─────────────────────────────────────────────

This Privacy Policy describes how Chrysalis Creative Coaching collects, uses, and protects your personal information when you visit Chrysalis.Club, download a free resource, or purchase coaching, an online course, or a membership. It is written to comply with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), other applicable US state privacy laws, and international data protection standards for our global members.

─────────────────────────────────────────────

1. WHO WE ARE

Chrysalis Creative Coaching ("we," "us," or "our") operates the website Chrysalis.Club at https://Chrysalis.Club, offering personal development coaching, online courses, and community membership programs (collectively, the "Services"). Our courses and membership are hosted on Kajabi, and our website is hosted and our email marketing is managed through FEA Create.

We are an online-only business. You can reach us at:

General enquiries: [email protected]

Privacy requests: [email protected]

Website: https://Chrysalis.Club

We aim to respond to all privacy-related requests within 30 days.

─────────────────────────────────────────────

2. PERSONAL INFORMATION WE COLLECT

We collect personal information in the following categories when you interact with our website or Services:

2.1 Account & Registration Information

When you create an account or purchase a course, coaching package, or membership through Chrysalis.Club or our Kajabi platform, we collect:

— Full name and email address

— Username or display name

— Password (stored using secure one-way hashing — we never store or see your plain-text password)

— Profile information you voluntarily provide (e.g., bio, photo, personal goals)

2.2 Payment & Billing Information

All payments are processed by Stripe, a PCI-DSS Level 1 certified payment processor. We do not store your full card number or CVV on our servers. We may retain:

— Billing name

— Transaction amount, date, and currency

— Last four digits of your payment card (for support and reference)

— Subscription plan, status, and renewal dates

— Refund and dispute history

Stripe processes your payment data under its own Privacy Policy: stripe.com/privacy

2.3 Lead Magnet & Opt-In Information

When you sign up for a free resource, webinar, challenge, masterclass, or newsletter, we collect:

— Your name and email address

— The specific opt-in source and date (e.g., "Downloaded [Resource Name] on April 7, 2026")

— Any additional information you voluntarily submit in a sign-up form

We record every opt-in with a timestamp and source so we can honour your preferences and demonstrate compliance with applicable law.

2.4 Coaching & Course Participation Data

As part of delivering our coaching or course Services, you may voluntarily share:

— Goals, challenges, background, or personal circumstances (e.g., in intake forms or pre-session questionnaires)

— Progress updates, worksheet responses, or reflections

— Notes from coaching sessions (where applicable)

This information is used solely to deliver your Services and is never shared with third parties for marketing purposes.

2.5 Automatically Collected Technical Data

When you visit our website, we and Google Analytics automatically collect:

— IP address (anonymised — see Section 6)

— Browser type, version, and language

— Device type and operating system

— Pages visited, time on page, and links clicked

— Referring URL or traffic source (e.g., social media, search engine, email)

— Session duration and approximate geographic location (country/city level)

2.6 Communications Data

If you email us or submit a contact or support form, we collect your name and email address, the content of your message, and records of our correspondence.

─────────────────────────────────────────────

3. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

Providing Services — Creating and managing your account on Chrysalis.Club and Kajabi; delivering course and coaching access; processing payments via Stripe; managing renewals and subscriptions. Legal basis: Contract performance.

Customer Support — Responding to questions, troubleshooting issues, and processing refund or billing requests. Legal basis: Contract performance / Legitimate interests.

Transactional Emails — Account confirmations, Kajabi course access links, Stripe receipts, password resets, and renewal and billing alerts. Legal basis: Contract performance.

Marketing Emails — Newsletters, program launches, promotions, and educational content — only sent to those who have explicitly opted in via FEA Create. Legal basis: Consent.

Lead Magnet Delivery — Delivering free resources (guides, webinars, challenges) and the follow-up email sequence you signed up for, managed via FEA Create. Legal basis: Consent.

Analytics & Improvement — Understanding how visitors use our website via Google Analytics to improve content, structure, and user experience. Legal basis: Legitimate interests / Consent.

Security & Fraud Prevention — Detecting unauthorised access, fraudulent transactions, or abuse of our Services. Legal basis: Legitimate interests.

Legal & Financial Compliance — Maintaining transaction records for tax and accounting purposes; responding to lawful legal requests. Legal basis: Legal obligation.

─────────────────────────────────────────────

4. HOW WE SHARE YOUR INFORMATION

WE DO NOT SELL YOUR PERSONAL INFORMATION. Chrysalis Creative Coaching does not sell, rent, or trade your personal information to any third party for their own commercial or marketing purposes. This applies to all users, including California residents under the CCPA and CPRA.

We share your information only in the following limited circumstances:

4.1 Service Providers

We work with the following trusted third-party providers, who process data strictly on our instructions and under contractual data protection obligations:

Stripe | Securely processes all transactions and subscription billing | Privacy policy: stripe.com/privacy

Kajabi | Hosts and delivers all course content, membership areas, and member accounts | Privacy policy: kajabi.com/privacy

FEA Create | Hosts our website and manages our email marketing and subscriber lists | Privacy policy: feacreate.com/privacy

Google Analytics (Google LLC) | Analyses anonymised website traffic and usage patterns to help us improve the site | Privacy policy: policies.google.com/privacy

4.2 Legal Requirements

We may disclose your information where required by law, court order, or a lawful request from a government authority, or where necessary to protect the rights, safety, or property of Chrysalis Creative Coaching, our members, or the public.

4.3 Business Transfers

If Chrysalis Creative Coaching is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you by email and via a notice on the website before any transfer takes effect.

4.4 With Your Explicit Consent

We may share your information in any other circumstance where you have given us your clear and explicit consent to do so.

─────────────────────────────────────────────

5. EMAIL COMMUNICATIONS

5.1 Transactional Emails

These emails are necessary to deliver the Services you have requested and cannot be opted out of while you have an active account. They include:

— Account creation confirmation and welcome message

— Kajabi course enrollment confirmation and access instructions

— Stripe payment receipts, invoices, and billing notifications

— Subscription renewal reminders

— Password reset and account security alerts

— Coaching session confirmations and reminders

5.2 Marketing & Nurture Emails

We send marketing emails only to people who have explicitly opted in — either by purchasing a program or signing up for a free resource. These are delivered via FEA Create and may include:

— Newsletters and updates from Chrysalis Creative Coaching

— New course and coaching program announcements

— Special offers and promotions

— Free training, webinar invitations, and event announcements

— Follow-up email sequences for lead magnets or free resources you requested

You can unsubscribe from marketing emails at any time by clicking the 'Unsubscribe' link at the bottom of any email, or by emailing [email protected]. We process all unsubscribe requests within 10 business days. Unsubscribing from marketing does not affect your access to purchased programs or transactional notifications.

5.3 Lead Magnets & Free Opt-Ins

When you download a free resource or sign up for a webinar, challenge, or free training, you are opting in to receive that resource and related follow-up communications through FEA Create. We record your consent — including the resource name, date, and opt-in source — and you may unsubscribe at any time without losing access to resources already delivered.

─────────────────────────────────────────────

6. COOKIES AND GOOGLE ANALYTICS

We use cookies and Google Analytics to understand how visitors find and use our website. We do not use advertising cookies or tracking pixels (such as Facebook Pixel).

6.1 Types of Cookies We Use

Strictly Necessary Cookies — Required for the website to function. These keep you logged in and enable secure payment processing via Stripe. These cannot be disabled as the site cannot function without them.

Functional Cookies — Remember your preferences and Kajabi session state to personalise your experience. These are needed for core course and membership features and cannot be disabled.

Analytics Cookies (Google Analytics) — Collect anonymised data on pages visited, time on site, and traffic sources to help us understand and improve our website. You can opt out of these — see Section 6.3.

6.2 Google Analytics

We use Google Analytics, a service provided by Google LLC, to collect anonymised information about how visitors interact with our website — such as which pages you visit, how long you spend on the site, and where your traffic comes from. We receive only aggregated, anonymised reports and cannot identify individual visitors from this data.

We have enabled IP anonymisation in Google Analytics, meaning your IP address is truncated before it is stored. Google may transfer analytics data to servers in the United States in accordance with its own Privacy Policy at policies.google.com/privacy.

6.3 How to Opt Out of Google Analytics

— Install the Google Analytics Opt-Out Browser Add-On at: tools.google.com/dlpage/gaoptout

— Adjust your browser settings to block or delete cookies

— If your browser sends a Global Privacy Control (GPC) signal, we will treat this as an opt-out request

For general guidance on managing cookies, visit allaboutcookies.org.

─────────────────────────────────────────────

7. DATA RETENTION

We retain your personal information only as long as needed for the purpose it was collected, or as required by law:

Account & profile information | Kept for the duration of your account, plus 3 years after closure | Reason: Legal claims and audit trail

Stripe transaction & billing records | Kept for 7 years from the transaction date | Reason: Tax, accounting, and IRS obligations

Kajabi course & membership records | Kept for the duration of your access, plus 3 years | Reason: Service delivery and dispute resolution

Coaching intake forms & session notes | Kept for the duration of the coaching relationship, plus 3 years | Reason: Service continuity and legal claims

Email opt-in & consent records (FEA Create) | Kept for the duration of your subscription, plus 3 years after unsubscribe | Reason: Proof of consent and legal protection

Lead magnet sign-up records | Kept for the duration of your subscription, plus 3 years after unsubscribe | Reason: Proof of consent

Google Analytics data | Up to 26 months | Reason: Site improvement and trend analysis

Support communications | 3 years from last contact | Reason: Service quality and dispute resolution

When data is no longer required, we securely delete or anonymise it. Anonymised data cannot identify you and may be retained for statistical purposes.

─────────────────────────────────────────────

8. YOUR PRIVACY RIGHTS

The rights available to you depend on where you live.

8.1 California Residents — CCPA / CPRA

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

Right to Know — You can request the categories and specific pieces of personal information we have collected about you in the last 12 months, including sources, our business purpose, and the categories of third parties we share it with.

Right to Delete — You can request deletion of personal information we have collected, subject to exceptions (e.g., completing a purchase, fraud prevention, legal obligations).

Right to Correct — You can request that we correct inaccurate personal information we hold about you.

Right to Opt-Out of Sale/Sharing — We do not sell your personal information. Our use of Google Analytics may constitute 'sharing' under CPRA. You may opt out by installing the Google Analytics Opt-Out Add-On or enabling Global Privacy Control (GPC) in your browser.

Right to Limit Sensitive Data Use — You can request that we limit the use of sensitive personal information (e.g., coaching session content) to what is necessary to provide the Services you requested.

Right to Non-Discrimination — We will never deny Services, charge different prices, or provide a lower quality of service because you exercised a CCPA/CPRA right.

To submit a California privacy request, email: [email protected]. We will verify your identity before processing your request. Response time: 45 days (may be extended by a further 45 days for complex requests, with prior notice). There is no fee for reasonable requests.

8.2 Other US State Residents

If you live in Colorado, Connecticut, Virginia, Utah, Texas, or another state with an enacted consumer privacy law, you have similar rights — including the right to access, correct, delete, and opt out of targeted advertising and profiling. Contact us at [email protected] to make a request. We respond within 45 days.

8.3 International Members

Please see Section 10 for rights specific to members located outside the United States.

8.4 All Users — Quick Reference

— Unsubscribe from marketing emails: click 'Unsubscribe' in any email, or email [email protected]

— Access, correct, or delete your Kajabi account data: log in to your Kajabi account or contact us

— Request a copy of your personal data: email [email protected]

— Opt out of Google Analytics: install the opt-out browser add-on or enable GPC in your browser

─────────────────────────────────────────────

9. HOW WE PROTECT YOUR INFORMATION

We implement appropriate technical and organisational safeguards to protect your personal information, including:

— HTTPS / SSL encryption for all data transmitted between your browser and our website

— Secure account infrastructure managed through Kajabi, which maintains its own security standards

— PCI-DSS Level 1 compliant payment processing via Stripe — your full card details never reach our servers

— Access controls limiting who can view personal information and for what purpose

— Secure, hashed password storage — we cannot see your password

— Regular software updates and security monitoring

— Careful vetting of all third-party service providers, including FEA Create, Kajabi, and Stripe

No method of transmission over the internet is completely secure. In the unlikely event of a data breach that poses a meaningful risk to you, we will notify you promptly in accordance with applicable law.

─────────────────────────────────────────────

10. INTERNATIONAL MEMBERS

Chrysalis Creative Coaching is operated from the United States. If you access our Services from outside the US, your information may be transferred to and processed in the United States or another country where our service providers (including Stripe, Kajabi, FEA Create, and Google) operate. These countries may have different data protection laws than your home country.

10.1 EU / EEA and UK Members

Although Chrysalis Creative Coaching is a US-based business, we respect the data protection rights of our EU/EEA and UK members and voluntarily apply the following protections aligned with the GDPR and UK GDPR:

— We identify a lawful basis for processing your data: contract performance (delivering Services you purchased), legitimate interests (security, analytics, business operations), or consent (marketing emails, analytics cookies)

— We honour requests to access, correct, erase, restrict processing of, or receive a portable copy of your personal data

— We obtain your consent before placing non-essential analytics cookies

— We rely on Standard Contractual Clauses (SCCs) or adequacy decisions when transferring data to service providers outside the EEA

— We provide a clear unsubscribe option on every marketing email

To exercise your rights, contact us at [email protected]. If you are not satisfied with our response, you have the right to lodge a complaint with your national supervisory authority. A list of EU authorities is available at edpb.europa.eu. UK residents may contact the Information Commissioner's Office at ico.org.uk.

10.2 Canadian Members (PIPEDA)

We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). You may request access to or correction of your personal information, or withdraw your consent, by contacting us at [email protected].

10.3 Australian Members (Privacy Act 1988)

We comply with Australia's Privacy Act 1988 and the Australian Privacy Principles (APPs). You may request access to or correction of your personal information by contacting us. Unresolved complaints may be directed to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

─────────────────────────────────────────────

11. AGE RESTRICTION

Chrysalis Creative Coaching and all of its coaching programs, online courses, and membership offerings are intended exclusively for adults aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18.

If you are under 18, please do not register for an account, purchase any program, or submit any personal information through our website or Kajabi platform. If we become aware that we have inadvertently collected personal information from a minor, we will delete it immediately.

If you believe a person under 18 has provided us with personal information, please contact us immediately at [email protected].

─────────────────────────────────────────────

12. THIRD-PARTY LINKS

Our website and emails may contain links to third-party platforms or resources — including Kajabi course pages, Stripe checkout, FEA Create landing pages, or external reading recommendations. This Privacy Policy applies only to information collected directly by Chrysalis Creative Coaching through Chrysalis.Club.

We encourage you to review the privacy policies of any third-party services you use. We are not responsible for their privacy practices, content, or security.

─────────────────────────────────────────────

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes to our Services, technology, legal requirements, or business practices. When we make material changes, we will:

— Update the 'Last Updated' date at the top of this page

— Email current members and customers with a summary of significant changes

— Display a notice on our website for a reasonable period following the update

Your continued use of our Services after any update constitutes your acceptance of the revised policy. We recommend reviewing this page periodically. Archived versions of this policy are available on request.

─────────────────────────────────────────────

14. CONTACT US

If you have any questions, concerns, or privacy requests, we'd love to hear from you.

General support: [email protected]

Privacy requests & data rights: [email protected]

Website: https://Chrysalis.Club

We aim to respond to all privacy requests within 30 days (45 days for CCPA and other state privacy law requests).

─────────────────────────────────────────────

This Privacy Policy is written to comply with the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), applicable US state privacy laws, and international privacy standards including voluntary GDPR alignment for EU/EEA and UK members, PIPEDA for Canadian members, and the Australian Privacy Act 1988.

© 2026 Chrysalis Creative Coaching · Chrysalis.Club · All rights reserved