top of page

Privacy Policy

PRIVACY POLICY

Last Updated: September 19, 2026

​

Tara McKenna (“Company,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit www.tara-mckenna.com, purchase or access our products or services, subscribe to our emails, participate in our courses or challenges, download our resources, or otherwise interact with us.

​

In this Privacy Policy, “you” or “your” refers to any individual who accesses our Site or uses our Services.

​

Please read this Privacy Policy carefully.

​

Where consent is required by applicable law, we will request consent in an appropriate manner based on the circumstances and the nature of the personal information involved.

​

​

SCOPE OF THIS PRIVACY POLICY

 

This Privacy Policy applies to personal information collected through:

  • Our website and related landing pages;

  • Purchases of our courses, challenges, digital products, trainings, guides, workbooks, and other resources;

  • Email subscriptions and communications;

  • Forms, surveys, questionnaires, testimonials, reviews, and other information you submit to us;

  • Course and digital-product platforms;

  • Social media interactions where information is provided directly to us;

  • Cookies, analytics, pixels, and similar technologies used on our Site; and

  • Third-party providers that help us operate our business and deliver our Services.

 

We use third-party providers for functions such as payment processing, email delivery, course hosting, checkout, customer communications, analytics, advertising, marketing, and cookie consent management.

 

These providers may include ThriveCart, Kit, ManyChat, Stripe, PayPal, and CookieYes, as well as other service providers we may use from time to time.

​

Much of the customer information associated with purchases and digital Services is collected, processed, or stored within these third-party systems rather than in a separate database maintained directly by the Company.

​

Third-party websites, platforms, and services are also governed by their own privacy policies and terms.

​

​

HOW CUSTOMER INFORMATION IS STORED

 

The Company does not maintain a separate internal customer database containing complete payment credentials or customer billing and mailing addresses collected for online purchases.

​

Information required to complete and administer online purchases, including billing information, may instead be collected, processed, and stored through third-party checkout and payment systems such as ThriveCart, Stripe, and PayPal.

​

We may be able to access certain customer and transaction information through administrator accounts provided by these services when reasonably necessary for purposes such as:

  • Processing or administering a purchase;

  • Providing customer support;

  • Confirming a transaction;

  • Processing applicable taxes;

  • Maintaining accounting or financial records;

  • Preventing or responding to fraud or payment disputes; and

  • Meeting legal or regulatory obligations.

 

We do not routinely download or maintain separate copies of customer billing or mailing addresses in our own internal files or databases unless reasonably necessary for a particular business, accounting, tax, legal, or customer-service purpose.

 

We do not directly store complete credit card numbers, banking credentials, or other full payment credentials.

 

Although third-party providers may store or process personal information on our behalf, applicable privacy laws may still require us to take reasonable steps regarding information under our control and the providers we choose to use.

​

​

AGE REQUIREMENTS

 

Our Site and Services are intended for adults.

 

You must be at least 18 years old or the applicable age of majority in your jurisdiction to purchase our paid Services.

​

We do not knowingly collect personal information from children through our Site or Services.

​

If you believe that a child has provided personal information to us without appropriate authorization, please contact us at hello@tara-mckenna.com so that we can review the situation and take appropriate action.

​

​

INFORMATION WE COLLECT

 

The types of personal information involved depend on how you interact with us.

​

​

Information You Provide Directly

 

We may collect information you voluntarily provide directly to us when you:

  • Subscribe to our email list;

  • Download a free resource;

  • Fill out a form or survey;

  • Contact us by email;

  • Submit a testimonial, review, question, comment, or other feedback;

  • Participate in a challenge, course, promotion, or other offering; or

  • Otherwise communicate directly with us.

 

Depending on the interaction, this may include:

  • Your name;

  • Your email address;

  • Customer or account information;

  • Purchase-related information;

  • Communications you send to us;

  • Responses voluntarily submitted through forms or surveys; and

  • Other information you choose to provide.

 

Information Collected Through Third-Party Checkout and Payment Providers

 

When you purchase a product or Service, third-party platforms may collect information needed to process and administer your transaction.

 

Depending on the provider and transaction, this may include:

  • Your name;

  • Email address;

  • Billing address;

  • Payment information;

  • Transaction amount;

  • Currency;

  • Tax information;

  • Payment method;

  • Payment status; and

  • Other transaction-related information.

 

This information is generally collected and stored within the systems of our third-party checkout and payment providers rather than in a separate internal database maintained by us.

​

We may have access to limited customer and transaction information through our accounts with these providers where necessary to administer your purchase, provide support, maintain records, comply with tax or accounting requirements, or address fraud or payment disputes.

​

​

Payment Information

 

Payments may be processed through providers such as Stripe, PayPal, ThriveCart, or other payment and checkout platforms.

​

We do not directly receive or store your complete credit card number, bank account credentials, or other full payment credentials in our own internal systems.

​

Payment processors handle payment information according to their own privacy policies, security practices, and terms.

​

​

Account Information

 

Certain Services may require you to create or use an account through a third-party course or digital-product platform.

​

Account information may include your name, email address, login information, purchase information, and information about your access to the Service.

​

Account information may be stored within the applicable third-party course or technology platform.

​

You are responsible for safeguarding passwords or login credentials associated with your account.

​

​

Website and Device Information

 

When you visit our Site, certain information may be collected automatically by us or by third-party service providers.

​

Depending on the technologies being used, this information may include:

  • Internet Protocol address;

  • Browser type;

  • Device type;

  • Operating system;

  • Pages visited;

  • Date and time of visits;

  • Referring pages or websites;

  • Links clicked;

  • Approximate geographic information derived from your IP address;

  • Device or browser identifiers; and

  • Information about how you interact with our Site and Services.

 

This information may be used for security, analytics, troubleshooting, website functionality, marketing, and improving our Services.

​

​

Social Media Information

 

If you interact with us through social media platforms such as Instagram, Facebook, YouTube, or other services, we may receive information you make available through those platforms.

​

This may include your username, profile information, comments, messages, or other information you choose to share.

​

Your use of social media platforms is also governed by the privacy policies and settings of those platforms.

​

​

SENSITIVE PERSONAL INFORMATION

 

We do not intentionally request sensitive personal information unless it is reasonably necessary for a specific purpose and permitted by applicable law.

​

Please do not send us sensitive personal information that we have not requested, including government identification numbers, detailed medical information, genetic information, account passwords, or other highly sensitive information.

​​

If we receive sensitive personal information unexpectedly, we will handle it in accordance with applicable privacy law and may delete it where it is not reasonably necessary for a legitimate business or legal purpose.

​​

Participation in our courses, challenges, workbooks, and personal-development activities does not require you to submit your private workbook answers, personal reflections, health information, or other sensitive personal information to us unless we specifically tell you otherwise.

​

​

HOW WE COLLECT INFORMATION

​

Information You Provide Directly

 

We collect information directly from you when you voluntarily provide it to us, including when you join our email list, download a resource, fill out a form, contact us, or otherwise communicate with us.

​

​

Information Collected Through Our Service Providers

 

Information may also be collected by third-party platforms and service providers in connection with your interaction with our business.

 

For example, a checkout provider may collect information needed to process a purchase, an email provider may store your name and email address, and a course platform may store information needed to provide access to purchased content.

​

​

Information Collected Automatically

 

Certain information may be collected automatically when you use our Site or interact with our emails.

​

This may occur through cookies, pixels, tags, analytics technologies, server logs, and similar technologies.

​

​

COOKIES AND TRACKING TECHNOLOGIES

 

We and our service providers may use cookies, pixels, tags, web beacons, analytics technologies, and similar tools to operate our Site and understand how people interact with it.

​

These technologies may be used to:

  • Make the Site function properly;

  • Remember preferences;

  • Maintain security;

  • Understand website traffic and usage;

  • Determine which content is useful or popular;

  • Measure email or marketing engagement;

  • Improve our Site and Services;

  • Measure the effectiveness of advertising or marketing campaigns; and

  • Deliver or measure relevant advertising where permitted by law.

 

Some technologies are necessary for the Site to function. Others, such as certain analytics or advertising technologies, may be optional.

We use CookieYes to help manage cookie consent and preferences on our Site.

​

When you visit our Site, you may be presented with a cookie banner that allows you to accept, reject, or manage certain categories of cookies, depending on your location and applicable law.

​

Where required by applicable law, non-essential cookies and similar technologies will not be activated until appropriate consent has been provided.

You can change your cookie preferences using the cookie settings available on our Site.

​

You may also control certain cookies through your browser settings, although disabling cookies may affect the functionality of portions of the Site.

​

​

THIRD-PARTY ANALYTICS AND ADVERTISING

 

We may use third-party analytics, advertising, and marketing services to help us understand how our Site and marketing are performing.

​

Depending on the technology involved, these providers may receive information such as your IP address, browser or device information, website activity, identifiers, or information about your interactions with advertisements or marketing communications.

​

We do not sell personal information for monetary compensation.

​

Certain privacy laws define terms such as “sell” or “share” more broadly than an exchange of information for money and may include some forms of targeted or cross-context behavioural advertising.

​

Where such laws apply to our activities, we will provide notices, choices, or opt-out mechanisms required by applicable law.

​

​

EMAIL COMMUNICATIONS

​

If you subscribe to our email list, request a free resource, or otherwise consent to receive marketing communications from us, we may send you newsletters, updates, offers, educational content, and other marketing communications.

​

Subscriber information such as your name, email address, subscription status, and email engagement information may be stored through our third-party email service provider, such as Kit.

​

We do not sell or rent our email subscriber list.

​

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails or by contacting hello@tara-mckenna.com.

​

​

Purchased Programs and Challenge Emails

​

Certain purchased Services may include emails that form part of the product or program you purchased.

​

For example, a challenge may include emails delivered throughout the stated challenge period to provide program content, instructions, reminders, or other elements of the purchased Service.

​

Where permitted by applicable law, these communications may be processed as necessary to provide the product or Service you purchased rather than solely as marketing communications.

​

If the same email system is used to deliver both program communications and marketing communications, unsubscribing from that system may technically prevent us from delivering remaining program emails.

​

If you believe you are missing emails included with a product you purchased, please contact hello@tara-mckenna.com.

​

​

HOW WE USE PERSONAL INFORMATION

 

We may collect, use, or process personal information directly or through our service providers for purposes including:

  • Operating and maintaining our Site;

  • Providing products, Services, digital resources, courses, and challenges;

  • Processing and administering purchases;

  • Providing account or course access;

  • Delivering purchased program communications;

  • Sending requested downloads or resources;

  • Providing customer service and responding to inquiries;

  • Maintaining appropriate customer and transaction records;

  • Sending newsletters and marketing communications where permitted;

  • Managing subscriptions and email preferences;

  • Personalizing and improving our content and Services;

  • Understanding how users interact with our Site;

  • Measuring website, email, and marketing performance;

  • Conducting business analytics;

  • Preventing fraud and misuse;

  • Protecting the security of our Site, accounts, and Services;

  • Enforcing our Terms of Use and protecting our legal rights;

  • Meeting accounting, tax, regulatory, insurance, and legal obligations;

  • Responding to lawful requests from courts, regulators, government authorities, or law enforcement;

  • Managing disputes, chargebacks, or legal claims; and

  • Other purposes disclosed to you or for which you provide consent.

 

LEGAL BASES FOR PROCESSING

 

Where the General Data Protection Regulation, UK GDPR, or another law requiring a lawful basis applies to our processing, we process personal information only where we have an appropriate legal basis.

​

​

Performance of a Contract

 

We may process personal information where necessary to provide something you purchased or requested from us.

​

This may include administering a purchase, creating course access, delivering digital materials, providing customer support, or sending communications that form part of a purchased program.

​

​

Consent

 

We may process personal information based on your consent where consent is appropriate or legally required.

​

Examples may include certain marketing communications, optional cookies, advertising technologies, or other voluntary processing activities.

Where processing is based on consent, you may withdraw your consent subject to applicable law.

​

​

Legitimate Interests

 

We may process information where necessary for our legitimate business interests and where those interests are not overridden by your privacy rights.

​

These interests may include operating and improving our business, understanding how our Services are used, maintaining security, preventing fraud, managing customer relationships, and protecting our legal rights.

​

​

Legal Obligations

 

We may process or retain information where necessary to comply with legal obligations, including tax, accounting, financial, consumer-protection, regulatory, privacy, and recordkeeping requirements.

​

​

DISCLOSURE OF PERSONAL INFORMATION

 

We may disclose or permit the processing of personal information by third parties where reasonably necessary to operate our business, provide our Services, or comply with applicable law.

​

These parties may include:

  • Website and hosting providers;

  • Checkout and e-commerce platforms;

  • Payment processors;

  • Email service providers;

  • Course and digital-product platforms;

  • Cookie consent management providers;

  • Customer-service providers;

  • Analytics providers;

  • Advertising and marketing providers;

  • Professional advisers such as accountants, lawyers, bookkeepers, or insurers;

  • Fraud-prevention and security providers; and

  • Other service providers that assist us in operating our business.

 

We may also disclose information:

  • With your consent;

  • To comply with a legal obligation, court order, subpoena, regulatory requirement, or lawful government request;

  • To protect our rights, property, security, customers, or others;

  • To investigate suspected fraud, misuse, or unlawful activity;

  • In connection with a merger, sale, financing, restructuring, acquisition, or transfer of some or all of our business or assets; or

  • Where otherwise permitted or required by applicable law.

 

We may also use or disclose information that has been aggregated or de-identified so that it does not reasonably identify an individual.

​

​

THIRD-PARTY SERVICE PROVIDERS

 

We rely on third-party service providers to operate significant portions of our online business.

​

Depending on how you interact with us, these providers may collect, process, or store personal information on our behalf or in connection with the services they provide.

​

Examples may include Google Workspace, ThriveCart, Kit, ManyChat, Stripe, PayPal, CookieYes, website hosting providers, analytics providers, video-hosting providers, social-media platforms, and other business technology providers.

​

As described above, certain categories of customer information, including billing addresses and payment-related information, may be stored primarily within these third-party platforms rather than within a separate database maintained by the Company.

Our providers and technologies may change over time as our business evolves.

​

Where required by applicable privacy law, we take reasonable steps to select and work with service providers that provide appropriate safeguards for personal information.

​

​

INTERNATIONAL DATA TRANSFERS

 

We are based in Canada, but some of our service providers may process or store personal information in the United States or other countries.

As a result, personal information may be transferred to or processed in a jurisdiction outside your province, state, country, or region.

​

Privacy and data-protection laws in those jurisdictions may differ from the laws where you live, and information located in another jurisdiction may be accessible to courts, law enforcement, or government authorities in accordance with applicable local law.

​

Where applicable law requires specific safeguards for international transfers, we will take reasonable steps to use appropriate transfer mechanisms or contractual protections.

​

​

RETENTION OF PERSONAL INFORMATION

 

We do not routinely maintain separate copies of every category of personal information collected by the third-party platforms we use.

Personal information may instead be retained within the applicable service provider's systems.

​

We and our third-party service providers may retain personal information for as long as reasonably necessary for the purposes for which it was collected and for legitimate business, legal, tax, accounting, insurance, security, dispute-resolution, and recordkeeping purposes.

Retention periods vary based on the type of information, the system in which it is stored, and the reason it was collected.

​

For example, transaction information may need to be retained for legal, tax, accounting, payment-dispute, or financial recordkeeping purposes even after a customer's access to a Service has ended.

​

When personal information is no longer reasonably necessary and is not required to be retained by applicable law or legitimate business requirements, it may be deleted, anonymized, or securely disposed of in accordance with the practices of the Company and applicable service provider.

​

Information may remain temporarily in backups or archival systems following deletion from active systems.

​

​

SECURITY OF PERSONAL INFORMATION

 

We use commercially reasonable administrative, technical, and organizational measures designed to safeguard personal information under our control.

​

We also use established third-party platforms to handle functions such as checkout, payments, course delivery, email communications, and cookie management rather than directly building or maintaining all of these systems ourselves.

​

Security measures may include secure technology providers, password protection, account access controls, encrypted connections, and other safeguards appropriate to the nature of the information involved.

​

We do not maintain complete customer payment credentials in our own internal systems.

​

No website, internet transmission, electronic storage system, service provider, or technological system can be guaranteed to be completely secure.

Accordingly, we cannot guarantee absolute security.

​

Please avoid sending highly sensitive information through ordinary email.

​

If you believe your information or account has been compromised, please contact hello@tara-mckenna.com.

​

​

PERSONAL INFORMATION BREACHES

 

If we become aware of a breach involving personal information under our control, including a qualifying incident involving one of our service providers, we will take reasonable steps to investigate, assess, contain, and address the incident.

​

Where required by applicable privacy law, we will notify affected individuals, privacy regulators, service providers, or other appropriate parties within the time and manner required by law.

​

​

YOUR PRIVACY RIGHTS

 

Your privacy rights depend on where you live and which privacy laws apply to our activities.

​

Depending on your jurisdiction, you may have rights such as:

  • Requesting access to personal information we hold or control;

  • Asking us to correct inaccurate or incomplete information;

  • Requesting deletion of personal information;

  • Requesting restriction of certain processing;

  • Objecting to certain uses of personal information;

  • Withdrawing consent where processing is based on consent;

  • Requesting a portable copy of certain information;

  • Opting out of certain marketing communications;

  • Opting out of certain sales, sharing, or targeted advertising where applicable;

  • Requesting information about how personal information is collected, used, or disclosed; and

  • Making a complaint to an applicable privacy or data-protection authority.

 

Some rights are subject to exceptions.

​

For example, information may need to be retained to complete or document a transaction, maintain financial or tax records, comply with legal obligations, prevent fraud, protect legal rights, satisfy insurance requirements, or establish or defend legal claims.

​

We may need to verify your identity before fulfilling certain privacy requests.

​

To make a privacy request, contact hello@tara-mckenna.com.

​

​

CANADIAN PRIVACY RIGHTS

 

We are based in Ontario, Canada and handle personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) where applicable.

​

Under applicable Canadian privacy principles, an organization may remain responsible for personal information under its control even when the information is handled or stored by a third-party service provider on its behalf.

​

Where applicable, you may have rights to access personal information under our control, request correction of inaccurate information, withdraw consent subject to legal and contractual restrictions, and raise concerns about our privacy practices.

 

You may contact us to ask:

  • What personal information we hold or control about you;

  • How it has been used or disclosed;

  • To access personal information to which you are legally entitled;

  • To correct inaccurate information; or

  • To raise a concern about our privacy practices.

 

Our Privacy Contact is identified at the end of this Policy.

 

If you are not satisfied with our response and Canadian privacy law applies, you may have the right to make a complaint to the Office of the Privacy Commissioner of Canada or another applicable privacy authority.

​

​

EUROPEAN PRIVACY RIGHTS

 

If you are located in the European Economic Area, United Kingdom, or another jurisdiction providing comparable data-protection rights, you may have additional rights concerning your personal information.

​

Subject to applicable law, these may include the right to:

  • Be informed about the processing of your personal information;

  • Access personal information;

  • Correct inaccurate or incomplete information;

  • Request erasure in certain circumstances;

  • Restrict processing in certain circumstances;

  • Object to certain processing;

  • Receive certain information in a portable, machine-readable format;

  • Withdraw consent where consent is the legal basis for processing; and

  • Lodge a complaint with an applicable supervisory authority.

 

These rights are subject to the requirements and exceptions contained in applicable law.

 

To exercise a privacy right with us, please contact hello@tara-mckenna.com.

​

​

UNITED STATES PRIVACY RIGHTS

 

Certain U.S. states provide residents with specific privacy rights.

​

If a state privacy law applies to us and to your personal information, you may have rights such as requesting access, deletion, or correction of personal information or opting out of certain forms of sale, sharing, targeted advertising, or profiling.

​

We will honour rights that apply to us under applicable law.

​

​

California Residents

 

If the California Consumer Privacy Act, as amended (“CCPA”), applies to us and to your information, California residents may have rights including:

  • The right to know what personal information is collected, used, or disclosed;

  • The right to request deletion, subject to exceptions;

  • The right to request correction of inaccurate personal information;

  • The right to opt out of the sale or sharing of personal information where applicable;

  • The right to limit certain uses or disclosures of sensitive personal information where applicable; and

  • The right not to receive discriminatory treatment for exercising applicable privacy rights.

 

We do not sell personal information for monetary compensation.

​

If our use of certain advertising technologies constitutes “sharing” or another regulated activity under California law and the CCPA applies to us, we will provide the choices and mechanisms required by applicable law.

​

To submit a privacy request, contact hello@tara-mckenna.com.

​

​

​

Nevada Residents

 

If Nevada privacy law applies to our activities and your personal information, you may submit an applicable privacy or opt-out request to hello@tara-mckenna.com.

​

You may also contact us by mail using the information provided at the end of this Privacy Policy.

​

​

MARKETING CHOICES

 

You may unsubscribe from marketing emails at any time using the unsubscribe link included in the message.

​

You may also contact hello@tara-mckenna.com to request removal from marketing communications.

​

Please note that even if you opt out of marketing communications, we may still send non-marketing communications reasonably necessary to administer a purchase, respond to you, provide requested customer service, communicate about security or legal matters, or otherwise fulfill a transaction or Service.

​​

Where email delivery itself forms part of a purchased Service, unsubscribing from the system used to provide those emails may affect our technical ability to deliver the remaining email portion of that Service.

​

​

ACCESS, CORRECTION, AND DELETION REQUESTS

 

If you wish to access, correct, or request deletion of personal information under our control, please email hello@tara-mckenna.com.

Please provide sufficient information for us to understand and respond to your request.

​

We may ask for reasonable information necessary to verify your identity before releasing, modifying, or deleting personal information.

We will respond within the period required by applicable law.

​

Certain information may be exempt from access or deletion requirements, and information may be retained where legally permitted or required.

Because some personal information may be maintained through third-party platforms rather than in a separate Company database, fulfilling a request may require us to work through or communicate with one or more applicable service providers.

​

Where legally required and technically feasible, we will take appropriate steps relating to service providers processing personal information on our behalf.

​

​

PRIVACY COMPLAINTS

 

If you have a concern about our collection, use, disclosure, protection, storage, or handling of personal information, please contact us first at hello@tara-mckenna.com.

​

We will review privacy complaints and make reasonable efforts to address them.

​

Depending on where you live, you may also have the right to make a complaint to an applicable privacy commissioner, supervisory authority, attorney general, data-protection authority, or other regulator.

​

​

ACCOUNTABILITY

 

We are responsible for personal information under our control and have designated a Privacy Contact to oversee questions and requests regarding our privacy practices.

​

This responsibility may extend to personal information collected, processed, or stored by third-party service providers on our behalf even when we do not maintain a separate internal copy of that information.

​

Our Privacy Contact can be reached using the information provided at the end of this Policy.

​

​

CHANGES TO THIS PRIVACY POLICY

 

We may update this Privacy Policy periodically to reflect changes in our business, Services, technologies, providers, practices, or legal obligations.

When we update this Privacy Policy, we will revise the “Last Updated” date at the top of this page.

​

Where required by applicable law, we will provide additional notice or obtain additional consent for material changes.

​

Changes to this Privacy Policy do not retroactively authorize us to use personal information for materially different purposes where additional consent is required by law.

​

We encourage you to review this Privacy Policy periodically.

​

​

CONTACT US

 

If you have questions about this Privacy Policy, wish to exercise an applicable privacy right, or have a concern about how we handle personal information, please contact our Privacy Contact:

​

Tara McKenna
Privacy Contact

Email: hello@tara-mckenna.com

​

Mail:

Tara McKenna
35 Harvard Road
PO Box 21067 CAMPUS
Guelph, ON
N1G 4T3
Canada

bottom of page