PRIVACY POLICY
VERSION FRANÇAISE DISPONIBLE | Consulter la version française →
Last updated: June 15, 2026
GC Collective Inc. ("GC Collective," "we," "us," or "our") is a membership community for General Counsel and senior legal leaders. This Privacy Policy (this "Policy") describes how we collect, use, disclose, store, and protect personal information in connection with our website (the "Website"), membership platform, events, programming, and related services (collectively, the "Services").
This Privacy Policy is a notice provided for transparency about our personal information practices. It is not part of, and does not modify, the GC Collective Membership Agreement or the Website Terms of Use, which govern your contractual relationship with us. Where a practice requires your consent, we rely on the consent framework described in Section 4.
1. WHO THIS POLICY APPLIES TO AND THE LAWS THAT APPLY
GC Collective Inc. ("GC Collective," "we," "us," or "our") is incorporated and based in British Columbia, Canada. Our personal information practices are governed primarily by the Personal Information Protection and Electronic Documents Act (Canada) ("PIPEDA") and the Personal Information Protection Act (British Columbia) ("BC PIPA").
Many of our members reside outside British Columbia. If you are a resident of Quebec, Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25, may also apply to our collection, use, and disclosure of your personal information. Your additional rights under Law 25 are described in Section 9.
If you are a resident of the United States, your personal information is transferred to and processed in Canada and may also be processed in the United States and elsewhere by our service providers (see Section 8). Certain US state privacy laws may give you additional rights, which are described in Section 10.
2. WHAT IS PERSONAL INFORMATION
"Personal information" means information about an identifiable individual. This is the definition used under the Personal Information Protection and Electronic Documents Act (PIPEDA) and the British Columbia Personal Information Protection Act (BC PIPA), and it is the definition we use throughout this Privacy Policy.
Personal information does not include:
Business contact information (such as your name, title, business address, business telephone number, and business email address) when it is collected, used, or disclosed solely for the purpose of communicating with you in your professional capacity, to the extent that applicable law excludes such information from the definition of personal information.
Information that has been anonymized or aggregated so that it can no longer be used, alone or in combination with other information, to identify you. Anonymized and aggregated information is not personal information and may be used by GC Collective for any lawful purpose.
3. THE PERSONAL INFORMATION WE COLLECT
We collect personal information in the following ways.
3.1 Information You Give Us
Membership application and eligibility information: name, work email address, employer, job title and seniority, jurisdiction, and identity or role verification details.
Account and profile information.
Payment and billing information. We do not collect or store payment card numbers; payment card data is collected directly by our third-party payment processor, Stripe (see Section 7).
Event and Executive Circle participation information.
Form and survey responses. We may ask you to complete registration, intake, feedback, or other forms in connection with Events, workshops, and programming, and to respond to surveys. We collect the information you provide in those forms and surveys.
Photographs, video, and audio. At in-person and virtual Events, workshops, and other programming, we and those acting on our behalf may take photographs and make video and audio recordings that feature you, including your image, voice, likeness, and any statements you make. We may also capture screenshots and transcripts of virtual sessions.
Member Content and communications, including information you voluntarily provide when you post, ask questions, or respond to other members on our platform.
Information about other people, such as peer nominations or referrals.
3.2 Information from Other Sources
Individuals who nominate or refer you.
Our third-party membership platform provider (currently Mobilize/Forj) and other service providers.
Form and integration providers, some of which are third-party operated.
Identity-verification, anti-fraud, and security providers, and public professional sources.
3.3 Information Collected Automatically
When you use the Website or Services, we automatically collect IP address, approximate location, device and browser type, operating system, referring pages, pages viewed, features used, dates and times, and identifiers. We collect some of this information through cookies and similar technologies (see Section 6).
3.4 Sensitive Information
We do not routinely seek sensitive personal information. If we request it (for example, accessibility needs for an Event), we will identify the information as sensitive at the point of collection.
4. HOW WE RELY ON CONSENT
GC Collective collects, uses, and discloses your personal information with your knowledge and consent, except where applicable law permits or requires us to act without consent (for example, to comply with a subpoena, court order, or other legal obligation, or to investigate a breach of an agreement or contravention of law).
Consent may be express or implied. Express consent is given explicitly, whether orally, in writing, or through electronic means. Implied consent arises where the purpose of the collection, use, or disclosure is one that a reasonable person would consider obvious in the circumstances and you voluntarily provide the personal information for that purpose.
You may withdraw your consent at any time by contacting us as described in Section 12, subject to legal or contractual restrictions and on reasonable notice. Withdrawal of consent may limit or prevent us from providing some or all of the Services to you. Withdrawal of consent is not retroactive: it does not affect the lawfulness of processing carried out before the withdrawal took effect.
5. HOW WE USE PERSONAL INFORMATION
We use personal information for the following purposes:
To assess eligibility for membership and administer your membership.
To provide the Services, including the community, Events, Executive Circles, programming, resources, and benefits.
To process payments and manage billing.
To operate and secure the community, including through our third-party membership platform.
To communicate with you about your membership, Events, and the Services.
To facilitate connections and programming, including with Preferred Partners and sponsors (see Section 7).
To capture and use Event photographs, recordings, and content. We use photographs, video, audio, screenshots, and transcripts from Events and sessions for community, programming, promotional, marketing, and archival purposes, in any medium. If you do not want to be featured, you may notify us in advance of the applicable Event or session and follow any reasonable instructions we provide, as described in the Membership Agreement. We will use reasonable efforts to accommodate your request, but we cannot guarantee that your image or voice will not be incidentally captured in group settings.
To send marketing communications and to analyze and improve the Services.
To meet legal, regulatory, and risk-management obligations.
6. COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar technologies, including Google Analytics, to operate the Website to remember your preferences, and understand how the Website and Services are used so we can improve them. Google Analytics helps us analyze Website traffic and usage patterns.
We do not use cookies or similar technologies for advertising or to track you across third-party websites for advertising purposes.
7. HOW AND WITH WHOM WE SHARE PERSONAL INFORMATION
We may share your personal information in the following circumstances:
Service Providers and Processors. We share personal information with service providers that help us operate the Services, including our membership platform provider (currently Mobilize/Forj), hosting providers, payment processors, email and communications providers, CRM providers, analytics providers, identity-verification providers, and security providers. These providers are authorized to use your personal information only to provide services to us and are bound by contractual obligations requiring comparable protection of personal information.
Within the Community. Your profile information, posts, and comments are visible to GC Collective administrators, our platform provider, facilitators, and other members. We do not control how other members use information you share within the community. Executive Circle discussions are subject to the confidentiality obligations set out in the Membership Agreement, but we cannot guarantee that all participants will comply.
Preferred Partners and Sponsors. We may introduce, feature, or facilitate access to Preferred Partners and sponsors, and we may receive compensation in connection with those relationships. From time to time, we may share limited information such as member names and company names with Preferred Partners and sponsors so they can understand the composition of our community and identify any overlap with their own contacts. We do not share individual member contributions in attributed form, such as posts, comments, form responses, or survey answers, with Preferred Partners or sponsors; we may share only anonymized or aggregated information derived from them. We ask Preferred Partners and sponsors not to use the information we share with them to market to or solicit you based on your membership, unless you choose to connect with them. Any dealings between you and a Preferred Partner are solely between you and that partner.
Payments. Payments by card are managed entirely by our third-party payment processor, Stripe, and card information is not collected or stored by us. We do not store payment card numbers.
Legal, Safety, and Compliance. We may disclose personal information where required or permitted by law, regulation, legal process, or enforceable governmental request, or where necessary to protect the rights, safety, or property of GC Collective, our members, or others.
Business Transfers. In connection with a merger, acquisition, reorganization, sale of assets, or similar transaction, your personal information may be transferred to the successor entity.
Affiliates. We may share personal information with our affiliates where reasonably necessary to operate and improve the Services.
8. WHERE WE STORE AND PROCESS PERSONAL INFORMATION
GC Collective Inc. is based out of Canada, but we may process, store, and transfer personal information in Canada or elsewhere.
Our service providers, including our membership platform provider (currently Mobilize/Forj), our cloud storage provider (Google) and our payment processor, may store or process personal information in the United States and in other countries outside Canada. In addition, some of our contractors are located elsewhere in Canada (outside British Columbia) and outside Canada, and may access personal information from those locations in the course of providing services to us. When personal information is stored or processed in another jurisdiction, it may be accessible to the courts, law enforcement authorities, and regulatory bodies of that jurisdiction in accordance with applicable law.
For members in Canada, including Quebec: Your personal information may be transferred outside your province and outside Canada, including to the United States.
For members in the United States: Your personal information is transferred to and stored in Canada and is processed under Canadian law. It may also be processed in the United States and elsewhere by our service providers.
We use contractual and other appropriate safeguards to protect personal information in connection with cross-border transfers, including requiring service providers to maintain protections comparable to those described in this Privacy Policy.
9. YOUR RIGHTS AND CHOICES
Subject to applicable law, you have the following rights regarding your personal information:
Access your personal information and request a copy of it.
Correct or update inaccurate or incomplete personal information.
Request deletion of your personal information.
Withdraw your consent to processing, subject to legal or contractual restrictions and reasonable notice.
Opt out of marketing communications at any time by using the unsubscribe link in any marketing email or by contacting us as described in Section 12. This is separate from the notification emails you receive from our membership platform. You can manage those platform emails through your notification preferences on the membership platform. Unsubscribing from our marketing emails will not change your platform notification settings, and adjusting your platform notification settings will not unsubscribe you from our marketing emails.
Object to or restrict certain processing of your personal information, and request data portability, where applicable law provides these rights.
We will respond to requests within the timeframes required by applicable law (generally within 30 days under BC PIPA, subject to permitted extensions). We may verify your identity before processing a request. Where we cannot fully delete your personal information for technical, legal, or operational reasons, we will isolate and protect it from further active processing.
Additional Rights for Quebec Residents (Law 25)
If you reside in Quebec, you may also have the right to: (a) request de-indexing of personal information linked to your name; (b) be informed about the use of automated decision-making and object to decisions made solely by automated means; and (c) receive computerized personal information in a structured, commonly used technological format. To exercise any of these rights, contact us as described in Section 12.
10. YOUR US STATE PRIVACY RIGHTS
Depending on your state of residence, US state privacy laws (including those of California, Virginia, Colorado, Connecticut, Texas, and other states) may provide you with rights to know, access, correct, delete, and obtain a copy of your personal information, and to opt out of certain processing such as targeted advertising or the sale or sharing of personal information.
We do not sell your personal information, and we do not share it for cross-context behavioral or targeted advertising. We do not use cookies or other technologies for advertising purposes. Because we do not "sell" or "share" personal information as those terms are defined under California and other US state privacy laws, no "Do Not Sell or Share My Personal Information" opt-out is required.
To exercise any available US state privacy rights, contact us as described in Section 12. We will not discriminate against you for exercising these rights, and you may use an authorized agent where the law permits.
11. HOW WE PROTECT AND RETAIN PERSONAL INFORMATION
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction. These safeguards are proportionate to the sensitivity of the information. No method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
In the event of a data breach, we will comply with applicable notification obligations. Under PIPEDA, where a breach of security safeguards creates a real risk of significant harm to an individual, we will notify the Office of the Privacy Commissioner of Canada and affected individuals as required. Under Quebec Law 25, where a confidentiality incident presents a risk of serious injury, we will notify the Commission d'accès à l'information du Québec and affected individuals. We maintain records of all breaches and confidentiality incidents as required by law.
We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy and to provide the Services, and thereafter for as long as needed for legitimate business and legal purposes, including defending or enforcing claims, audit, dispute resolution, and compliance with legal obligations.When personal information is no longer required for any of these purposes, we securely dispose of it or anonymize it so that it can no longer be associated with you.
12. HOW TO CONTACT US AND OUR PRIVACY OFFICER
If you have questions about this Privacy Policy or our personal information practices, or if you wish to exercise any of the rights described in Sections 9 or 10, please contact us:
GC Collective Inc., Attention: Paula Pepin, CEO | Email: info@thegccollective.com | Address: 500 - 224 West Esplanade, North Vancouver, British Columbia V7M 1A4, Canada
If you are not satisfied with our response, you may file a complaint with the applicable privacy authority:
Office of the Privacy Commissioner of Canada (for complaints under PIPEDA): www.priv.gc.ca
Office of the Information and Privacy Commissioner for British Columbia (for complaints under BC PIPA): www.oipc.bc.ca
Commission d'accès à l'information du Québec (for Quebec residents with complaints under Law 25): www.cai.gouv.qc.ca
13. CHILDREN
The Services are intended for General Counsel and senior legal professionals. We do not direct the Services to children, and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will promptly delete that information or obtain the required parental or guardian consent.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable law. When we make changes, we will revise the "Last updated" date at the top of this Policy. Where we make material changes to how we handle your Personal Information, we will post the updated Policy on the Website and, where appropriate, provide additional notice (for example, by email or through the membership platform).
Because this Policy is a notice rather than a contract, an updated version applies from the date it is posted. We encourage you to review it periodically. Where a change materially affects how we handle your Personal Information and applicable law requires your consent, we will obtain that consent before the change applies to you.