The Investing Mindset — Financial Alchemy

Privacy Policy

Effective date: August 8, 2026

Last updated: August 8, 2026

This Privacy Policy explains how Oshosky Canadian Holding Corp. (operating as The Investing Mindset) ("we," "us," or "our"), which operates the website www.theinvestingmindset.com and the associated newsletter, tools, and educational products under the brands The Investing Mindset and Financial Alchemy (collectively, the "Services"), collects, uses, discloses, and protects your personal information.

We are committed to handling your information transparently and in accordance with applicable privacy and anti-spam laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), Quebec's Law 25, the European Union and United Kingdom General Data Protection Regulation (GDPR / UK GDPR), and the U.S. CAN-SPAM Act.

1. Who we are

Oshosky Canadian Holding Corp. (operating as The Investing Mindset) is the organization responsible for the personal information collected through the Services and acts as the "data controller" (GDPR) and organization "in control of" personal information (PIPEDA / Law 25).

• Legal entity: Oshosky Canadian Holding Corp., incorporated in Alberta, Canada, operating as The Investing Mindset
• Mailing address: 10060 Jasper Avenue, Tower 1, Suite 2020 (Rice Howard Place), Edmonton, AB T5J 3R8, Canada
• Phone: +1 825-509-1901
• Privacy contact: info@theinvestingmindset.com
• Privacy Officer: Akinniyi Osho

2. Information we collect

We collect only the information we need to operate the Services and to deliver the education, tools, and communications you request.

a) Information you provide directly

• Contact & subscription details — name and email address when you subscribe to the newsletter, download a lead magnet, or complete a diagnostic or worksheet.
• Diagnostic & assessment responses — answers you submit to tools such as the Ownership Score or Wealth Purpose worksheet.
• Purchase & account details — information you provide when you buy a course, blueprint, or other product (see Section 7).
• Communications — the content of emails, replies, or messages you send us.

b) Information collected automatically

• Usage & device data — IP address, browser type, device type, pages viewed, referring URL, and interaction data, collected via cookies and similar technologies (see Section 5).
• Email engagement — whether emails are opened and which links are clicked, where your email provider permits it.

c) Information from third parties

• Analytics, email, and payment providers that process data on our behalf and return aggregated or account-level information to us (see Section 8).

3. How and why we use your information

We do not sell your personal information, and we do not use automated decision-making that produces legal or similarly significant effects about you.

4. Legal bases for processing (EEA/UK residents)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Consent — for sending marketing emails and for non-essential cookies. You may withdraw consent at any time.
• Contract — to deliver products or Services you have purchased or requested.
• Legitimate interests — to secure, maintain, and improve the Services, provided these interests are not overridden by your rights.
• Legal obligation — to comply with applicable laws (for example, tax and accounting rules).

5. Cookies and analytics

We use cookies and similar technologies to operate the site, remember preferences, and understand how the site is used. We use Google Analytics to collect aggregated statistics about site traffic and usage.

• Strictly necessary cookies keep the site functioning and cannot be switched off.
• Analytics cookies (e.g., Google Analytics) help us understand site performance. Where required by law (EEA/UK and Quebec), these are set only with your consent.

You can manage or refuse non-essential cookies through our cookie banner (where shown) and through your browser settings. You can opt out of Google Analytics using Google's browser opt-out add-on. For more on Google's practices, see the Google Privacy Policy. We honor recognized browser-based opt-out signals, including Global Privacy Control (GPC), where legally required.

6. Email and newsletter communications

We use AWeber to manage our email list and send communications. AWeber processes subscriber data (such as your name, email address, and engagement activity) on our behalf.

Consent (CASL & GDPR)

We send marketing emails only to people who have given consent — for example, by subscribing or requesting a resource. In line with CASL, we keep records of consent and identify ourselves in every message.

Unsubscribing (CAN-SPAM & CASL)

Every marketing email includes a clear unsubscribe link and our valid physical mailing address. When you unsubscribe, we stop sending marketing emails promptly (and within 10 business days, as CAN-SPAM requires). We do not use false or misleading sender information or subject lines. You may also contact us at info@theinvestingmindset.com to be removed.

7. Payments and course purchases

When you purchase a product, payment and account processing is handled by our third-party providers — Stripe and PayPal (payment processing) and LearnDash (our course platform), along with other platforms we may use in the future. These providers collect the information needed to complete your transaction (such as name, email, billing details, and payment card data).

We do not store full payment card numbers on our systems; card data is handled directly by the payment processor under their security standards (PCI-DSS). We receive limited confirmation and account details necessary to fulfil your order and provide support. Please review the privacy policies of these providers for details on their handling of your data.

8. How we share your information

We share personal information only as needed to run the Services:

• Service providers / processors — email (AWeber), analytics (Google), payments and course delivery (Stripe, PayPal, LearnDash, and other platforms we may use in the future), and website hosting. They may use your data only to provide services to us.
• Legal & safety — where required by law, legal process, or to protect rights, safety, and the integrity of the Services.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell or rent your personal information, and we do not share it for third-party advertising.

9. International data transfers

We operate from Canada, and our service providers may process data in Canada, the United States, the European Union, and elsewhere. When personal information is transferred across borders, we take steps to ensure it receives appropriate protection, including using providers that offer recognized safeguards (such as GDPR Standard Contractual Clauses where applicable). By using the Services, you understand your information may be processed outside your country of residence.

10. Data retention

We keep personal information only as long as necessary for the purposes described in this Policy, to maintain our relationship with you, and to meet legal, tax, and accounting requirements. Newsletter data is retained while you remain subscribed and for a reasonable period afterward; where required by law, we retain consent records (for example, Quebec Law 25 expects consent records to be kept). When information is no longer needed, we securely delete or anonymize it.

11. How we protect your information

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information — including encryption in transit (HTTPS), access controls, and reputable service providers. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the relevant authorities of a breach where the law requires.

12. Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion / erasure — ask us to delete your information, subject to legal exceptions.
• Withdraw consent — unsubscribe or withdraw consent for processing at any time.
• Portability — request your information in a structured, commonly used format.
• Object / restrict — object to or restrict certain processing.

To exercise any right, email info@theinvestingmindset.com. We will respond within the timeframes required by applicable law and may need to verify your identity first. You will not be discriminated against for exercising your rights.

13. Additional information for Canada & Quebec residents

We handle personal information in accordance with PIPEDA and, for Quebec residents, Law 25. In addition to the rights above, Quebec residents may request information about how their data is collected and used, may ask that we cease disseminating their information, and benefit from a right to data portability. Our Privacy Officer (named in Section 1) is responsible for our compliance.

If you have a concern we cannot resolve, you may contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information du Québec.

14. Additional information for EEA & UK residents

If you are in the European Economic Area or the United Kingdom, you have the rights described in Section 12 under the GDPR / UK GDPR. You also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office). Where our processing relies on consent, you may withdraw it at any time without affecting prior processing.

15. Children's privacy

The Services are intended for adults and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

16. Third-party links

Our Services may link to third-party sites and platforms (such as Substack, LinkedIn, or our course platform). We are not responsible for their privacy practices, and we encourage you to review their policies.

17. Changes to this Policy

We may update this Policy to reflect changes in our practices or the law. We will post the revised version here with an updated "Last updated" date, and for material changes we will provide additional notice where required. Your continued use of the Services after an update means you accept the revised Policy.