Drippity Email Marketing

PRIVACY POLICY

Making Emails That Don’t Suck · Drippity Email Marketing

Effective date: July 20, 2026

IMPORTANT BEFORE PUBLISHING: Replace every bracketed field in Section 15. Confirm the payment, email, analytics, and advertising providers actually used by the website and Course, then list or link to them where indicated.

1. About This Privacy Policy

This Privacy Policy explains how Drippity Email Marketing (“Drippity,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information when you visit our website, purchase or access Making Emails That Don’t Suck, communicate with us, submit work for feedback, subscribe to marketing, or otherwise use our related products and services (collectively, the “Services”).

Drippity is responsible for personal information under its control. Some parts of the Services are delivered by third-party providers, including Thinkific Labs Inc. (“Thinkific”), which hosts or supports the Course. Those providers may also process personal information under their own privacy policies.

By using the Services or providing personal information, you acknowledge the practices described in this Privacy Policy. Where consent is required by law, we will obtain it in a form appropriate to the sensitivity of the information and the circumstances.

2. Personal Information We Collect

The information we collect depends on how you interact with the Services. It may include:

• Identity and contact information, such as your name, email address, telephone number, business name, job title, billing address, and country or region;

• Account information, such as your username, account identifiers, password-related credentials maintained by the platform, preferences, and account status;

• Purchase and transaction information, such as the Course purchased, price, currency, payment status, order number, date, discounts, refunds, tax information, and limited payment details supplied by the payment provider. Drippity does not need to receive or store your full payment-card number;

• Course activity, such as enrolment, lesson progress, completion status, quiz or survey responses, downloads, login activity, and use of Course features;

• Submitted content, such as assignments, questions, feedback requests, creative work, comments, reviews, testimonials, survey responses, and communications you send to us;

• Technical and usage information, such as IP address, browser, operating system, device type, language, referring pages, pages or lessons viewed, dates and times, cookie identifiers, and interaction or diagnostic data;

• Marketing information, such as subscription status, consent records, email opens and clicks where enabled, campaign interactions, and communication preferences; and

• Information needed to prevent fraud, enforce our Terms, secure accounts, respond to disputes, comply with law, or protect Drippity, learners, and others.

Please do not submit sensitive personal information, confidential client material, trade secrets, or another person’s personal information unless it is necessary, lawful, and you are authorized to do so.

3. How We Collect Information

We collect personal information:

• Directly from you when you create an account, purchase, enrol, complete a survey, submit work, request feedback, contact us, or subscribe to communications;

• Automatically through cookies, pixels, logs, and similar technologies when you use the website, Course platform, or emails;

• From service providers involved in hosting, payments, email delivery, analytics, customer support, fraud prevention, and course administration; and

• From public or business sources where permitted by law, such as information you intentionally make public or provide through a business inquiry.

4. How We Use Personal Information

We may use personal information to:

• Process purchases, confirm orders, collect payment, issue receipts, administer refunds, and maintain financial and tax records;

• Create and manage accounts, provide Course access, track progress, deliver downloads, and operate Course features;

• Provide educational feedback, respond to questions, deliver support, and communicate about your account, purchase, Course access, security, or policy changes;

• Personalize and improve the Services, understand how learners use the Course, troubleshoot issues, test features, and measure performance;

• Send newsletters, product updates, surveys, promotions, and other commercial electronic messages where we have the consent or other lawful authority required;

• Maintain security, authenticate users, detect or prevent fraud and misuse, enforce our Terms, manage disputes, and protect legal rights;

• Comply with legal, regulatory, accounting, reporting, insurance, and recordkeeping obligations; and

• Carry out another purpose that we explain when collecting the information or that you otherwise authorize.

We will not use personal information for a new purpose that is materially different from those described above without obtaining any additional consent required by law.

5. Consent and Marketing Communications

When you provide personal information to purchase or access the Course, we use it for purposes reasonably necessary to complete the transaction and deliver the Services. We may rely on express consent, implied consent, contractual necessity, or another lawful basis available under applicable law, depending on the purpose and circumstances.

Marketing communications are optional. Where Canada’s Anti-Spam Legislation applies, we send commercial electronic messages only with the required consent or other lawful authority, identify the sender, provide contact information, and include a working unsubscribe mechanism. You can unsubscribe using the link in an email or by contacting us at [email protected]. We will process unsubscribe requests within the period required by law.

Withdrawing consent does not affect processing already lawfully completed. It may also limit our ability to provide a feature or Service that reasonably requires the information. Transactional and service messages, including receipts, access notices, security alerts, and responses to support requests, may still be sent when necessary.

6. How We Disclose Personal Information

We do not sell personal information. We may disclose personal information in the following circumstances:

• Course and website providers, including Thinkific, to host, deliver, secure, support, and analyze the Services;

• Payment providers and financial institutions to process transactions, prevent fraud, handle disputes, and issue refunds;

• Email, customer-support, survey, analytics, storage, security, accounting, and professional-service providers that perform services for us;

• Professional advisers, auditors, insurers, or authorities where reasonably necessary to obtain advice, protect rights, investigate misuse, or meet legal obligations;

• A purchaser, successor, or adviser in connection with a proposed or completed financing, reorganization, merger, acquisition, or sale of all or part of the business, subject to appropriate confidentiality and legal requirements;

• Government, law-enforcement, courts, regulators, or other parties when required or permitted by law; and

• Other parties with your direction or consent.

Service-provider access is limited to what is reasonably necessary for the services they perform. Providers may process information under their contracts with us and their own applicable privacy terms.

Key providers may include Thinkific for Course hosting and delivery, Stripe, Thinkific, Klaviyo, and Google Analytics. Their current privacy policies should be linked from the website or made available upon request.

7. International and Cross-Border Processing

Drippity is based in Ontario, Canada, but our providers may process, store, or access personal information in Canada, the United States, or other countries. Information processed outside your province or country may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement, or national-security authorities in accordance with those laws.

We use contractual, organizational, and other appropriate measures designed to protect information handled by service providers. Contact us if you would like more information about cross-border processing or the providers involved.

8. Payment Information

Payments are processed by third-party payment providers made available through our checkout or Course platform. Payment providers may collect your name, billing details, card or bank information, transaction identifiers, device information, and fraud-prevention data. Their handling of this information is governed by their own privacy policies and applicable payment-security standards.

Drippity generally receives transaction confirmation and limited billing information rather than your complete card number or security code. Do not send payment-card information to us by email or through an assignment or feedback form.

9. Cookies and Similar Technologies

Our website, Course platform, service providers, and emails may use cookies, pixels, local storage, logs, and similar technologies. These technologies may be used to:

• Keep you signed in, remember preferences, maintain your shopping cart, and provide requested features;

• Protect accounts, prevent fraud, balance traffic, and maintain security;

• Understand website and Course usage, diagnose problems, measure performance, and improve content; and

• Measure email engagement or support advertising and remarketing, where enabled and permitted by law.

Some cookies are necessary for the Services to function. Where required, we will request consent before using non-essential analytics or advertising cookies. You can control cookies through available consent settings and your browser settings. Blocking cookies may affect functionality.

Browser “Do Not Track” signals are not interpreted consistently across the industry. Unless required by applicable law or supported by the relevant service, our systems may not respond to them. You can still use the cookie and privacy controls described above.

10. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing Course access, maintaining purchase and tax records, resolving disputes, enforcing agreements, preventing fraud, meeting legal obligations, and maintaining consent or unsubscribe records.

Retention periods vary by record type, sensitivity, legal requirements, account status, and operational need. When information is no longer required, we will delete, anonymize, or securely dispose of it, subject to reasonable technical limitations and lawful backup or archival retention.

11. Security and Privacy Incidents

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information. Measures may include access controls, authentication, secure service providers, encryption in transit where supported, staff or contractor confidentiality obligations, backups, monitoring, and procedures for handling privacy incidents.

No internet transmission or storage system is completely secure. You are responsible for using a strong, unique password, protecting your account credentials, and notifying us promptly at [email protected] if you suspect unauthorized access.

If a privacy breach occurs, we will investigate and provide notifications or reports where required by applicable law.

12. Your Privacy Rights

Subject to applicable law and limited exceptions, you may request to:

• Learn whether we hold personal information about you and obtain access to it;

• Correct or update inaccurate or incomplete information;

• Withdraw consent for a use that relies on consent;

• Unsubscribe from marketing communications;

• Ask questions about our privacy practices, service providers, or cross-border processing; and

• Request deletion or another privacy remedy where available under applicable law.

Send requests to [email protected]. We may need to verify your identity before responding. We will respond within the period required by law and explain any lawful reason we cannot fulfill all or part of a request. We may retain information where required for legal, security, transactional, or recordkeeping purposes.

13. Children and Age of Majority

The Services are intended for people who have reached the age of majority where they live. We do not knowingly collect personal information from children without the consent or other authorization required by law. If you believe a child has provided personal information improperly, contact us so we can review and take appropriate action.

14. External Links

The Services may link to websites, applications, or services that Drippity does not control. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing personal information.

15. Privacy Officer and Contact Information

Supplier: Drippity Email Marketing

Business address: 33 Lombard Street, Toronto, Ontario

Support email: [email protected]

Website: https://www.drippity.ca/

Contact the Privacy Officer to ask a question, request access or correction, withdraw consent, or make a complaint. We will investigate privacy complaints and explain the outcome or next steps. If you are not satisfied, you may contact the Office of the Privacy Commissioner of Canada or another privacy regulator with jurisdiction over the matter.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Services, providers, technologies, or legal requirements. The updated version will be posted with a revised effective date. If a change is material, we will provide additional notice where appropriate or required by law. If the business or Course is transferred to a successor, personal information may be transferred as part of that transaction, subject to this Policy and applicable law.

END OF PRIVACY POLICY