Privacy Notice

This Privacy Notice explains how LaFleur Leadership Institute ("we," "us," "our") collects, uses, shares, and protects personal data when you use Forward (the "Service"). We act as the data controller for the personal data described below. Contact us at support@forwardgoals.livewith any privacy questions.

1. Data we collect

• Account data — name, email, login credentials, profile preferences.
• Content you create — goals, roadmaps, habits, check-ins, reflections, voice transcripts, and chats with your AI coach.
• Usage and telemetry — pages visited, features used, performance and error logs, approximate device and browser information.
• Communications — support messages and feedback you send us.
• Device identifiers and IP address — collected automatically for security, fraud prevention, and analytics.
• Payment-related data — collected and processed directly by our Merchant of Record (see Section 4). We do not store full card numbers.

2. How we use your data

• Create and operate your account.
• Provide the Service, including AI coaching, roadmaps, reminders, and analytics shown to you.
• Improve product quality, debug issues, and develop new features.
• Prevent fraud, abuse, and security incidents.
• Provide customer support and respond to your requests.
• Send transactional messages (account, billing, security). With your consent where required, send product updates and marketing.
• Comply with legal obligations.

3. Legal bases (where GDPR/UK GDPR applies)

• Performance of a contract — to deliver the Service you signed up for.
• Legitimate interests — to secure, improve, and grow the Service, where not overridden by your rights.
• Consent — for optional marketing communications and non-essential cookies.
• Legal obligation — to meet tax, accounting, and other legal requirements.

4. Who we share data with

• Service providers / subprocessors — hosting, database, analytics, error monitoring, email delivery, and AI model providers that process data on our behalf under contract.
• Merchant of Record (Paddle) — Paddle.com Market Limited acts as the reseller and Merchant of Record for all purchases and handles payment processing, subscription management, invoicing, taxes, and refunds. See Paddle's Privacy Notice.
• Professional advisers — legal, accounting, and audit advisers under confidentiality.
• Authorities — where required by law, regulation, or valid legal process, or to protect rights and safety.
• Successors — in connection with a merger, acquisition, financing, or asset sale, subject to equivalent protections.

We do not sell your personal data.

5. International transfers

Your data may be processed in countries outside the UK / EEA, including the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or adequacy decisions.

6. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service. After deletion or termination, we may retain limited data to meet legal, tax, accounting, dispute-resolution, and security obligations, after which we delete or anonymize it.

7. Your rights

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (subject to legal retention requirements).
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local data-protection supervisory authority.

To exercise these rights, email support@forwardgoals.live. We will respond within the timeframes required by applicable law (typically within one month under GDPR/UK GDPR).

8. Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, isolated production environments, and security monitoring. No system is fully secure; please notify us promptly if you suspect a security incident affecting your account.

9. Cookies and similar technologies

We use a small number of essential cookies for authentication and security, and may use analytics cookies to understand how the Service is used. Where required by law, we ask for your consent before setting non-essential cookies. You can manage cookies through your browser settings.

10. Children

The Service is not directed to children under the age required to provide consent in their jurisdiction (e.g., 16 in the EU/UK, 13 in the US), and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this notice

We may update this Privacy Notice from time to time. We will post the new effective date above and, for material changes, notify you through the Service or by email.

12. Contact

LaFleur Leadership Institute — support@forwardgoals.live