Privacy Policy

Last updated: June 3, 2026

About Atelier Exactli: Atelier Exactli is a self-paced ExAC study preparation platform offering digital study guides, recorded lessons, mock questions, resource summaries, and optional support tools. It is not a school, university, professional order, licensing authority, or official ExAC preparation course.

Atelier Exactli Inc. ("Atelier Exactli," "the Company," "we," "us," or "our") is committed to protecting the privacy and personal information of the visitors, members, and candidates of our website (https://exactli.ca) and our Services. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, with whom we share it, and the rights you have over it.

This Policy is governed by Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (RLRQ c. P-39.1, as amended by Law 25). The short-form summary of this Policy is available as "Privacy at a Glance." In the event of any conflict, this full Privacy Policy governs.

1. Who We Are and How to Reach Us

Atelier Exactli Inc. is the entity responsible for the personal information collected through our Site and Services.

Person in charge of the protection of personal information (Privacy Officer): Rony S. Saikali

Email: [email protected]

Address: 1855 Boulevard René-Lévesque West, Montréal, QC H3H 1R4, Canada

You may contact our Privacy Officer at any time to ask a question, exercise a right, or make a complaint regarding your personal information.

2. Personal Information We Collect

We collect the following categories of personal information:

Information you provide to us:

Identity and contact details: your name, email address, and (where applicable) mailing address and phone number.
Account credentials: username and password.
Payment information: billing details and transaction confirmations. Full card numbers are processed directly by our payment processors (Stripe, PayPal) and are not stored by us.
Content you submit: forum posts, comments, reviews, survey responses, support messages, and (for the EXPERT tier) information you provide for the optional study support session.

Information we collect automatically:

Technical and usage data: IP address, device type, browser, operating system, pages visited, referring URLs, and interactions with our content.
Cookies and similar technologies, as described in our Cookies Policy.

Information from partners:

Payment confirmation and limited billing information from our payment processors, and referral or affiliate codes where applicable.

We collect only the personal information that is necessary for the purposes described in this Policy, and we do not collect sensitive information beyond what is required to provide our Services.

3. Why We Collect and Use Your Information

We collect and use personal information for the following purposes:

To create, manage, and secure your account.
To process your orders and payments and to deliver the study materials and Services you purchase.
To provide customer support and respond to your inquiries.
To administer EXPERT-tier benefits, including the extended access and the optional one-on-one study support session.
To improve our content, Site, and user experience, including through analytics.
To send you important service-related communications, and, with your consent, optional newsletters and marketing communications.
To keep our platform secure and to prevent fraud and misuse.
To comply with our legal, tax, and regulatory obligations.

4. Consent

We collect, use, and disclose your personal information with your consent, except where the law permits or requires us to do so without consent. Your consent may be express (for example, when you check a box to receive our newsletter) or implied (for example, when you voluntarily provide information for an evident purpose, such as creating an account to access a study package).

For email marketing, we obtain consent in accordance with Canada's Anti-Spam Legislation (CASL). Every commercial electronic message we send includes a clear way to unsubscribe. You may withdraw your consent at any time, subject to legal or contractual restrictions, by contacting our Privacy Officer or using the unsubscribe link. Withdrawing consent may limit our ability to provide certain Services; we will explain the consequences before giving effect to your request.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our Site, remember your preferences, analyze usage, and measure our own marketing. As required by Law 25, non-essential cookies are auto-blocked by default and are only activated with your explicit consent. For full details, including the categories of cookies, their purposes, and how to manage them, please see our Cookies Policy.

6. Disclosure and Transfer to Third Parties

We share personal information only as needed to operate Atelier Exactli, and only with trusted service providers (subprocessors) who are contractually required to keep it confidential, use it solely for the purposes we specify, and protect it to the standards set out in this Policy. Our principal subprocessors include:

Kajabi — platform hosting and learning management.
Stripe and PayPal — payment processing.
Google Analytics and Microsoft Clarity — website analytics.
Our email service provider — transactional emails and newsletters.

A current list is maintained at exactli.ca/subprocessors. We may also disclose personal information where required to comply with a court order, law, or legal process, to enforce our Terms, or to protect the rights, property, or safety of Atelier Exactli or others, including for fraud prevention. We do not sell your personal information to third parties.

7. Transfers Outside Quebec

Some of our service providers store or process data outside Quebec, including in the United States. Before transferring personal information outside Quebec, we conduct a privacy impact assessment that considers the sensitivity of the information, the purpose of its use, the protection measures in place, and the legal framework of the jurisdiction where it will be communicated. Such transfers are governed by appropriate contractual protections to ensure your information receives adequate protection.

8. Data Security

The security of your personal information is important to us. We have implemented reasonable physical, organizational, contractual, and technological measures to protect personal information against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification. These measures include encryption of our website (SSL/TLS), the use of PCI-DSS compliant payment processors, access controls, backups, and regular monitoring. Access to personal information is limited to personnel and service providers who need it to perform their functions. In the event of a confidentiality incident presenting a risk of serious injury, we will notify the affected persons and the Commission d'accès à l'information as required by law.

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. As a general guide:

Account data: retained for approximately one (1) year after you close your account.
Payment and transaction records: retained for seven (7) years to comply with tax law.
Analytics and support logs: retained for periods ranging from 30 days to two (2) years.

When personal information is no longer required, we delete or anonymize it. We may retain anonymized, de-identified data for legitimate statistical and research purposes.

10. Your Rights

Subject to applicable law, you have the right to:

Access: request access to the personal information we hold about you.
Correction: request correction of inaccurate, incomplete, or out-of-date information.
Deletion: request that we delete your personal information, subject to our legal retention obligations.
Portability: request that computerized personal information you provided to us be communicated to you in a structured, commonly used technological format (Law 25 data portability).
Withdraw consent: withdraw your consent to the collection, use, or disclosure of your personal information, or unsubscribe from marketing communications.
Automated decision-making: where a decision affecting you is based exclusively on automated processing, be informed of that fact and of the personal information and principal factors used, and submit observations to a member of our staff who can review the decision.

To exercise any of these rights, contact our Privacy Officer in writing at [email protected]. We may ask for information to verify your identity. We will respond within thirty (30) days. Access to your information is generally provided free of charge; we will inform you in advance of any reasonable fee that may apply before processing your request.

11. Privacy of Minors

Our Services are intended only for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a person under 18, please contact our Privacy Officer and we will delete it.

12. Complaints

If you are not satisfied with how we have handled your personal information, you may file a complaint with our Privacy Officer, who will investigate and make reasonable efforts to resolve it. You may also contact Quebec's Commission d'accès à l'information (cai.gouv.qc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca). We suggest contacting our Privacy Officer first so that we can try to resolve your concern directly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The "Last updated" date at the top will be revised accordingly. If we make significant changes to how we handle personal information, we will notify affected persons by email or through a prominent notice on our Site. We encourage you to review this Policy periodically.

14. Contact

For any question, comment, or request concerning this Privacy Policy or our privacy practices, please contact:

Privacy Officer / Responsable de la protection des renseignements personnels: Rony S. Saikali