know basis
- Regular security assessments and vulnerability monitoring of our website infrastructure
- Encrypted storage for sensitive data at rest where applicable
- Employee training on data protection practices and privacy compliance obligations
- Incident response procedures for detecting, reporting, and addressing data breaches within seventy-two hours as required by GDPR
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is completely secure. We encourage you to use strong passwords and exercise caution when sharing personal data online.
9. Your Rights Under GDPR and PIPEDA
Depending on your location, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
- Right to Restrict Processing: Request limitation of processing under certain circumstances.
- Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
- Right to Lodge a Complaint: File a complaint with the Office of the Privacy Commissioner of Canada or your local supervisory authority.
To exercise any of these rights, contact us at touch@organicorganic.world or by mail at our Toronto address. We will verify your identity before processing requests and respond within thirty days.
10. International Data Transfers
Your personal data may be transferred to and processed in countries outside of Canada and the European Economic Area where our service providers operate. When such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms.
By using our website and services, you acknowledge that your data may be processed in jurisdictions that may have different data protection laws than your country of residence. We take all reasonable steps to ensure your data receives an adequate level of protection regardless of where it is processed.
11. Children's Privacy
Our website and educational services are not directed at individuals under the age of sixteen. We do not knowingly collect personal data from children. If we become aware that we have collected personal information from a child without verified parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us immediately.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When material changes are made, we will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy regularly to stay informed about how we protect your information.
Where required by law, we will obtain your consent before applying significant changes to how we process your personal data.
13. Contact Information for Privacy Inquiries
If you have questions, concerns, or requests related to this Privacy Policy or our data handling practices, please contact us:
- Organicorganic
- 3401 Dufferin Street, Toronto, ON M6A 2T9, Canada
- Phone: +1 416-789-3261
- Email: touch@organicorganic.world
We are committed to resolving privacy concerns fairly and promptly. For unresolved complaints, Canadian residents may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca. European residents may contact their local data protection authority.