Skip to content
Privacy and cookie transparency

Privacy Policy

This Privacy Policy explains how Northlight Learning School Ltd collects, uses, shares, and protects personal information when you visit our website, browse courses, or contact our admissions team.

Last Updated
February 21, 2026
Effective Date
February 21, 2026
Who we are

Northlight Learning School Ltd
100 Queen St W, Suite 200, Toronto, ON M5H 2N2, Canada
Phone: +1 416 728 5936
Email: [email protected]

We provide educational content only. We do not provide financial, career, or professional guarantees. Guest experts participate as invited specialists.

1) Cookie categories 🍪

We use cookies and similar technologies to keep the site working, measure performance, and (only with your consent) support advertising and remarketing. Cookies are divided into exactly three categories:

Essential (always on)

Essential cookies

Purpose: core site functionality, security, and session management.

Examples: session_id, csrf_token, cookie_consent_status.

Consent required: No. These are activated automatically.

Retention: session duration or up to 12 months for preference storage.

Optional

Analytics cookies

Purpose: measuring traffic, user behavior, and site performance.

Tools: Google Analytics 4.

Examples: _ga, _ga_XXXXXXX, _gid, _gat.

Consent required: Yes. Activated only after you accept.

Retention: up to 14 months.

Optional

Marketing / advertising cookies

Purpose: remarketing, personalized ad delivery, and conversion tracking.

Consent required: Yes. Activated only after you accept.

Retention: up to 540 days (Google Ads default).

Cookie controls

You can open the consent panel from the site footer at any time.

2) Marketing cookies disclosures 📣

The following disclosures describe how advertising cookies and related tracking technologies may work on our site when you provide consent.

Required statements

Third-party ad serving

Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet.

Advertising partners

We may work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms.

Remarketing

We may use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit.

YouTube and Display Network

Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network.

Tracking technologies we may use

We use the following tracking technologies on this website:

  • Cookies (first-party and third-party)
  • Tracking pixels (Google Ads tag / gtag.js, Meta Pixel)
  • Device identifiers (browser fingerprint, IP address)
  • Conversion event tags

Advertising measurement and tech list

We use conversion tracking to understand which advertisements lead to actions on our website such as form submissions, calls, or purchases. This allows us to measure campaign effectiveness and allocate budget appropriately. Conversion data may be shared with Google Ads and Meta.

Advertising and analytics technologies active on this site
  • Google Ads (gtag.js / Google Tag Manager)
  • Google Analytics 4
  • Google Remarketing Tag
  • Meta Pixel (Facebook / Instagram)

Opt-out information

You may opt out of personalized advertising at any time:

  • Google Ads Settings: https://adssettings.google.com
  • Your Online Choices (EU): https://www.youronlinechoices.eu
  • Network Advertising Initiative: https://optout.networkadvertising.org
  • Digital Advertising Alliance: https://optout.aboutads.info

Opting out does not remove ads entirely; you will continue to see non-personalized advertisements.

Cookie preference management: use the clearly visible link labeled Manage cookie preferences in the footer (or the button above) to open the panel where you can accept or reject each category independently.

3) Consent requirements ✅

We use a cookie consent banner and a preference panel to ensure analytics and marketing cookies are not activated until you choose to allow them.

How the consent banner works

The banner offers three options: Accept All, Reject Non-Essential, and Manage Preferences.

Analytics or marketing cookies will not load until you accept them. Your choice is stored in localStorage for 12 months. You can reject non-essential cookies and still use the site normally.

Rejecting non-essential cookies means only essential cookies are active, and the optional tracking scripts are not enabled.

Consent statement

By clicking 'Accept All Cookies', you consent to the storing of cookies on your device for analytics and advertising purposes, including personalized advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.

Withdrawal of consent

You may withdraw consent at any time by clicking 'Manage cookie preferences' in the website footer, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid.

EEA / UK notice

Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.

If you are located in Canada, we still provide these controls as a best-practice approach to transparency and user choice.

Data protection context in Canada

We operate in Canada and aim to follow applicable Canadian privacy requirements. We encourage users to review this policy and contact us with questions about data use, retention, or deletion.

4) Data Sharing with Advertising Partners 🤝

When you consent to marketing and advertising cookies, certain data may be shared with advertising partners to deliver campaigns and measure performance.

We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:

Google LLC

cookie identifiers, conversion events, anonymized behavioral data, remarketing lists. Governed by Google's Privacy Policy: https://policies.google.com/privacy

Meta Platforms, Inc.

pixel events, conversion data, custom audiences. Governed by Meta's Data Policy: https://www.facebook.com/privacy/policy

We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only, not resold to unaffiliated third parties.

Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.

5) Lead Forms and Contact Requests 📝

When you submit a contact form, request a quote, or register interest in our services, we collect the information you provide. This typically includes: full name, email address, phone number, and your message.

Legal basis: consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b).

Retention: form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law.

You may request deletion of your data at any time by contacting us at the email address in this policy.

A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy.

What we do with inquiries

We use inquiry details to respond to your request, provide course information, and support enrollment decisions.

We do not ask for sensitive personal information through standard inquiry forms.

Contact

For privacy questions, email [email protected] or call +1 416 728 5936.

6) Google Services and Advertising 🔎

This website uses the following Google services:

Google Analytics 4

collects anonymized usage data, device info, and behavioral signals. IP anonymization is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

Google Ads Conversion Tracking

records when a user completes a defined action (form submission, call, purchase) after clicking one of our ads. This data is used solely for measuring ad campaign performance.

Google Remarketing

allows us to show ads to previous visitors across Google's network. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).

Google Tag Manager

deploys tracking tags on our behalf. No personal data is collected by GTM itself; it acts as a container for the tags listed above.

Google's advertising products are governed by: https://policies.google.com/technologies/ads

7) Meta Advertising Services 📊

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record:

  • Page views and time on site
  • Specific conversion events (form submissions, purchases)
  • Custom audience membership for retargeting purposes

We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.

Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy

To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/

Your choice controls activation

The Meta Pixel is only activated when you choose marketing/advertising cookies in the consent panel.

How to change your choice

Use “Manage cookie preferences” in the footer to open the consent panel and switch marketing cookies off.

8) Prohibited content self-declaration 🚫

This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full.

9) Landing page integrity statement 🧭

The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.

10) Children's privacy 👶

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at the address in this policy if you believe we have received data from a minor.

11) International data transfers 🌍

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly.

If you are located in Canada, please note that cross-border processing may still occur because major analytics and advertising providers operate infrastructure in multiple countries.

12) User rights (GDPR Articles 15-22) 🧾

If you are located in the EEA or UK, you have the following rights:

  • Access (Art. 15): request a copy of data we hold about you
  • Rectification (Art. 16): correct inaccurate or incomplete data
  • Erasure (Art. 17): request deletion ('right to be forgotten')
  • Restriction (Art. 18): limit how we process your data
  • Portability (Art. 20): receive your data in a structured, machine-readable format
  • Objection (Art. 21): object to processing based on legitimate interest
  • Withdraw consent (Art. 7.3): revoke consent at any time without penalty

To exercise any right, email us at the contact address provided in this policy. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:

  • EU users: https://edpb.europa.eu
  • UK users: https://ico.org.uk

Canadian users

We operate in Canada. If you want to access, correct, or delete information you submitted to us, please email [email protected].

We may need to verify your identity before fulfilling certain requests to protect your privacy and prevent unauthorized access.

Response timeline

We aim to respond within 30 days for most requests, depending on complexity and verification requirements.

13) What data we collect 📦

Full name
Email address
Phone number
IP address
Browser type and version
Device type and operating system
Cookies and tracking identifiers
Usage data (pages visited, time on site, click paths)
Form submission content
Conversion events (form submits, calls, purchases)

We avoid collecting sensitive information through general contact flows. If you include sensitive information in a message, we will treat it as confidential and limit access as needed for support.

14) Legal basis for processing (GDPR Art. 6) ⚖️

Contact form data

consent (Art. 6.1.a) and contract performance (Art. 6.1.b)

Analytics data

consent (Art. 6.1.a)

Marketing / remarketing data

consent (Art. 6.1.a)

Security and fraud prevention

legitimate interest (Art. 6.1.f)

Note for Canadian operations

We operate in Canada. Where GDPR does not apply, we still use consent choices for analytics and advertising cookies, and we process inquiry data to respond to your requests and manage the learner relationship.

15) Retention periods 🗂️

  • Contact form submissions: 2 years
  • Analytics data (GA4): 14 months
  • Marketing cookies (Google Ads): up to 540 days
  • Email communications: duration of relationship plus 1 year
  • Server logs: 90 days
  • Cookie consent records: 3 years (audit requirement)

If we need to keep data longer (for example, to comply with legal obligations or handle disputes), we will limit access and retain only what is necessary.

Security and access controls

We apply access limitations and operational safeguards appropriate for an education business. Essential cookies help prevent abuse and preserve your preference settings.

16) Policy metadata and changes 🧩

This section contains required metadata and how we communicate changes to this Privacy Policy.

Last Updated
February 21, 2026
Effective Date
February 21, 2026

Changes are notified via a homepage banner minimum 14 days before taking effect.

If you continue using the site after the effective date, you acknowledge the updated policy. You can always manage cookie preferences via the footer link.

Questions about privacy?

Contact us to ask about data access, deletion, or cookie settings. We will respond using the contact details below.

Contact admissions

This Privacy Policy is intentionally written with detailed sections for cookie categories, ad technologies, retention, and user controls to support a clear, transparent learning website experience.