Privacy

Privacy policy

Last updated: November 15, 2026

Heidi Klotz Coaching & Leadership respects your privacy. This policy explains what personal information I collect, why I collect it, how I protect it and what your rights are. It follows Quebec’s Act respecting the protection of personal information in the private sector, as updated by Law 25, and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

Who is responsible

I, Heidi Klotz, am the person in charge of protecting personal information at Heidi Klotz Coaching & Leadership. You can reach me at info@heidiklotz.com or by mail at 3008-1188 rue Saint-Antoine Ouest, Montréal, Quebec H3C 1B4, Canada.

What I collect

  • Contact details: your name, email address and phone number, when you book a call, fill in the contact form or write to me.
  • Work details: your role, your organization and, for businesses, information about your company.
  • What you share in our sessions: the situations, goals and questions you choose to discuss, and my session notes.
  • Billing details: what I need to invoice you. Credit card payments are handled by Wise, and I never see or store your full card number.
  • Website data: basic, anonymous statistics about how visitors use this website, through Cloudflare Web Analytics, which doesn’t use cookies. See “Cookies” below.

Why I collect it

I use your information only to reply to you, schedule and deliver our sessions, send invoices and receipts, provide the records you ask for (for example, an invoice and record of hours for your employer or your benefits plan), and meet my legal and tax obligations. I don’t sell your information, and I won’t send you marketing emails unless you agree to receive them.

Your consent

By booking a call, sending a message or working with me, you consent to my using your information as described here. You can withdraw your consent at any time by writing to me, although I may then be unable to continue providing some services.

Confidentiality, and its limits

What you share in our sessions stays between us. I never share it with your employer, even when your employer pays, unless you ask me to in writing. If your employer pays, they receive only the invoice and the record of hours.

The only exceptions are when the law requires it, for example a court order, or when I believe there is a serious and imminent risk of harm to you or someone else.

Information about other people

When you discuss a situation involving colleagues or employees, please leave out names and identifying details unless they are truly needed. When I advise a business, I handle employee information only as needed to give that advice, and I keep it confidential.

Who else handles your information

I rely on a few trusted service providers to run my practice: Google (Gmail, Google Calendar and Google Meet) for email, scheduling and video calls, Wise for card payments, Interac for bank transfers, and Cloudflare to host this website, forward email to my inbox and provide website statistics. Some of them store information outside Quebec, including in the United States. Before using a provider, I assess whether it protects information adequately, and they may use your information only to provide their service to me.

How long I keep it

I keep your information while we work together and for 6 years after our last session, mainly to meet tax and accounting rules. After that, I securely destroy it. You can ask me to delete your session notes earlier.

How I protect it

I store information in password-protected accounts with two-step verification, limit access to myself, and use secure tools for video calls and payments.

Your rights

  • See the personal information I hold about you
  • Correct information that is wrong or incomplete
  • Withdraw your consent
  • Ask me to delete your information, unless I must keep it by law
  • Receive your information in a commonly used format
  • File a complaint

To make a request, write to info@heidiklotz.com. I’ll reply within 30 days.

Cookies

This website doesn’t use cookies to track you. I use Cloudflare Web Analytics to understand how visitors use the site, for example which pages are visited most. It collects anonymous, combined statistics without cookies and without identifying you, and Cloudflare may process this data outside Quebec. The booking calendar is provided by Google and follows Google’s own privacy policy.

If something goes wrong

If a privacy incident creates a risk of serious harm, I will tell you and the Commission d’accès à l’information du Québec as soon as possible, and take steps to limit the harm.

Questions or complaints

Please write to me first, and I’ll do my best to fix it. You can also contact the Commission d’accès à l’information du Québec or, outside Quebec, the Office of the Privacy Commissioner of Canada.

Changes to this policy

I may update this policy from time to time. The date at the top shows when it last changed.

Book a free clarity call