Privacy Policy
True North Money Management Effective Date: April 23, 2026
1. Introduction
True North Money Management (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through this Privacy Policy. This document describes how we collect, use, disclose, and protect your personal information when you visit our websites (https://www.truenorthmoney.com and https://www.truenorthmoney.ca) and interact with our services.
This Privacy Policy is intended to comply with applicable US state privacy laws, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and British Columbia’s Personal Information Protection Act (PIPA). Where you are located determines which laws apply to you; however, we apply these standards to all clients and website visitors as a baseline.
2. Privacy Officer
We have designated a Privacy Officer who is responsible for overseeing our compliance with applicable privacy laws. If you have any questions, concerns, or requests regarding your personal information, please contact our Privacy Officer:
Stephanie Berman True North Money Management, Box 1492, Kamloops PO Main, BC V2C 6L8 Contact Stephanie
3. Information We Collect
We collect personal information in the following ways:
Information You Provide Directly: When you contact us, sign up for services, complete intake forms, request information, or make payments, we may collect your name, email address, phone number, billing information, financial information relevant to budgeting coaching, and any other details you voluntarily provide.
Automatically Collected Information: When you visit our websites, we use Google Analytics to automatically collect data including IP addresses, browser types, device information, and website usage behavior (such as pages visited and time spent on the site).
Information from Third-Party Services: We use third-party service providers to support our business operations. These providers may collect and process your personal information as described in Section 6 below.
We collect only the information that is necessary for the purposes identified in this Privacy Policy.
4. Purposes for Collecting Your Information
We collect and use your personal information only for the following specific purposes, which a reasonable person would consider appropriate in the circumstances:
- To provide, deliver, and manage our coaching services
- To process payments and send invoices
- To communicate with you via email, phone, or SMS
- To schedule appointments and manage our client relationship
- To analyze website usage and improve our offerings
- To comply with legal and regulatory obligations
- To send marketing communications (only with your consent, where required)
We will not use your personal information for any new purpose without first identifying the new purpose and obtaining your consent where required by law.
5. Consent
We obtain your consent before or at the time of collecting your personal information, except where permitted or required by law to collect it without consent.
How we obtain consent: Consent may be expressed (e.g., by checking a box, signing an agreement, or verbally agreeing) or implied from the context of your interaction with us (e.g., providing your contact information to request a service). Where we rely on implied consent, the purpose for collection will be clear and obvious at the time.
Marketing communications: We will only send you marketing or promotional communications where you have provided your express consent to receive them, or where permitted by applicable law. You may withdraw your consent to marketing communications at any time (see Section 9).
Withdrawing consent: You may withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. Please note that withdrawing consent may affect our ability to provide certain services to you. To withdraw consent, contact our Privacy Officer at the address listed in Section 2.
6. Third-Party Service Providers and Cross-Border Data Transfers
We work with third-party service providers to support our operations. In doing so, your personal information may be transferred to, stored in, or processed in the United States or other jurisdictions outside of Canada. These jurisdictions may have privacy laws that differ from those in your province or country, and personal information stored there may be subject to access by local courts, law enforcement, or national security authorities under the laws of those jurisdictions.
We take steps to ensure that our third-party providers handle your personal information with appropriate protections, including reviewing their privacy policies and, where appropriate, entering into data processing agreements.
Our current third-party service providers are:
| Provider | Purpose | Privacy Policy |
| GoHighLevel | CRM, email marketing, SMS messaging, scheduling, and intake forms | https://www.gohighlevel.com/privacy-policy |
| Google Analytics | Website analytics | https://policies.google.com/privacy |
| Wave Apps | Invoicing and payments | https://www.waveapps.com/legal/privacy-policy |
The following service providers are based in the United States, and your personal information will be transferred to and processed in the United States when using these services: GoHighLevel and Google Analytics. Wave Apps is headquartered in Toronto, Ontario, Canada, and data processed through Wave remains subject to Canadian privacy law.
By using our services, you acknowledge that some of your personal information will be transferred to and processed in the United States.
We do not sell your personal information to any third party.
We may also disclose your personal information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of our Company, our clients, or others.
7. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specifically:
- Active client records are retained for the duration of our coaching relationship and for a period of seven (7) years afterward, in order to meet legal, tax, and accounting obligations.
- Prospective client inquiries that do not result in an engagement are retained for up to two (2) years.
- Website analytics data (via Google Analytics) is retained in accordance with Google’s data retention settings, which we have configured to 26 months.
- Marketing communication records are retained until you withdraw consent or opt out, after which we retain a record of your opt-out status to honor your preference.
When personal information is no longer required, we will destroy, erase, or de-identify it in a secure manner.
8. Data Security
We implement reasonable and appropriate administrative, technical, and physical security measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include secure transmission protocols (HTTPS), access controls, and use of reputable third-party platforms with their own security practices.
However, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and we encourage you to exercise caution when sharing personal information online.
Security breach notification: In the event of a security breach involving your personal information that creates a real risk of significant harm to you, we will notify you and, where required, the appropriate regulatory authority, in accordance with applicable law (including PIPEDA’s breach of security safeguards requirements). We maintain a record of all security breaches for a minimum of 24 months.
9. Your Rights and Choices
Subject to applicable law, you have the following rights regarding your personal information:
Access: You have the right to request access to the personal information we hold about you, and to receive information about how it has been used and disclosed.
Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
Withdrawal of Consent: You have the right to withdraw consent to our collection, use, or disclosure of your personal information, subject to legal or contractual restrictions (see Section 5).
Opt-Out of Marketing Communications:
- To unsubscribe from email communications, use the “unsubscribe” link in any of our emails.
- To opt out of SMS messages, reply STOP or Unsubscribe to any SMS message from us.
- To opt out of all marketing communications, contact our Privacy Officer directly.
Google Analytics Opt-Out: You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.
Response Timeline: We will respond to access or correction requests within 30 days of receipt. If we require additional time (up to a maximum of an additional 30 days under PIPA), we will notify you in writing.
To exercise any of these rights, please contact our Privacy Officer using the information in Section 2. We may ask you to verify your identity before processing your request.
10. Third-Party Links
Our websites may contain links to external websites that are not operated by us. We are not responsible for the content or privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.
11. Children’s Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18 without verifiable parental consent. If we become aware that we have inadvertently collected personal information from a minor, we will take prompt steps to delete that information from our records.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Effective Date” at the top of this policy indicates when the most recent revision was made. We encourage you to review this policy periodically. Where changes are material, we will make reasonable efforts to notify you directly (e.g., by email).
13. Questions and Complaints
If you have questions or concerns about this Privacy Policy or our privacy practices, please contact our Privacy Officer (see Section 2).
Canadian residents who are unsatisfied with our response have the right to contact the applicable privacy regulator:
- Federal (PIPEDA): Office of the Privacy Commissioner of Canada — www.priv.gc.ca
- British Columbia (PIPA): Office of the Information and Privacy Commissioner for BC — www.oipc.bc.ca
US residents may also have rights under applicable state privacy laws and may contact relevant state authorities with concerns.
This Privacy Policy was last reviewed and updated on April 23, 2026.
