Privacy Policy
Introduction
Rose+Thorn Consulting ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at roseandthorn.ai, register for our workshops, download our resources, or engage our consulting services.
We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL). If you have any questions about this policy or our practices, you can contact our Privacy Officer at the details provided below.
Privacy Officer
Jocelyne Martineau, Founder, Rose+Thorn Consulting Email: hello@roseandthorn.ai 25 Dalhousie Street, Toronto, ON, M5B 0B3.
All questions, concerns, and requests related to your personal information should be directed to the Privacy Officer listed above.
What Personal Information We Collect
We collect personal information only as needed to provide our services and communicate with you. The types of information we collect depend on how you interact with us:
When you download a free resource (guide, checklist, or template): Your name and email address.
When you register for a workshop: Your name, email address, professional designation, and registration number (for CE credit verification purposes).
When you engage our consulting services (Visibility Audit, Growth Strategy, Voice Blueprint, or Practice Partnership): Your name, email address, phone number, business name, practice details, website URL, and any professional materials you share with us as part of the engagement.
When you visit our website: We may collect technical information such as your IP address, browser type, pages visited, and time spent on our site through cookies and analytics tools. See the Cookies section below for details.
When you make a payment: Payment information (such as credit card details) is collected and processed directly by our third-party payment processor. We do not store your payment information on our systems.
How We Use Your Personal Information
We use your personal information for the following purposes:
To deliver what you requested: Sending you the resource you downloaded, registering you for a workshop, delivering consulting services, and issuing CE credit documentation.
To communicate with you about our services: If you have provided express consent, we may send you emails about upcoming workshops, practice growth strategies, and tools for psychologists. You can withdraw this consent at any time (see Your Rights below).
To improve our services: We use aggregated, non-identifying website analytics to understand how visitors use our site and to improve the experience.
To meet legal and professional obligations: Including record-keeping for CE credit issuance and compliance with applicable laws.
We will not use your personal information for any purpose beyond what is described here without first obtaining your consent.
Consent
We collect, use, and disclose your personal information only with your knowledge and consent, except where permitted or required by law.
Express consent is obtained when you actively opt in to receive marketing communications from us (for example, by checking the consent checkbox on a download form). Express consent remains valid until you withdraw it.
Implied consent may apply in limited circumstances, such as when we need to communicate with you to fulfil a service you have requested (for example, sending you logistics details for a workshop you have registered for).
You may withdraw your consent at any time by contacting us at hello@roseandthorn.ai or by using the unsubscribe link included in every marketing email we send. If you withdraw consent, we will stop sending you marketing communications within 10 business days. Please note that withdrawing consent may limit our ability to provide certain services.
When We Share Your Personal Information
We do not sell, rent, or trade your personal information to third parties.
We may share your personal information with the following categories of service providers, who assist us in operating our business:
Email marketing platform: To send you the resources you requested and, where you have consented, marketing communications. SquareSpace, Klaviyo and Linktr.ee processes your name and email address on our behalf.
Payment processor: To process payments for workshops and consulting services. SquareSpace Payments (Powered by Stripe), collects and processes your payment information directly.
Video conferencing provider: To deliver virtual workshops. Zoom processes your name and email address when you join a session.
Website hosting and analytics: Squarespace, Google Analytics, Meta may collect technical information about your visit to our website.
All service providers we work with are contractually required to protect your personal information and to use it only for the purposes we specify.
Cookies and Website Analytics
Our website uses cookies and similar technologies to improve your browsing experience and to collect aggregated analytics data.
Essential cookies are required for the website to function properly (for example, maintaining your session when you submit a form).
Analytics cookies help us understand how visitors use our website so we can improve it. These cookies collect information in an aggregated, anonymous form.
You can control cookie settings through your browser. If you disable cookies, some features of our website may not function as intended.
We do not use cookies to serve advertising or to track you across other websites.
How We Protect Your Personal Information
We take reasonable steps to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include:
Secure, encrypted connections (SSL/TLS) on our website
Password-protected systems and restricted access to personal information
Use of reputable, security-conscious service providers
Regular review of our data handling practices
No method of electronic storage or transmission is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
How Long We Keep Your Personal Information
We retain your personal information only as long as necessary to fulfil the purposes for which it was collected, or as required by law.
Marketing consent records: Retained for as long as you remain subscribed, plus three years after you unsubscribe (as required for CASL compliance).
Workshop registration records: Retained for a minimum of seven years for CE credit verification and record-keeping purposes.
Consulting engagement records: Retained for a minimum of seven years for business and tax purposes.
Website analytics data: Retained in aggregated, non-identifying form.
When personal information is no longer needed, we securely delete or anonymize it.
Transfers Outside of Canada
Some of our service providers may store or process your personal information in the United States or other jurisdictions outside of Canada. When this occurs, your information may be subject to the laws of those jurisdictions, which may differ from Canadian privacy law.
We take reasonable steps to ensure that any service provider handling your information outside of Canada provides a comparable level of protection. By providing your personal information to us, you consent to this transfer, storage, and processing.
Your Rights
Under PIPEDA, you have the right to:
Access your personal information. You may request a copy of the personal information we hold about you.
Correct your personal information. If your information is inaccurate or incomplete, you may request that we update it.
Withdraw your consent. You may withdraw consent for marketing communications at any time by clicking the unsubscribe link in any email or by contacting us directly. We will process your request within 10 business days.
Challenge our compliance. If you believe we are not handling your personal information in accordance with this policy or applicable law, you have the right to file a complaint with us. If we are unable to resolve your concern, you may file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca. To exercise any of these rights, please contact our Privacy Officer at hello@roseandthorn.ai. We will respond to your request within 30 days.
Children's Privacy
Our services are designed for licensed professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will delete it promptly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
If we make material changes to how we handle your personal information, we will notify you by email (if you are subscribed to our communications) or by posting a notice on our website.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or have a concern about how we handle your personal information, please contact: Jocelyne Martineau Privacy Officer, Rose+Thorn Consulting Email: hello@roseandthorn.ai 25 Dalhousie Street, Toronto, ON, M5B 0B3.
This Privacy Policy was last reviewed on March 11, 2026. Rose+Thorn Consulting is committed to complying with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).
Last Updated: March 11, 2026