top of page

Privacy Policy

 

Potential Imagination · potentialimagination.org
Last updated: May 2026 · Effective immediately

​

Summary: We collect only what we need to provide our services. We never sell your data. You have full rights over your personal information at any time.

​

1. Who We Are

 

Potential Imagination ("we," "us," or "our") is an individual professional service operated by Cristian Jofre Barrera, offering career advisory sessions, organizational learning content, and the Life in Progress newsletter. Our services are available globally, with primary audiences in Canada and internationally.

Contact: info@potentialimagination.org

​

2. What Information We Collect

 

2.1 Information you provide directly

  • Name and email address when subscribing to the newsletter (via Substack)

  • Name, email, and payment information when booking a session (via TidyCal and Stripe)

  • Application information submitted through the Life Project Session form (via Tally.so)

  • Responses to intake forms completed before advisory sessions

  • Any information shared during advisory sessions or email correspondence

​​

2.2 Information collected automatically

  • Website usage data through Wix analytics (pages visited, time on site, device type)

  • Email open rates and click data through Substack

  • IP address and browser information for security purposes

​​

2.3 Information we do not collect

  • Sensitive personal data (health, race, religion, political views) unless voluntarily shared in session context

  • Financial information beyond what Stripe processes for payment (we never see your full card details)

  • Data from minors under 18 years of age

​​

3. How We Use Your Information

​

  • To deliver the Life in Progress newsletter to subscribers

  • To schedule, confirm, and conduct advisory sessions

  • To process payments for paid sessions through Stripe

  • To review and respond to Life Project Session applications

  • To improve our content and services based on usage patterns

  • To comply with legal obligations

​​

We do not use your information for automated decision-making or profiling.

​

4. Legal Basis for Processing

 

We process your personal data under the following legal bases:

  • Consent: Newsletter subscription and marketing communications

  • Contract performance: Advisory session delivery and payment processing

  • Legitimate interest: Service improvement and security

  • Legal obligation: Financial record-keeping and tax compliance

​​

5. Third-Party Services

 

We use the following third-party platforms, each with their own privacy policies:

  • Substack — newsletter delivery and subscriber management (substack.com/privacy)

  • TidyCal — session booking and scheduling (tidycal.com/privacy)

  • Stripe — payment processing (stripe.com/privacy)

  • Lemon Squeezy — digital product delivery (lemonsqueezy.com/privacy)

  • Tally.so — application and intake forms (tally.so/privacy)

  • Wix — website hosting and analytics (wix.com/about/privacy)

​​

We select these providers carefully and require that they maintain appropriate data protection standards.

​

6. Data Retention

​

  • Newsletter subscribers: Until you unsubscribe

  • Session records: 3 years after the last session for professional practice records

  • Payment records: 7 years as required by tax law

  • Application forms: 12 months from submission date

​​

7. Your Rights

 

Depending on your location, you have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you

  • Correction: Request correction of inaccurate data

  • Deletion: Request deletion of your personal data ("right to be forgotten")

  • Portability: Request your data in a portable format

  • Objection: Object to processing based on legitimate interest

  • Withdrawal of consent: Withdraw consent at any time for consent-based processing

  • Complaint: Lodge a complaint with your local data protection authority

​​

To exercise any of these rights, contact us at info@potentialimagination.org. We will respond within 30 days.

​

8. International Data Transfers

 

Our services are operated internationally. Your data may be processed in countries outside your own, including the United States, Brazil, and Canada. We ensure appropriate safeguards are in place through our use of GDPR-compliant, LGPD-compliant, and PIPEDA-compliant third-party services.

​

9. Applicable Laws

 

This Privacy Policy is designed to comply with:

  • LGPD — Lei Geral de Proteção de Dados (Brazil)

  • PIPEDA — Personal Information Protection and Electronic Documents Act (Canada)

  • CASL — Canada's Anti-Spam Legislation

  • GDPR — General Data Protection Regulation (European Union)

​​

10. Changes to This Policy

 

We may update this Privacy Policy periodically. When we do, we will update the "last updated" date at the top of this page. Continued use of our services after changes constitutes acceptance of the updated policy.

bottom of page