Agile Lounge® believes that electronic privacy is crucial for the ongoing success of the Internet as a service, commercial, and entertainment medium. We know you’re concerned about protecting your privacy online.

Agile Lounge® and all other brands of AFJ Inc. are committed to your privacy as a whole as well. At Agile Lounge®, we treat your personal information with the highest standards of safety, security, and confidentiality.

At Agile Lounge® we respect your privacy and we wish the best experience for our clients, visitors and subscribers. Please read our Customer Privacy Policy for a clear explanation of how we collect, use, disclose, transfer, and store your information.

Agile Lounge® and all AFJ brands and services, never shares your information with anyone under any circumstances. Never!

1. WHO WE ARE

Business Name: Agile Lounge®, a division of AFJ Solutions Inc.
Address: 360 St-Jacques Street West, Montreal, QC H2Y 1P5, Canada
Main Websites and Brands: https://agile-lounge.com, https://jolyaf.com, https://askadrienne.ai

Contact Email
Data Protection Officer

This Privacy Policy applies to all personal information we collect through our websites, services, events, training programs, email communications, and any other interactions with Agile Lounge and other brands of AFJ Inc.

2. INFORMATION WE COLLECT

We don’t collect personal information without your knowledge. We are transparent about what information we gather and why.

2.1 Information You Provide Directly

When you interact with our services, you may provide:

Account Information:

• Name and contact details (email, phone number, mailing address)
• Username and password
• Company name and job title
• Professional background and interests

Purchase Information:

• Billing address
• Payment method details (processed securely by third parties)
• Order history and preferences

Communication Information:

• Email correspondence
• Support requests and feedback
• Survey responses
• Event registration details

Professional Services Information:

• Project requirements and specifications
• Business needs and objectives
• Consultation notes and deliverables
• Training progress and certifications

Content You Submit:

• Comments, reviews, and testimonials
• Forum posts and community contributions
• User-generated content (photos, videos, documents)
• Social media interactions using our hashtags

2.2 Information Collected Automatically

Technical Information:

• IP address and device identifiers
• Browser type and version
• Operating system
• Referring and exit pages
• Date and time stamps
• Pages viewed and links clicked

Usage Information:

• How you interact with our websites and services
• Features and content you access
• Search queries
• Time spent on pages
• Navigation patterns

Location Information:

• General geographic location based on IP address
• Precise location (only with your explicit consent)

2.3 Information from Third Parties

Social Media Platforms:

• Profile information when you connect social media accounts
• Content you share using our hashtags (#agilelounge, #talentagile, #scrumbeerMTL, #DareRealAgile)
• Publicly available social media posts

Business Partners:

• Event co-organizers and sponsors
• Payment processors (Eventbrite, PayPal, Wave)
• Marketing and analytics providers

Publicly Available Sources:

• Professional networking sites (LinkedIn)
• Business directories
• Public records

2.4 Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. See Section 8 for detailed information about cookies.

3. HOW WE USE YOUR INFORMATION

We use your personal information for legitimate business purposes:

3.1 To Provide Services

• Process your orders and deliver products/services
• Manage your account and authenticate your identity
• Provide customer support and respond to inquiries
• Deliver training, workshops, and professional services
• Send transactional emails (confirmations, receipts, updates)
• Process payments securely through third-party providers

3.2 To Improve Our Services

• Analyze website traffic and user behavior
• Conduct research and development
• Test new features and services
• Monitor and improve service quality
• Optimize website performance and user experience
• Track and prevent technical issues

3.3 To Communicate With You

• Send newsletters and marketing communications (with your consent)
• Notify you about events, workshops, and new offerings
• Share updates about our services
• Request feedback and reviews
• Provide important service announcements

3.4 For Marketing and Advertising

• Display personalized content and recommendations
• Deliver targeted advertising (with appropriate consent)
• Measure advertising effectiveness
• Conduct market research
• Promote our services and events

3.5 For AI Services (askadrienne.ai)

• Provide AI-powered responses and recommendations
• Improve AI model performance and accuracy
• Train and refine AI algorithms (you may opt-out)
• Analyze usage patterns for service enhancement
• Ensure AI system security and reliability

3.6 For Legal and Security Purposes

• Comply with legal obligations and court orders
• Enforce our Terms of Service
• Protect against fraud, abuse, and security threats
• Defend our legal rights
• Conduct audits and investigations
• Ensure platform safety and integrity

4. LEGAL BASIS FOR PROCESSING (GDPR/Quebec Law 25)

We process your personal information based on the following legal grounds:

Consent: When you provide explicit consent for specific purposes (e.g., marketing emails, cookies, AI training data)

Contract Performance: When processing is necessary to fulfill our contractual obligations to you (e.g., delivering services you purchased)

Legitimate Interests: When we have legitimate business interests that do not override your rights (e.g., improving services, preventing fraud, internal administration)

Legal Obligation: When required by law (e.g., tax compliance, responding to legal requests)

You have the right to withdraw consent at any time where we rely on consent as the legal basis.

5. HOW WE SHARE YOUR INFORMATION

Agile Lounge® and AFJ  never shares, sells, or rents your personal information to third parties for their marketing purposes. Never!

We only share your information in the following limited circumstances:

5.1 Service Providers

We work with trusted third-party service providers who process information on our behalf:

Payment Processors:

• Eventbrite (event tickets and registration)
• PayPal (payment processing)
• Wave (invoicing and payments for professional services)

Technology Services:

• Web hosting providers
• Email service providers
• Cloud storage services
• Analytics platforms (Google Analytics)
• Customer relationship management systems

Business Services:

• Marketing and advertising platforms
• Event management services
• Professional consultants (legal, accounting)

These service providers are contractually obligated to protect your information and use it only for authorized purposes.

5.2 Business Transfers

If Agile Lounge or AFJ Solutions Inc. is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change.

5.3 Legal Requirements

We may disclose information when required by law or in response to:

• Court orders or subpoenas
• Legal processes and government requests
• Law enforcement investigations
• Protection of our legal rights
• Prevention of fraud or illegal activity
• Protection of safety and security

5.4 With Your Consent

We may share information with other parties when you explicitly consent to such sharing.

6. INTERNATIONAL DATA TRANSFERS

6.1 Transfer Notice

Agile Lounge operates from Canada. Your personal information may be transferred to, stored, and processed in Canada, the United States, or other countries where we or our service providers operate.

For European Users: We ensure appropriate safeguards are in place for transfers outside the European Economic Area, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Your explicit consent when required

For Quebec Users: We comply with Quebec Law 25 requirements for international transfers, including:

• Assessment of privacy protection in destination countries
• Appropriate contractual safeguards
• Transparency about transfer destinations

6.2 Countries of Processing

Your information may be processed in:

• Canada (primary location)
• United States (cloud services, analytics)
• European Union (where applicable service providers operate)
  
  

7. DATA RETENTION

We retain your personal information only as long as necessary for the purposes described in this Privacy Policy or as required by law.

7.1 Retention Periods

Account Information: Retained while your account is active, plus 2 years after closure (unless longer retention required by law)

Purchase Records: Retained for 7 years for tax and accounting purposes

Marketing Communications: Retained until you unsubscribe, then archived for compliance purposes

Support Communications: Retained for 3 years after resolution

Website Analytics: Aggregated data retained indefinitely; identifiable data retained for 26 months (Google Analytics default)

Legal Hold: Information subject to legal obligations, disputes, or investigations retained until resolved

7.2 Deletion

When retention periods expire, we securely delete or anonymize your information. You may request earlier deletion subject to our legal obligations (see Section 10).

8. COOKIES AND TRACKING TECHNOLOGIES

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our websites. We use cookies to enhance your experience, analyze usage, and deliver personalized content.

8.2 Types of Cookies We Use

Essential Cookies (Always Active):

• Required for website functionality
• Enable account login and security features
• Remember your preferences and shopping cart
• Cannot be disabled without affecting website functionality

Analytics Cookies (With Consent):

• Google Analytics for website traffic analysis
• Understand how visitors use our websites
• Identify popular content and navigation patterns
• Measure advertising effectiveness

Marketing Cookies (With Consent):

• Deliver personalized advertising
• Track advertising campaign performance
• Social media integration features
• Remember your marketing preferences

Functional Cookies (With Consent):

• Remember language preferences
• Customize user experience
• Enable enhanced features
• Store non-essential preferences

8.3 Third-Party Cookies

We use third-party services that may set their own cookies:

• Calendy Booking Experience
• Google Analytics (analytics and advertising)
• Social media platforms (sharing and integration)
• Advertising networks
• Payment processors

These third parties have their own privacy policies governing their cookies.

8.4 Managing Cookies

Cookie Consent: We will ask for your consent before placing non-essential cookies (as required by GDPR, Quebec Law 25, and other privacy laws).

Browser Controls: You can control cookies through your browser settings:

• Block all cookies
• Block third-party cookies
• Delete existing cookies
• Receive notifications when cookies are set

Note: Blocking essential cookies may affect website functionality.

Opt-Out Links:

• Google Analytics: https://tools.google.com/dlpage/gaoptout
• NAI Opt-Out: http://optout.networkadvertising.org/
• DAA Opt-Out: http://optout.aboutads.info/

8.5 Do Not Track

We honor browser “Do Not Track” signals where technically feasible. However, some third-party services may not respond to these signals.

9. SECURITY MEASURES

We implement industry-standard security measures to protect your personal information:

9.1 Technical Safeguards

• Encryption of data in transit (SSL/TLS)
• Secure data storage with access controls
• Regular security audits and vulnerability assessments
• Firewall protection and intrusion detection
• Secure authentication and password protection
• Regular software updates and patches

9.2 Organizational Safeguards

• Limited access to personal information (need-to-know basis)
• Employee training on privacy and security
• Confidentiality agreements with service providers
• Incident response and breach notification procedures
• Regular privacy impact assessments
• Data protection by design and default

9.3 Payment Security

We do not store or have access to your complete credit card information.

Payments are processed securely through:

• Eventbrite: PCI DSS compliant payment processing
• PayPal: Industry-leading payment security
• Wave: Secure payment gateway for professional services

These processors handle credit card information according to Payment Card Industry (PCI) standards.

9.4 Your Responsibility

• Keep your password confidential
• Use strong, unique passwords
• Log out after using shared devices
• Enable two-factor authentication where available
• Report suspicious activity immediately

9.5 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify you within 72 hours (as required by GDPR and Law 25)
• Inform relevant authorities
• Provide details about the breach and mitigation steps
• Assist you in protecting your information
  
  

10. YOUR PRIVACY RIGHTS

You have important rights regarding your personal information. We make it easy for you to exercise these rights.

10.1 Rights for All Users

Right to Access: Request a copy of your personal information we hold

Right to Correction: Request correction of inaccurate or incomplete information

Right to Deletion: Request deletion of your personal information (subject to legal obligations)

Right to Opt-Out: Unsubscribe from marketing communications at any time

Right to Withdraw Consent: Withdraw previously given consent

Right to Complain: File a complaint with supervisory authorities

10.2 Additional Rights (GDPR – European Users)

Right to Restriction: Request limitation of processing in certain circumstances

Right to Data Portability: Receive your information in a structured, machine-readable format

Right to Object: Object to processing based on legitimate interests or for direct marketing

Automated Decision-Making: Right not to be subject to solely automated decisions with legal effects

10.3 Additional Rights (CCPA/CPRA – California Users)

Right to Know: Detailed information about data collection and use

Right to Delete: Request deletion with certain exceptions

Right to Opt-Out: Opt-out of “sale” or “sharing” of personal information

Right to Limit: Limit use of sensitive personal information

Right to Non-Discrimination: Not receive discriminatory treatment for exercising rights

Note: Agile Lounge does not “sell” personal information as defined by CCPA/CPRA.

10.4 Additional Rights (Quebec Law 25 – Quebec Users)

Right to Portability: Receive information in a structured, commonly used format

Right to De-Indexation: Request de-indexation of personal information in certain circumstances

Right to Information: Receive clear information about data processing and AI use

Rights Regarding AI: Be informed when decisions are made solely by automated processing

10.5 How to Exercise Your Rights

Email our Privacy Contact Legal Counsel

Online Form

By Mail: Agile Lounge – Privacy Rights Request
AFJ Solutions Inc.
360 St-Jacques Street West
Montreal, QC H2Y 1P5, Canada

Response Time: We will respond to your request within:

• 30 days (GDPR)
• 45 days (CCPA/CPRA, extendable to 90 days)
• 30 days (Quebec Law 25)

Verification: We may need to verify your identity before processing requests to protect your privacy.

11. CHILDREN’S PRIVACY

11.1 Age Restrictions

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.

• Under 13: Cannot provide personal information or create accounts
• 13-17: May use services with parental consent
• 18+: May create accounts and make purchases

11.2 Parental Rights

If you believe we have collected information from a child under 13, please contact us immediately. We will:

• Delete the information promptly
• Terminate any associated account
• Prevent further data collection

Parents or guardians may request access to, correction of, or deletion of their child’s information.

12. MARKETING COMMUNICATIONS

12.1 Email Marketing

We send marketing emails only with your consent. Our emails include:

• Newsletters and updates
• Event announcements
• Training opportunities
• Special offers and promotions
• Content and resources

12.2 Unsubscribe Options

Easy Opt-Out: Every marketing email includes an unsubscribe link in the footer

Preferences: Manage your communication preferences in your account settings

Complete Opt-Out: Contact us to opt-out of all marketing communications

Processing: Opt-out requests processed within 10 business days

12.3 Transactional Emails

You will continue to receive essential transactional emails even if you opt-out of marketing:

• Order confirmations and receipts
• Account security notifications
• Service updates and announcements
• Customer support responses
• Legal notices
  
  

13. SOCIAL MEDIA AND USER CONTENT

13.1 Social Media Integration

Our websites may include social media features (share buttons, plugins). These features may collect information about your visit and are governed by the privacy policies of the respective platforms, not ours:

• Facebook: https://www.facebook.com/privacy
• Twitter/X: https://twitter.com/privacy
• Instagram: https://help.instagram.com/privacy
• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• YouTube: https://policies.google.com/privacy

13.2 Hashtag Content

When you use our hashtags (#agilelounge, #talentagile, #scrumbeerMTL, #DareRealAgile) on public social media, you grant us permission to feature your content in our marketing materials. See our Terms of Service for details.

13.3 User-Generated Content

Content you submit to our platforms (comments, reviews, forum posts) may be publicly visible. Do not include personal information you wish to keep private.

14. ARTIFICIAL INTELLIGENCE AND AUTOMATED PROCESSING

14.1 AI Services (askadrienne.ai) – Coming Soon 2026!

How We Use AI:

• Provide intelligent responses and recommendations
• Personalize your experience
• Improve service quality
• Analyze usage patterns

Your AI Data Rights:

• Transparency: We inform you when AI is used
• Opt-Out: You can opt-out of AI training data use
• Human Review: Request human review of AI decisions that significantly affect you
• Explanation: Request explanation of AI-driven recommendations

AI Training Data:

• Your interactions may be used to train and improve AI models
• Training data is anonymized where possible
• You may opt-out by contacting us
• Opt-out does not affect service quality

14.2 Automated Decision-Making

We do not make decisions solely based on automated processing that produce legal effects or similarly significantly affect you, except:

• Fraud prevention and security measures
• Service personalization (which you can opt-out of)

You have the right to:

• Be informed about automated decision-making
• Request human intervention
• Express your point of view
• Contest the decision
  
  

15. CALIFORNIA PRIVACY RIGHTS

15.1 California Consumer Privacy Act (CCPA/CPRA)

California residents have specific rights under CCPA as amended by CPRA:

Categories of Personal Information We Collect:

• Identifiers (name, email, IP address)
• Commercial information (purchase history)
• Internet activity (browsing behavior)
• Professional information (job title, company)
• Inferences (preferences, interests)
  
  

Business Purposes: As described in Section 3

Third Parties: As described in Section 5

Sale of Personal Information: We do NOT sell personal information

Sharing for Cross-Context Behavioral Advertising: We may share information for targeted advertising (you can opt-out)

15.2 “Shine the Light” Law

California residents may request information about disclosure of personal information to third parties for their direct marketing purposes (once per year, free of charge).

15.3 Exercising California Rights

Contact us using the methods in Section 10.5. We do not discriminate against users who exercise their CCPA rights.

16. EUROPEAN PRIVACY RIGHTS (GDPR)

16.1 GDPR Compliance

For users in the European Economic Area, United Kingdom, and Switzerland, we comply with the General Data Protection Regulation (GDPR).

Data Controller: AFJ Solutions Inc.

Legal Basis: As described in Section 4

Your Rights: As described in Section 10.2

Supervisory Authority: You may lodge a complaint with your local data protection authority

EU Representative: [None as of 2026 as it is not required for our business volume]

16.2 Data Protection Impact Assessments

We conduct regular privacy impact assessments for high-risk processing activities, particularly for AI services and extensive profiling.

17. UPDATES TO THIS PRIVACY POLICY

17.1 Policy Changes

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• New legal requirements
• Service enhancements
• User feedback

Effective Date: Changes take effect on the “Last Updated” date shown at the top

Material Changes: We will notify you of material changes through:

• Email notification
• Professional Services Account notifications
  
  

Your Acceptance: Continued use of our services after changes constitutes acceptance of the updated Privacy Policy

17.2 Policy Archive

We do not maintain archived versions of our Privacy Policy, as we are up to date and in compliance with actual Policies.

18. THIRD-PARTY SERVICES

18.1 External Links

Our websites may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

18.2 Third-Party Analytics

Google Analytics: We use Google Analytics to understand website usage. Google Analytics collects information anonymously and reports website trends. You can opt-out using the Google Analytics Opt-out Browser Add-on.

Google Analytics Privacy Policy: https://policies.google.com/privacy

19. CONTACT INFORMATION

19.1 Privacy Questions and Requests

Email

Mail:
Agile Lounge – Privacy Officer
AFJ Solutions Inc.
360 St-Jacques Street West
Montreal, QC H2Y 1P5
Canada

19.2 Supervisory Authorities

Quebec (Commission d’accès à l’information du Québec):
Website: https://www.cai.gouv.qc.ca
Email: [email protected]

Canada (Office of the Privacy Commissioner):
Website: https://www.priv.gc.ca
Toll-free: 1-800-282-1376

European Union: Contact your local data protection authority

California: California Attorney General’s Office
Website: https://oag.ca.gov/privacy

20. SPECIFIC DISCLOSURES

20.1 Quebec Law 25 Disclosures

Incident Response: We have implemented incident response procedures in compliance with Law 25, including breach notification within 72 hours of discovery.

Privacy Governance: We have designated privacy officers responsible for compliance with Law 25.

Consent Management: We obtain and document consent in accordance with Law 25 requirements, including for AI services and automated decision-making.

Data Minimization: We collect only personal information necessary for identified purposes.

20.2 Google Analytics Specific Disclosure

We use Google Analytics with IP anonymization enabled. Google Analytics cookies expire after 26 months. For more information about how Google uses data: https://policies.google.com/technologies/partner-sites

ACKNOWLEDGMENT

Thank you for trusting Agile Lounge® and all AFJ Services and Solutions with your personal information. We are committed to protecting your privacy and providing transparent, respectful data practices.

Remember: Agile Lounge® and all AFJ compagnies and services never shares your information with anyone under any circumstances for marketing purposes. Never!

If you have any questions or concerns about this Privacy Policy, please don’t hesitate to contact us.

Version française: Pour la version française, SVP utiliser le traducteur inclus dans votre fureteur ou communiquer avec l’administration de AFJ Solutions ICI

Document Information:
Policy Version: 3.1
Last Updated: January 18, 2025
Next Review Date: January 15, 2026
Governing Law: Quebec and Canadian law, with provisions for GDPR and CCPA compliance.