Privacy Policy

Last updated: 10 November 2026

This policy explains what personal information Spirit Science University collects, why we collect it, who we share it with, and the choices you have.

1. Who we are

Spirit Science University is run by Spirit Creations Ltd., a Manitoba corporation that does business as Spirit Science and Spirit Science University. In this policy, "we", "us" and "our" mean Spirit Creations Ltd.

Registered office: 2nd Floor, 295 Broadway, Winnipeg, Manitoba R3C 0R9, Canada.

Email: ssu@spiritstudios.com

Our Privacy Officer is responsible for how we follow this policy. You can reach our Privacy Officer at ssu@spiritstudios.com.

We decide how and why your personal information is used. Under EU and UK law this makes us the "controller".

2. What this policy covers

This policy covers the website at www.spiritscienceuniversity.org, the member area at hub.spiritscienceuniversity.org (the "hub"), and the emails we send about them.

The 2027 Almanac of the New Age is sold through this site's checkout, and Lulu prints and ships it (see How we share your information). Our other physical products, such as Patch Tarot decks and books, are sold through separate online stores. Those stores have their own policies, which are shown at checkout there. This policy does not cover those stores, our mobile apps or our other websites.

3. What we collect

Information you give us

• Contact details. Your name and email address when you fill in a sign-up form or check out.
• Shipping details. If you order a printed book, your shipping address and phone number. The printer needs them to deliver your book.
• Account details. The login you use for the hub.
• Purchases and subscriptions. What you bought, the price, the dates, the status of any membership, and the "Paid Through" date that shows how long your membership access runs.
• Payment details. You enter card details at checkout and they go to Stripe, our payment processor. We do not store card numbers. We may see limited details, such as the card type, the last four digits, and whether a payment went through.
• Course activity. Your progress through courses and the comments you leave on lessons.
• Community content. Your posts, comments and reactions in community groups and channels, and any profile name or photo you add.
• Testimonials. If you fill in our testimonial form: your testimonial text, the course it is about, whether you give permission to share it, and how you would like to be credited.
• Support emails. The messages you send us and our replies.

Information collected automatically

• Email engagement. Whether you opened an email from us and which links you clicked.
• Technical data. Your IP address, browser and device type, the pages you request, and the date and time. Cloudflare and HighLevel record this as they deliver the site to you.
• Cookies and similar tools. See the Cookies section below.

Information from others

• Stripe tells us whether a payment succeeded, failed, was refunded or was disputed.
• If you choose to sign in with Google, Google confirms your name and email address to the hub.

Some of what you share in courses, calls or the community may touch on your beliefs, your health or your personal life. Sharing it is your choice. We do not ask for it, and we do not use it for advertising.

4. Why we use your information

We use personal information only for the purposes below. For members in the EU and UK, each purpose is listed with its legal basis.

• To give you what you signed up for. We create your account, give you access to courses, memberships and the community, save your progress, and show your posts. Legal basis: our contract with you.
• To take payments and manage memberships. We charge for purchases, renew subscriptions, keep your Paid Through date, and handle refunds and payment disputes. Legal basis: our contract with you, and our legal duty to keep financial records.
• To send service messages. These include receipts, login details, renewal and payment notices, and notices about changes to our terms. Legal basis: our contract with you.
• To send newsletters and offers. We send these only if you signed up or bought something from us. Legal basis: your consent, or our legitimate interest in keeping in touch with customers where the law allows it. You can unsubscribe at any time.
• To see how our emails perform. We record opens and clicks so we can send more useful emails. Legal basis: our legitimate interests, or your consent where the law requires it.
• To measure our ads. The 2027 Almanac pages run Meta's pixel (see Advertising in the Cookies section). It shows us which ads bring visitors, checkouts, purchases and free sample sign-ups, and it helps Meta show our ads to people likely to be interested. Legal basis: our legitimate interests. The pixel does not run in browsers set to a European time zone.
• To answer you. We read and reply to support emails. Legal basis: our contract with you and our legitimate interest in helping members.
• To share testimonials. We publish a testimonial only if you gave permission. Legal basis: your consent.
• To keep the site and community safe. We moderate the community, prevent spam and fraud, and protect accounts. Legal basis: our legitimate interests.
• To follow the law. We keep tax and accounting records and respond to lawful requests. Legal basis: legal obligation.

In Canada, we rely on your consent, which can be express or implied depending on the situation. You can withdraw consent at any time, subject to legal or contractual limits. If you withdraw consent to something we need in order to run your account, we may have to close the account.

5. Email and marketing

We send marketing emails only to people who signed up for them or who bought something from us. Every marketing email names us as the sender, includes our mailing address, and has an unsubscribe link.

If you unsubscribe, we stop marketing emails promptly and within 10 business days at the latest. We will still send messages you need, such as receipts and notices about your account or membership.

Replies to our emails go to ssu@spiritstudios.com.

6. How we share your information

We do not sell your personal information. We share it with the companies that help us run the site, so they can do that work for us, and with Meta for advertising, as described below.

• HighLevel (also called LeadConnector). Our website, forms, contact records, email sending, course and community hosting, and checkout all run on HighLevel.
• Stripe. Stripe is our payment processor. It handles card payments at checkout and is connected through HighLevel. Your card number goes to Stripe. We do not store it.
• Lulu. Lulu prints and ships The 2027 Almanac of the New Age. We send Lulu your name, shipping address and phone number so it can print, ship and deliver your book. We do not send Lulu your email address.
• Cloudflare. The site is delivered through Cloudflare, which also protects it from attacks.
• Google Workspace. We use it for email and documents, including support emails.
• Our video-call provider. Live calls and gatherings run on its service.
• YouTube. Some lessons play video from YouTube. When a lesson with a YouTube video loads or plays, YouTube receives your IP address and may set its own cookies under Google's privacy policy.
• Google Fonts. Some pages load their typefaces from Google, so Google receives your IP address when the page loads.
• Analytics inside the member hub. The hub uses Google Analytics and product analytics provided by our platform. See the Cookies section below.
• Meta. On the 2027 Almanac pages, Meta's pixel sends Meta your IP address, browser details and the page you visited, and after a purchase, the amount. Meta can link this to your Facebook or Instagram account and uses it under its own privacy policy. See Advertising in the Cookies section below.

We may also share information in these cases:

• With our team members, contractors and guest teachers who need it to do their work for us.
• With our lawyers, accountants and other professional advisers.
• With courts, regulators or police when the law requires it, or to protect someone's rights or safety.
• With a buyer or successor if our business, or part of it, is sold or reorganised. Your information would stay protected by a policy at least as protective as this one.

Other members can see what you post in the community. See the section on community posts and testimonials below.

7. Where your information is processed

We are based in Canada. Our providers process your information mainly in the United States and Canada. Privacy laws in those countries may differ from the laws where you live, and courts and government agencies there may be able to access your information under local law.

Where the law requires it, we rely on approved safeguards for these transfers, such as an adequacy decision or the standard contractual clauses in our providers' terms. You can email us to ask for more detail.

8. How long we keep it

We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires.

• Account, course progress and community content: while your account is open. If you ask us to delete your account, we delete or anonymise this information within 30 days.
• Purchase and subscription records: 7 years, for tax and accounting.
• Marketing contact details: until you unsubscribe. After that we keep your email address on a do-not-email list so we can respect your choice.
• Support emails: 3 years after the conversation ends.
• Testimonials: until you withdraw your permission.

Copies in backups are removed on the provider's normal backup cycle.

9. How we protect it

The site and the hub use encrypted connections (HTTPS). Card payments are handled by Stripe, and we do not store card numbers. Only team members who need member records for their work can open them.

No online service can promise perfect security. If a breach of our safeguards creates a real risk of significant harm to you, we will tell you and the relevant regulators as the law requires.

You can help by using a strong password that you do not use anywhere else, and by keeping your login to yourself.

10. Your rights

Everyone

Wherever you live, you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is wrong or out of date;
• delete your account and the information linked to it, apart from records we must keep by law;
• stop sending you marketing emails;
• stop using a testimonial you gave us.

To make a request, email our Privacy Officer at ssu@spiritstudios.com from the address linked to your account. We may ask for more details to confirm who you are. We reply within 30 days. Requests are free unless they are clearly excessive or repeated.

Canada

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and similar provincial laws, you can access and correct your personal information, withdraw consent, and challenge how we follow the law. If you are unhappy with our answer, you can complain to the Office of the Privacy Commissioner of Canada or to your provincial privacy commissioner.

Under Canada's Anti-Spam Legislation (CASL), we send commercial emails only with your express or implied consent. Each one identifies us and gives you a way to unsubscribe.

European Union and United Kingdom

Under the GDPR and the UK GDPR, you have the right to:

• access your personal information;
• have it corrected;
• have it erased;
• restrict how we use it;
• object to our use of it, including any use for direct marketing;
• receive it in a portable format;
• withdraw consent at any time, without affecting what we did before you withdrew it.

You can also complain to the data protection authority where you live. In the UK this is the Information Commissioner's Office.

California

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), California residents have the right to:

• know what personal information we collect, use and disclose;
• ask us to delete it;
• ask us to correct it;
• opt out of the sale or sharing of personal information;
• limit the use of sensitive personal information;
• be treated the same whether or not they use these rights.

We do not sell personal information. The Meta pixel on the 2027 Almanac pages counts as sharing for cross-context behavioral advertising under California law. To opt out, turn on Global Privacy Control in your browser, and the pixel will not run. We do not use sensitive personal information for any purpose that California law lets you limit.

In the past 12 months we have collected these categories: identifiers (such as name, email address and IP address), commercial information (purchases and subscriptions), internet activity (course progress, email opens and clicks, pages requested), and the content you chose to post or send us. We disclosed them to the service providers listed above. Since 10 November 2026, the Meta pixel also shares identifiers (IP address and browser details) and internet activity (visits to the 2027 Almanac pages, checkouts and purchases) with Meta.

You can make a request yourself or through an authorised agent. We will ask the agent for proof that you gave them permission.

11. Cookies and similar tools

Cookies are small files that a website stores in your browser. Browser storage works in a similar way. This is what the site uses.

Needed for the site to work

• Cloudflare sets a short-lived security cookie (named __cf_bm, lasting about 30 minutes) that helps tell real visitors from bots.
• The hub uses cookies and browser storage to keep you signed in and to remember layout settings, such as whether the side menu is open.
• Forms and checkout may run a spam and fraud check from Google reCAPTCHA, Cloudflare Turnstile or Stripe. These services can set their own cookies.

Linking your visits to your sign-up

HighLevel can store an identifier in your browser. It connects a form you submit, or a purchase you make, to your contact record and to the page you came from.

Measurement

• The member hub uses the platform's own analytics. These are Google Analytics and product analytics provided by our platform. They record page views and clicks in the member area to measure how the hub is used.
• Our emails contain a small image and tracked links. These tell us whether an email was opened and which links were clicked.

Fonts and video

• Some pages load fonts from Google Fonts.
• Lessons with YouTube videos load the YouTube player, which may set YouTube's own cookies.

Advertising

The 2027 Almanac pages at go.spiritscienceuniversity.org (the sales, checkout and thank-you pages and the free sample pages) run Meta's pixel. It records when you visit those pages, start checkout, buy the Almanac or ask for the free sample, and Meta stores its own cookies (such as _fbp) in your browser. We use it to measure our ads, and Meta uses it to show ads to people likely to be interested. The pixel does not run in browsers set to a European time zone or with Global Privacy Control turned on.

No other page of the site runs an advertising pixel. We do not use TikTok or Google Ads pixels, or session-recording tools such as Hotjar.

Your choices

You can block or delete cookies in your browser settings. If you block the cookies the site needs, sign-in and checkout may stop working. Turning off automatic image loading in your email app reduces open tracking. Turning on Global Privacy Control in your browser stops the Meta pixel, and your Facebook or Instagram ad settings control how Meta uses your activity.

12. Children

Spirit Science University is for adults. You must be 18 or older to create an account or buy anything. We do not knowingly collect personal information from anyone under 18.

If you believe a child has given us personal information, email ssu@spiritstudios.com and we will delete it.

13. Community posts and testimonials

What you post in community groups and channels is visible to other members of that group or channel, along with your profile name and photo. Members may read, reply to and remember what you post. Please share only what you are comfortable with other members seeing.

You can ask us to remove any of your posts, at any time and also when you close your account. Replies from other members that quote you may remain.

Testimonials are different. We share a testimonial outside the member area only if you gave permission on the testimonial form, and we credit you the way you asked. You can withdraw permission at any time by emailing ssu@spiritstudios.com. We will then remove the testimonial from our website, emails and other places we control within 30 days. We cannot recall copies that were already sent or printed.

14. Live calls and recordings

Live community calls and gatherings run on our video-call provider's service. They may be recorded, and recording is announced at the start of the call. If you join with your camera or microphone on, or type in the chat, your name, image, voice and messages may appear in the recording. Replays may be posted in the hub for members. You can keep your camera and microphone off and still take part by listening.

15. Links and other sites

The site links to other websites and services, including our separate online stores, YouTube and social media. Their own privacy policies apply once you leave our site. We are not responsible for how they handle your information.

16. Changes to this policy

We may update this policy. When we do, we will post the new version here and change the date at the top. If a change is significant, we will also email members before it takes effect.

17. Contact us

Questions, requests and complaints about privacy can go to:

Privacy Officer
Spirit Creations Ltd.
2nd Floor, 295 Broadway
Winnipeg, Manitoba R3C 0R9
Canada
Email: ssu@spiritstudios.com