Privacy Policy

1. Scope and accountability

Xponential Mentor (“XM,” “we,” “us” or “our”) respects your privacy. This policy explains how we handle personal information when you visit xponentialmentor.com, subscribe to communications, complete a form or assessment, book a call, attend an event, purchase a service or otherwise work with us.

We are based in British Columbia, Canada. Depending on the circumstances, our handling of personal information may be governed by British Columbia’s Personal Information Protection Act, Canada’s Personal Information Protection and Electronic Documents Act and other laws that apply to the individual or transaction.

We designate a Privacy Officer to oversee our privacy practices. Contact information appears at the end of this policy.

2. Personal information we collect

We limit collection to information reasonably needed for identified business purposes. Depending on how you interact with us, this may include:

• Contact information such as your name, email address, telephone number, business name, role and location.
• Information you provide through forms, assessments, questionnaires, event registrations, email, calls or messages.
• Business information shared for advisory, assessment, coaching, AI implementation or related services.
• Transaction and subscription information. Payment-card information is generally processed by third-party payment providers rather than stored directly by XM.
• Technical information such as IP address, browser type, device information, referring page, pages viewed and interaction data.
• Marketing preferences, consent records and communication history.
• Recordings, transcripts or notes when a meeting or event is recorded with notice or consent.

Please do not submit highly sensitive personal information through general website forms unless we specifically request it and provide an appropriate secure method.

3. How we use personal information

We may use personal information to:

• Respond to enquiries and provide requested information.
• Schedule calls, deliver assessments, advisory services, events, programs and purchased products.
• Manage client relationships, accounts, subscriptions, billing and support.
• Personalize communications and recommend relevant services or resources.
• Send newsletters and commercial electronic messages where permitted, with an unsubscribe option.
• Operate, secure, troubleshoot and improve our website, services and business systems.
• Measure website and campaign performance and understand how people find and use our content.
• Meet legal, accounting, tax, fraud-prevention and dispute-resolution obligations.

We seek consent where required. In other circumstances, consent may be implied from the context or processing may be permitted or required by law. You may withdraw consent subject to reasonable notice and legal or contractual restrictions.

4. AI-assisted processing

XM uses artificial intelligence and automation tools to support work such as research, analysis, drafting, summarization, content development, workflow improvement, customer support and delivery of business services.

Our approach is human-led:

• AI output is treated as assistance, not as unquestioned fact or professional judgment.
• We use reasonable efforts to minimize the personal and confidential information provided to AI services.
• We do not knowingly use client confidential information to train public AI models.
• We review material AI-assisted outputs before using them for client decisions or public communications.
• We do not use solely automated decision-making to make legal or similarly significant decisions about individuals.

When personal information is processed through an AI-enabled provider, it may be processed outside Canada and will be subject to that provider’s contractual terms, security controls and applicable laws. If a specific engagement requires a different AI or confidentiality arrangement, that arrangement should be documented in the applicable agreement.

5. When we share information

We do not sell personal information. We may share limited information with service providers that help us operate the business, including website and funnel hosting, customer relationship management, email delivery, scheduling, video hosting, analytics, payment processing, cloud storage, communications, security and AI-assisted productivity services.

Current or likely providers include ClickFunnels, Calendly, Cloudflare, Google and YouTube, Microsoft, payment processors and selected AI technology providers. Providers may change as our systems evolve. We require providers to handle information for authorized purposes and rely on their contractual, privacy and security commitments.

We may also disclose information when required by law, to protect rights or safety, in connection with a business reorganization or transaction, or with your direction or consent.

6. Cookies, analytics and embedded content

Our website and service providers may use cookies, pixels, local storage and similar technologies to make pages function, remember preferences, measure traffic, understand campaign performance and support relevant communications.

Embedded content, including YouTube videos and scheduling or form tools, may allow the applicable provider to collect technical and usage information. Where required by law, we request consent before using non-essential technologies. You can also limit cookies through your browser settings, although some features may not work correctly.

7. Email and marketing communications

We send promotional email only where we have consent or another lawful basis. Messages identify the sender and include a way to unsubscribe. Service, transaction and relationship messages may still be sent when needed to provide something you requested or purchased.

8. Your choices and privacy rights

Subject to applicable law and valid exceptions, you may ask us to:

• Explain whether we hold personal information about you and how it has been used or disclosed.
• Provide access to your personal information.
• Correct inaccurate or incomplete information.
• Withdraw consent or change communication preferences.
• Delete information that we are not required to retain.
• Provide information about relevant service providers or cross-border processing.

We may need to verify your identity before completing a request. If we cannot fully grant a request, we will explain why when required.

9. Security, retention and international processing

We use reasonable administrative, technical and organizational safeguards appropriate to the sensitivity of the information. No online system is completely secure, and we cannot guarantee absolute security.

We retain personal information only as long as reasonably necessary for the identified purposes, contractual commitments, legitimate business needs and legal requirements. Retention periods vary by record type. When information is no longer required, we take reasonable steps to delete, anonymize or securely dispose of it.

Some providers process or store information outside British Columbia or Canada, including in the United States. Information in another jurisdiction may be accessible to courts, law-enforcement or national-security authorities under that jurisdiction’s laws.

10. Children’s privacy and external links

Our services are intended for adults and businesses, not children under 16. We do not knowingly collect personal information from children through this website.

Our website may link to third-party sites. Their privacy practices and content are governed by their own policies, not this policy.

11. Changes to this policy

We may update this policy when our practices, technology or legal obligations change. The “Last updated” date shows the most recent revision. Material changes may also be communicated through the website or directly when appropriate.