(Last Updated March 18th, 2020)
For the purpose of the processing personal data, Lifestyle Goals may engage data processors and/or, at its sole discretion, hire other persons to perform certain functions on behalf of Lifestyle Goals In such cases, Lifestyle Goals shall take necessary measures to ensure that such data is processed by the personal data processors in accordance with instructions of Lifestyle Goals and applicable legislation. Lifestyle Goals shall also require the personal data processors to implement appropriate measures for the security of personal data. In such cases, Lifestyle Goals shall ensure that such persons will be subject to the non-disclosure obligation and will not be able to use this information for any other purpose, except to the extent necessary to perform the functions assigned to them.
Lifestyle Goals services is responsible for safeguarding your personal information (information you have voluntarily disclosed to us) and using this information only for the purpose for which it was collected for (as explained to you prior to collection and agreed by you).
The following is general information on Lifestyle Goals privacy practices. Please read our privacy statement and let us know if you have any questions.
This policy (together with our terms and conditions and any other documents referred to in it) sets out:
Personal information we collect about you PIPEDA
Types of data collected
How we collect your data
Payment processing and Payment Processor
Cookies and other technologies.
How we use your information.
Our promotional updates and communications.
Who we give your information too.
How we store your information.
Website Related Services subjects
Transfer to third parties
Enforcement, recourse and liability
How we protect your information
How long we keep your information.
Your rights as a data subject
European union GDPR compliance (data processing notice)
Complaints to a data protection authority
Changes to this policy.
Personal information we collect about you (PIPEDA)
According to the personal information protection and electronic documents act, 2000 (PIPEDA), “personal information” means information about an identifiable individual. The information you provide to Lifestyle Goals is considered personal information it is possible to relate it back to you through your name, address, e-mail address, telephone number and any other information that can identify you.
If information cannot be related to an identifiable individual it is considered anonymous information (such as laboratory results identified by alpha-numeric identifier instead of individual’s name). Whenever possible, Lifestyle Goals works with anonymous information. This privacy statement does not apply to anonymous information.
Types of data we collect from you
Personally Identifiable Information (PII). We acquire PII from you when you register for a membership account and subscribe for a Change Online Service, these PII may include, in certain contexts, your name, postal address, zip code, email address, and telephone number. We also acquire your IP address, User ID, and/or Device ID, which certain jurisdictions consider to be PII because it could be used to identify an individual or Device if it were combined with other identifying information.
Sensitive PII. In certain circumstances, such as when subscribing for our service, you may provide a credit, debit, or payment account number, or other payment information to our payment gateway provider (Stripe) which we recognise as more sensitive than other PII. We generally do not request on or through the Service other Data that is often considered “highly sensitive,” such as other financial account information (e.g., credit report information, bank account numbers), or government issued identification numbers (e.g., social security number, drivers’ license number, or passport number), although we reserve the right to do so when such Data is necessary to offer you certain services.
Anonymous Data. Some of the Data that we acquire cannot identify, distinguish or trace you or your Device, even if combined with other identifying information, and some Data that could be considered PII when combined with other identifying information is not used in a way that identifies, distinguishes or traces you or your Device, but is instead used in an anonymous way, often aggregated with other anonymous Data about other users.
How we collect your data
Data You Provide. We mostly receive PII because you provide it to us. For instance, when you enter a contest, complete a survey, register for our online training, and you may provide a credit, debit, or payment account number, or other payment information, as well as your name, telephone number(s), email and/or street address. Other Data such as your age, gender, an avatar, and preferences may also be requested. In addition, we may acquire your Data when you contact us by telephone, postal mail, social media interaction or messaging (e.g., email, SMS, MMS, or similar technologies). We also may acquire information that you provide about other people, for example, when you use our “refer-a-friend” email feature.
Payment Information: We collect certain payment and billing information when you purchase certain paid Services through our payment gateway partners (Stripe). You might also provide payment information, such as payment card details, which we collect via secure payment processing partners.
Data Automatically Collected. The Service may also automatically collect Data about you, your online behaviour and your Device. The Data collected may include, without limitation, the make, model, settings, specifications (e.g., CPU speed, connection speed, browser type, operating system, device identifier) and geographic location of you and/or your Device, as well as date/time stamp, IP address, pages visited, time of visits, Content viewed, ads viewed, the site(s), application(s), destination(s), and/or service(s) you arrived from, and other clickstream data. The Service may collect your Data even if the Service is not open on your Device or you’re not logged in.
Data Acquired Elsewhere. We may also acquire your PII or other Data offline or otherwise outside of the Service. For example, we may purchase or otherwise acquire such Data from third party data suppliers. We reserve the right to merge or co-mingle this other Data with your PII and Data collected on or through the Service.
Social Network Integration. If you choose to access, visit and/or use any third party social networking service(s) that may be integrated with the Service, we may receive your Data that has been made available to those services, including information about your contacts on those services. For example, some social networking services allow you to push Content from our Service to your contacts or to pull information about your contacts so you can connect with them on or through our Service. Some social networking services also will facilitate your registration for our Service or enhance or personalise your experience on our Service. Your decision to use a social networking service in connection with our Service is voluntary. However, you should make sure you are comfortable with your Data the third party social networking services may make available us by visiting those services’ privacy policies and/or modifying your privacy settings directly with those services. We reserve the right to use, transfer, assign, sell, share, and provide access to all of your Data that we receive through third-party social networking services in the same ways as all of your Data we receive through our Service (as described below).
Be Careful Publicly Posting PII. Please be aware that Content and PII that you disclose in publicly accessible portions of the Service may be available to other users, and may also be made available outside the Service by third parties, so you should be mindful of all PII, especially sensitive PII, that you may wish to post.
Cookies and other technologies
Most browsers automatically accept cookies and similar technologies, but if you prefer, you can change your browser to prevent that and your help screen will tell you how to do this. We also give you information about disabling cookies. However, you may not be able to take full advantage of our web site if you do so.
A number of cookies and similar technologies we use last only for the duration of your web or app session and expire when you close your browser or exit the app. Others are used to remember you when you return to the platform and will last for longer.
We use these cookies and other technologies on the basis that they are necessary for the performance of a contract with you, or because using them is in our legitimate interests (where we have considered that these are not overridden by your rights), and, in some cases, where required by law, where you have consented to their use.
Payment processing and Payment Processor
Note your payment card details are not shared with Change Online by the provider
Lifestyle Goals also uses persistent cookies for a number of legitimate interests, such as to be able to track the number of unique visitors to the site. Additionally, persistent cookies enable Lifestyle Goals to tailor content and related subject matter to match your preferred interests and/or for the purposes of not showing you the same content and related subject matter repeatedly.
We may also employ cookies to compile anonymous, aggregated statistics that allow us to understand how users use our site and to help us improve the structure of our web site. We cannot identify you personally in this way.
Types of cookies we use on our web site
Strictly needed cookies. These cookies are necessary for the Web site to work correctly. They will allow you to move around our web site and use its capabilities. These files do not identify you as a person. If you do not agree to use this type of file this may affect the proper work of the web site or its components.
Cookies related to performance, efficiency, and analytics. These files help us understand how you interact with our web site by providing information about the areas visited and the amount of time spent on the web site, as well as showing problems in the operation of the Internet resource, for example, error messages. This will help us to improve the work of the web site.
Cookies related to analytics. These files help us to measure the effectiveness of advertising campaigns and optimise the content of web sites for those who are interested in our advertising. This type of cookies shall not be used for your identification. All information that is collected and analysed is anonymous.
Advertising cookies. These cookies record information about your online activities, including visits to our web site, as well as information about the links and advertising that you have chosen to view. Lifestyle Goals uses such files to collect data about your activity on the Internet and determine your interests, which allows Lifestyle Goals to provide advertising that suits your interests and on which you have given your consent.
The web site capture limited data (user-agent, HTTP referrer, last URL requested by the user, client-side and server-side clickstream) about visits to the Web site. Lifestyle Goals may use this data to analyse patterns and to perform system maintenance. You have several options how to manage cookies on your device. All browsers allow you to block or delete cookies from your device. You may consult the privacy features in your browser to understand what you should do if you need to manage cookies.
How we use your information
Processing Your Requests for our online training or service. We use your Data to process your request for the services you registered. For example, if you subscribe to any of our membership program we may use your e-mail address to send you a confirmation notice.
Administering the Service. We also use your Data for any lawful business purpose in connection with administering the Service, including without limitation for customer service, to help diagnose problems with servers, to improve Products that we offer by tailoring them to your needs, to gather broad demographic information, to analyse trends, to seek compatible advertisers, sponsors, clients and customers, and to track users’ movements around the Service and elsewhere on the web or across apps and/ devices. Your geographic location Data may specifically be used to show you Content (including advertising and sponsored messaging) based on geographic location.
Access by Third Party Providers. We may also allow access to your Data by Third Party Providers that provide us with services, such as technical maintenance, market research, community and forums management, auction services, e-commerce, personal/job search and other advertising functionality, but only for the purpose of and to the extent necessary to provide those services. And if you choose to purchase or subscribe to any Product(s), we may forward your Data to Third Party Providers for services such as credit/debit card or other payment processing, order fulfilment, credit preauthorisation, and address verification. There are also times when you provide Data to us in areas of the Service that may be managed or participated in by one or more Third Party Providers. In such cases, the Data may be used by us and by such Third Party Provider(s), each pursuant to its own policies. While we may seek to require Third Party Providers to follow appropriate privacy policies and will not authorise them to use your Data except for the express purpose for which it is provided, we do not bear any responsibility for any actions or policies of third parties.
Marketing Communications. We may also use your Data to communicate with you about new features, events or Products offered by us, Third Party Providers, our advertisers, and other companies and individuals with which we have a relationship.
Transfer or Sale of Our Business. As our business changes, we may buy or sell various assets owned or controlled by us. In the event all or a portion of the assets are sold, assigned, transferred or acquired by another company due to merger, divestiture, restructuring, reorganisation, dissolution, financing, acquisition, bankruptcy or otherwise, your Data may be among the transferred assets.
Combining Your Anonymous Data with PII. We reserve the right to merge or co-mingle anonymous, non-personally identifiable Data about you, your offline and online behaviour, and/or your Device (including its geographic location), with your PII for any lawful business purpose.
Please keep in mind that Lifestyle Goals does not trade or sell your personal information.
We May Share your information with
Any member of our group, which means our subsidiaries, our partners, our ultimate holding company and its subsidiaries, who support our processing of personal data under this policy. If any of these parties are using your information for direct marketing purposes, we will only transfer the information to them for that purpose with your prior consent.
Selected third parties.
Our selected third parties may include:
If Lifestyle Goals or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of supply terms and other agreements with you; or to protect the rights, property, or safety of Lifestyle Goals, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction and to prevent cybercrime.
California / Delaware Do Not Track Disclosures
Various third parties are developing or have developed signals or other mechanisms for the expression of consumer choice regarding the collection of information about an individual consumer’s online activities over time and across third-party web sites or online services (e.g., browser do not track signals). Currently, Lifestyle Goals do not monitor or take any action with respect to these signals or other mechanisms.
Where we store your information
Lifestyle Goals has a data privacy officer who is responsible for ensuring that your personal information is collected, used, disclosed (shared) and retained in compliance with applicable privacy regulations.
However, the data that we collect from you may be transferred to, and stored at, a destination outside the European economic area ("EEA") that may not be subject to equivalent data protection law.
In order to store it
In order to enable us to provide products or services to you and fulfil our contract with you. This includes Web Related Services fulfilment, processing of, and the provision of support services.
How we store and secure information we collect
Information storage and security
We use industry standard technical and organisational measures to secure the information we store.
While we implement safeguards designed to protect your information, no security system is impenetrable and due to the inherent nature of the internet, we cannot guarantee that data, during transmission through the internet or while stored on our systems or otherwise in our care, is absolutely safe from intrusion by others.
If you use our server or data centre services, responsibility for securing storage and access to the information you put into the services rests with you and not Lifestyle Goals. We strongly recommend that server or data centre users configure SSL to prevent interception of data transmitted over networks and to restrict access to the databases and other storage points used.
How long we keep information
How long we keep information we collect about you depends on the type of information, as described in further detail below. After such time, we will either delete or anonymise your information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store your information and isolate it from any further use until deletion is possible.
Marketing information: if you have elected to receive marketing emails from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our services, such as when you last opened an email from us or ceased using your Lifestyle Goals materials. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created.
How to access and control your information
You have certain choices available to you when it comes to your information. Below is a summary of those choices, how to exercise them and any limitations.
Consent to provide personal information
We inform you when we need to collect your personal information and why we are collecting it.
Lifestyle Goals only collects information from you after you give us your consent. The only exception is when the law requires the collection, use or disclosure of a person’s information without consent.
Providing us with personal information is entirely voluntary. By giving us your personal information, you consent to allow us to use and disclose your personal information as described to you. If you do not agree with the use and disclosure of your information, please do not provide us with your personal information.
Some of our services can only be offered if you provide personal information so, if you choose not to provide your information, we may not be able to provide you with those services.
You may withdraw consent at any time. You will be informed of the effect that withdrawing your consent will have.
Your withdrawal of consent will only apply from the point that you withdrew consent. Your withdrawal of consent is not retroactive.
This means we will not remove information that has already been disclosed.
Transfer to third parties
To facilitate the purposes of Web related Service, personal data may be shared in the normal course and scope of business with third parties to whom Lifestyle Goals has chosen to outsource work. In the event that personal data is transferred to a third party, Lifestyle Goals requires in its agreements with third parties that adequate privacy precautions are taken that provide the same level of privacy protection as is required by the principles of the privacy shield. In certain circumstances, Lifestyle Goals may remain responsible and liable under privacy shield principles if such third parties process the personal data in a manner inconsistent with the privacy shield principles
Your rights as a data subject
In some jurisdictions (for example, the member states of the European Union) you may be entitled to certain rights in and to your personal data, subject to certain conditions and exceptions contained in applicable law. These rights may include the following:
Request us to confirm whether your personal data is processed by us, and if we do, to obtain access to your personal data and certain information about it.
Require the correction of your personal data if it is inaccurate or incomplete.
Direct us to stop processing your personal data under certain circumstances.
Erase or delete your personal data, for example, where the data is no longer needed to achieve the purpose for which it was collected.
Restrict the further processing of personal data
Request us not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (we currently do not engage in such processing and will notify you prior to doing so).
Request to receive your personal data for transmission to, or to directly transmit to, another data controller in a structured, commonly-used and machine-readable format.
To protect your privacy and the security of your personal data, we will take reasonable steps to verify your identity before complying with such rights requests.
Legal bases for processing (for EEA users):
If you are an individual in the European economic area (EEA), we collect and process information about you only where we have legal bases for doing so under applicable EU laws. The legal bases depend on the services you use and how you use them. This means we collect and use your information only where:
We need it to provide you the services, including to operate the services, provide customer support and personalised features and to protect the safety and security of the services;
It satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote the services and to protect our legal rights and interests;
You give us consent to do so for a specific purpose; or
We need to process your data to comply with a legal obligation.
If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place. Where we are using your information because we or a third party (e.g. Your employer) have a legitimate interest to do so, you have the right to object to that use though, in some cases, and this may mean no longer using the services
Our COPPA policy towards children
The services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. complies with both the Children’s Online Privacy Protection Act of 1998 (COPPA) and, with regard to EU data subjects, with GDPR. While children under the age of eighteen (16) may use the Site only with the consent of his or her parent or legal guardian, please be advised that this Site is not directed or otherwise promoted for use by children under the age of sixteen (16).
How we protect your information
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using TLS 1.3 (a strong protocol), x25519 (a strong key exchange), and aes_128_gcm (a strong cipher). Where we have given you (or where you have chosen) a password which enables you to access certain parts of our platforms, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our platforms; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Our site may, from time to time, contain links to external sites. We are not responsible for the privacy policies or the content of such sites.
Your California Privacy Rights (CCPA)
We may elect to share information about you with third parties for those third parties’ direct marketing purposes. California Civil Code § 1798.83 permits California residents who have supplied personal information (as defined in the law) to us to, under certain circumstances, request and obtain certain information regarding our disclosure, if any, of personal information to third parties for their direct marketing purposes.
If this law applies to you, you may obtain the categories of personal information shared by us and the names and addresses of all third parties that received personal information for their direct marketing purposes from us during the immediately prior calendar year (e.g., requests made in 2016 will receive information about 2015 sharing activities).
To make such a request, please provide sufficient information for us to determine if this applies to you, attest to the fact that you are a California resident and provide a current California address for our response. To make such a request (limit one request per year), please send an email to: , with “California Privacy Rights” as the subject line
Your right to withdraw consent
Where the processing of your personal information by us is based on consent, you have the right to withdraw that consent without detriment at any time by contacting us . You can also change your marketing preferences at any time as described in 'our promotional updates and communications' section.
You can also exercise the rights listed above at any time by contacting us at .
If your request or concern is not satisfactorily resolved by us, you may contact our data protection officer, his email is
He can provide further information about your rights and our obligations in relation to your personal data, as well as deal with any complaints that you have about our processing of your personal data.
Data Privacy Regulatory Frameworks and Requirements
GDPR Data Privacy User Rights
If you are an EU resident and Lifestyle Goals is processing, and/or transmitting your personal data, then you - as an “EU data subject” – benefit from the following rights and privileges under the General Data Protection Regulation (GDPR):
Right of Access: you have the right to obtain from us, as controllers, confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the following personal data and information:
the purposes of the processing;
the categories of personal data concerned; i.e name, email, phone number etc
the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations’;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request from us rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing; (f) the right to lodge a complaint with a supervisory authority (for a list of supervisory authorities, see https://edpb.europa.eu/about-edpb/board/members_en);
where the personal data are not collected from you, any available information as to their source;
The existence of automated decision-making, including profiling, along the lines indicated by Article 22(1) and (4) GDPR, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
Right to Rectification: you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerned, provided during registration by him or her. Taking into account the purposes of the processing, the user have the right to have request his incomplete personal data be completed, including by means of providing a supplementary statement.
Right to Erasure (“Right to be Forgotten): you have the right to obtain from us the erasure of your personal data without undue delay, and we have the obligation to erase personal data without undue delay when: a) your data are no longer necessary for the purposes for which they were collected; b) you had consented to the processing; c) you have objected to the processing, as per below; d) your persona data had been unlawfully collected; e) your personal data need to be erased as a matter of compliance with a legal obligation.
Right to Restriction of Processing: you have the right to obtain from us the restriction of processing if you: a) contest the accuracy of the personal data, until this is verified; b) the processing is unlawful but you don’t want erasure; c) we no longer need the personal data, but you require them to establish, exercise to defend a legal claim; d) you have objected to processing but there is a need to verify whether our legitimate grounds override your rights to object.
Right to Data Portability: where your personal data have been provided on the basis of your consent or for the performance of a contract, and their processing occurs in an automated way, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit those data– or have directly transmitted - to another controller.
Right to Object: you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data based on a legitimate ground point (e) or (f) of Article 6(1), including profiling based on those provisions. In this case, we can no longer process your personal data unless we show that there is a compelling legitimate ground for the processing which override your interests, rights and freedoms or for our establishment, exercise or defence of legal claims.
Data portability is the ability to obtain some of your information in a format you can move from one service provider to another (for instance, when you transfer your mobile phone number to another carrier). Depending on the context, this applies to some of your information, but not to all of your information. Should you request it, we will provide you with an electronic file of your basic account information and the information you create on the spaces you under your sole control, like your personal bitbucket repository
Notice for California consumers – your privacy rights under the (CCPA)
Under California’s “shine the light” law, California residents have the right to request in writing from businesses with whom they have an established business relationship
A list of the categories of personal information, such as name, address, e-mail address, and the type of services provided to that customer, that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes, and
The names and addresses of all such third parties. To request the above information, please e-mail us at
We will respond to such written requests within 30 days following receipt at the mailing address above. We reserve the right not to respond to requests submitted other than to the address specified above or otherwise exempted by law. Please note that we are required only to respond to each user once per calendar year.
Complaint to a data protection authority
You have the right to submit a complaint concerning our data processing activities to our data protection officer
If you have any queries regarding our data collection and protection practices or your rights, please do not hesitate to contact our data protection officer, at