Privacy policy
Effective: November 7, 2026 · Last updated: November 7, 2026
Académie Fay inc. (Fay Academy Inc.) respects your privacy. This policy explains what personal information we collect, why, and what your rights are.
Person in charge
Person in charge of the protection of personal information: Privacy Officer, Académie Fay inc., privacy@fayacademy.com, 1235 Notre-Dame St W, Unit 100, Montréal, QC H3C 0B1.
What we collect and why
| Information | How | Why |
|---|---|---|
| Name, email address | Sign-up or purchase form | To create your course access and communicate with you about it |
| Billing address, country and province | Checkout | To complete the sale, calculate tax, and meet our legal and tax obligations |
| Card details | Entered on the checkout page and processed by Stripe | To process payment. Your full card number is handled by Stripe and we have no access to it. We see only limited details, such as the card type, its last four digits and its expiry date. |
| Course progress and answers | Thinkific | To give you access to the course and improve it |
| Email address, consent date and form | Newsletter form | To send the newsletter if you asked for it, and to keep proof of your consent |
| Your answers on the course application and seminar forms, such as the option you choose, your role and the task you would hand to AI first | Course application and seminar registration forms (Kit) | To review your application and prepare the session |
| Your messages | Email, feedback forms | To reply to you and improve the course |
| Image and voice, if you join a live session | Zoom | To hold the session. Recording is announced at the start |
We collect only what these purposes require. You may decline to provide information, but without your name, email and payment details we cannot sell you the course. The newsletter is optional and is never a condition of purchase.
Never send health information about a patient or information that could identify a patient.
Our courses and emails are for adults. By signing up, you confirm that you are at least 18.
Technology we use
The fayacademy.com site places no cookies and uses no pixels or embedded video players. It uses Cloudflare Web Analytics to count visits to its pages. This tool sets no cookies, does not identify you and does not follow you across other websites. It records the page visited, the page you came from, your browser and type of device, your approximate country and how long the page took to load. Videos open on YouTube, which has its own policy.
Our course information pages, hosted on faymd.com, carry no analytics or pixels. They load fonts from Google and the sign-up form from Kit. Cloudflare places a short-lived security cookie called __cf_bm on them, and Kit's form script stores information in your browser and may load Google reCAPTCHA.
Sign-up forms send your information directly to Kit. Our emails contain a small image and tracked links from Kit that record whether an email was opened and which links were clicked.
The course and checkout pages are run by Thinkific and Stripe, not by our site. Thinkific uses cookies to keep you signed in, remember your place in lessons and run its course site, and it uses analytics and performance tools, including Mixpanel and New Relic. Stripe uses cookies for payment and fraud prevention. We have added no tracking code of our own to those pages.
Live sessions are held on Zoom, which has its own policy.
If we add a technology that can identify you, locate you or build a profile of you, it will stay off until you turn it on, and we will tell you how.
Who can access your information
Within the company, only the person in charge and people she authorizes for their duties have access. We entrust some processing to service providers bound by a written contract:
| Provider | Role | Location the provider states |
|---|---|---|
| Thinkific | Course platform | United States |
| Stripe | Payment | United States |
| Kit | Newsletter | United States and other countries |
| Zoom | Live sessions | Stored in the United States by default; during a session, traffic goes through the data centre nearest each participant |
| Cloudflare | Site, email and visit counts | Mainly the United States and the European Economic Area; processing and access possible elsewhere in the world |
| Zapier | Automatic sending of the contract copy | United States and other countries |
| Google and Superhuman | Company email | Servers in several countries; the providers name the United States but do not list every location |
| Anthropic (Claude) | Reading messages sent to our addresses and preparing draft replies; a person reviews every draft before it is sent | United States and other countries on its subprocessor list |
| Dropbox | Filing photographs and documents sent with a message | United States and other locations around the world |
| Telegram | Internal alert of a new application (name and tier) | Data centres in several jurisdictions; the provider does not list them |
We do not sell your personal information.
Information outside Québec
Your information may be disclosed or stored outside Québec, including in the United States, where our providers are, and in Kuwait, from where the company's management may access it. We assess the protection offered before doing so.
Security and retention
We limit access, use accounts protected by two-factor authentication where possible, and use providers that apply recognized security measures. We keep:
- purchase records and tax documents for six years after the end of the last year to which they relate, or longer where a law requires it, for example during an objection or appeal;
- your course access for the access period in the contract;
- newsletter data until you unsubscribe, and proof of consent for as long as we need to demonstrate it;
- support messages for 3 years after our last exchange.
We then destroy or anonymize your information, subject to the law.
Your rights
You may ask for access to your information, correction of it, or a copy in a structured technological format. You may withdraw consent at any time, subject to legal and contractual obligations, and ask us to stop dissemination or de-index in the cases the law provides. Write to the person in charge. We reply in writing, promptly and no later than 30 days after receiving your request, to any request for access, correction, stopping dissemination or de-indexing; this is the deadline the law sets. We also commit to replying within 30 days to any other request, such as withdrawing consent.
If you are not satisfied with our response, you may complain to Québec's Commission d'accès à l'information. You may write to us first, and our governance page explains how we handle complaints.
Changes
We will post any change on this page with its date, and we will tell you by email if it significantly affects you.