Effective date: 10 October 2026
 

1. About this policy
 

The Black Girl Health Bank Inc., carrying on business as The Black Girl Health Bank (“BGHB”, “we”, “us” or “our”), respects your privacy.

This policy explains how we collect, use, disclose and protect personal information through www.thebghb.com, our communications and related services.

Personal information means information about an identifiable individual.We handle personal information in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies.
 

2. Information we collect
 

Depending on how you interact with us, we may collect:
 

• Contact information: Your name, email address and other contact details you provide.

• Communications: Messages, enquiries, feedback and survey responses you submit.

• Subscription preferences: Your email subscription choices and records of consent or withdrawal.

• Account information: Information you provide if you create an account.

• Booking information: Registration details, attendance records and transaction information made available to us through the relevant ticket sale platform.

• Technical information: Your IP address, browser and device details, pages visited and other information generated through website use, depending on the technologies enabled.
   

We limit collection to information reasonably needed for the purposes explained to you.

Please do not submit medical records or detailed health information through general website forms or email. If information about an accommodation or participation need is required, we will explain what is needed and how it will be used.
 

3. How we use information
 

We use personal information, as applicable, to:
 

• Respond to enquiries and provide requested assistance.

• Administer subscriptions, accounts and registrations.

• Manage bookings and send relevant administrative updates.

• Send newsletters, educational content and promotional updates where permitted.

• Understand feedback and improve our website and services.

• Maintain website security and prevent misuse.

• Meet legal, accounting and recordkeeping obligations.
   

We will identify any additional purpose before using your information for that purpose and obtain consent where required.
 

4. Consent and your choices
 

We obtain consent where required for the collection, use and disclosure of personal information. The form of consent depends on the sensitivity of the information and the circumstances.

Where we collect sensitive information, we will generally seek express consent and explain its purpose and intended recipients.

Reading this policy or accepting our website Terms does not, by itself, provide consent to every use of your information.

We will not make access to a service conditional on consent to information handling that is unnecessary for that service.
 

5. Email communications
 

We send promotional emails only with consent or another basis permitted by Canada’s anti-spam legislation.

You can unsubscribe through the link in our emails.

Unsubscribing from marketing does not prevent necessary administrative messages about an existing booking or request.
 

6. Cookies, analytics and service providers
 

Our website may use cookies and similar technologies to support essential functions, remember preferences and, where enabled, measure website use.

Some embedded services may also collect information when they load or when you interact with them.
 

Our current website providers and technologies are:
 

• Website hosting: Wix.com

• Event platform: Eventbrite.com
   

We will provide information about optional tracking and obtain consent where required. You can also manage cookies through your browser, although blocking essential cookies may affect website functions.
 

7. Ticket sale platforms and event information
 

Bookings may take place through a separate ticket sale platform, including Eventbrite where applicable.

That platform’s privacy policy explains how it handles information for its own purposes. The relevant event listing and registration forms will explain any additional information required for that class or event.
 

We may receive information from the platform to administer your booking, communicate with you and manage participation. This policy applies to our handling of that information.
 

Booking a ticket does not automatically subscribe you to our marketing emails. Any promotional use must have an appropriate consent or other lawful basis.

Please review the platform’s privacy policy and the event-specific notices before providing information.
 

8. When we share information
 

We may share information with:
 

• Service providers supporting hosting, communications, registration, payments or secure storage.

• Instructors or event partners where reasonably necessary to deliver a booked service, with appropriate notice and consent where required.

• Professional advisers where necessary for legitimate business or legal purposes.

• Authorities or other parties where disclosure is required or permitted by law.
   

We restrict access to what is reasonably needed. We require providers handling information on our behalf to protect it and use it only for authorised purposes.

We do not sell personal information or give sponsors your contact details for their own marketing without your consent.
 

10. Retention and security
 

We retain information only as long as reasonably necessary for its identified purposes, including applicable legal requirements and the resolution of disputes.

When information is no longer needed, we securely delete it or make it anonymous, as appropriate.

We use reasonable safeguards suited to the sensitivity of the information and restrict access to authorized people who need it for their work.
 

11. Access, correction and privacy requests
 

You may contact us to request access to your personal information, ask how it has been used or disclosed, request corrections, or raise a privacy concern.

We may take reasonable steps to verify your identity before responding. We will respond within the applicable timeframe. Where PIPEDA applies, access requests are generally answered within 30 days, subject to lawful extensions or exceptions.
 

You may also request deletion. We will consider the request, but some records may need to be retained for legal or other permitted purposes. If we cannot fulfil a request, we will explain why, where legally permitted.
 

12. Photographs, testimonials and sensitive information
 

If we wish to publish an identifiable photograph, recording or testimonial, we will explain its intended use and obtain consent where required. Any sensitive information collected for participation or accommodation will be limited to what is necessary and handled with safeguards appropriate to its sensitivity.
 

13. Changes to this policy

We may update this policy and will display the revised effective date. For material changes, we will provide appropriate notice. If a new use of information requires consent, we will obtain that consent before proceeding. Posting an update does not replace legally required consent.