Privacy Policy

Effective date: May 2, 2026 · Last reviewed: May 2026 · This policy is reviewed annually.

1. Who We Are

VMA Wellness Consulting INC ("VMA Wellness", "we", "us", or "our") is a corporate wellbeing company incorporated in Canada. We operate in Canada and Latin America, including Colombia, Mexico, Panama, Costa Rica and Puerto Rico.

Our website is vmaworld.com.

Privacy contact: privacy@vmaworld.com

We collect personal information that you provide to us voluntarily, including when you fill out a contact form, book a diagnostic call, download a program guide, join a waitlist, or engage with our programs. This may include:

• Your name, email address, company name and job title

• Any message or information you choose to share with us

When you visit our website, we may automatically collect technical information such as your IP address, browser type, device type, pages visited and time spent on the site. This information is collected through cookies and third-party analytics tools.

If you participate in a VMA program, we may collect additional information relevant to the delivery of that program, including assessment responses and feedback.

VMA Wellness does not collect personal information from individuals under 18 years of age. If we become aware that we have inadvertently collected data from a minor, we will delete it immediately.

We use your personal information to:

• Respond to your inquiries and deliver our services

• Send you program information and updates you have explicitly consented to receive

• Process payments and fulfill service agreements

• Improve our website and programs

• Comply with legal and regulatory requirements

We will only send you marketing or nurturing communications if you have provided explicit consent at the time of data collection, through a clearly labeled, non-pre-checked checkbox.

We collect and process your personal information based on:

• Consent: You have explicitly agreed to the processing of your data, including receiving communications from VMA Wellness, through a consent checkbox at the time of submission.

• Contractual necessity: Processing is necessary to deliver the services you have engaged us for.

• Legal obligation: Processing is required to comply with applicable law.

You may withdraw your consent at any time by contacting us at privacy@vmaworld.com or by using the unsubscribe link in any of our communications.

Our website uses cookies to improve your browsing experience and analyze site traffic. When you first visit our site, you will be presented with a cookie consent banner where you can choose to accept or decline non-essential cookies.

• Essential cookies: Required for the website to function. Cannot be disabled.

• Analytics cookies: Help us understand how visitors interact with our site. Only activated with your consent.

We do not use cookies for advertising purposes. You can also control cookie settings through your browser preferences at any time.

To operate our website and deliver our services, we use the following third-party platforms. Each has its own privacy policy governing their use of your data.

We require all third-party providers to protect your information in accordance with applicable privacy legislation. HubSpot stores contact information and interaction history on our behalf. You may request deletion of your HubSpot contact record by writing to privacy@vmaworld.com.

The Human Advantage Score™ (HA Score™) is a diagnostic tool currently in development. When it becomes available, any information you provide through the HA Score™ will be used solely to generate your personalized results and improve the tool.

We will not share your individual HA Score™ results with your employer or any third party without your explicit written consent.

VMA Wellness operates in Canada and Latin America. Your personal information may be transferred between these jurisdictions in the course of delivering our services. When transferring personal data of Canadian residents internationally, we ensure that an equivalent level of protection applies to your data, consistent with the requirements of PIPEDA.

For transfers involving data of individuals located in Colombia or Mexico, we apply the protections required under the applicable local legislation described in Section 10.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

• Active clients: Retained for the duration of the commercial relationship plus 5 years.

• Prospects who did not become clients: Retained for up to 2 years from last contact.

• HI Score™ participants: Retained for up to 3 years, unless deletion is requested earlier.

• General inquiries: Retained for up to 3 years.

When personal information is no longer required, we securely delete or anonymize it.

Depending on your location, you have the right to:

• Access the personal information we hold about you

• Request correction of inaccurate information

• Request deletion of your personal information

• Withdraw consent to processing where consent is the legal basis

• Lodge a complaint with a data protection authority

To exercise any of these rights, contact us at privacy@vmaworld.com. We will respond within 30 calendar days. In complex cases, we may extend this period by an additional 30 days and will notify you of the extension in advance.

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, use or disclosure. These include encryption, access controls and secure data storage practices.

In the event of a data breach that poses a real risk of significant harm to individuals, we will notify the applicable privacy authority and affected individuals as required by law, without undue delay.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Canada — PIPEDA: This policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. For questions or complaints, you may also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Colombia — Ley 1581 de 2012: For individuals located in Colombia, VMA Wellness complies with the Ley Estatutaria 1581 de 2012 (Habeas Data). Our data treatment policy is registered with the Superintendencia de Industria y Comercio (SIC). You may exercise your rights as a data subject by writing to privacy@vmaworld.com.

Mexico — LFPDPPP: For individuals in Mexico, we comply with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares.

Costa Rica and Panama: We apply privacy principles consistent with the applicable national legislation of each country.

We may update this policy periodically to reflect changes in our practices or applicable law. When we do, we will revise the effective date at the top of this page. We encourage you to review this policy regularly. For material changes, we will make reasonable efforts to notify you directly.

For any questions, concerns or requests related to this Privacy Policy:

VMA Wellness Consulting INC

Email: privacy@vmaworld.com

Website: www.vmaworld.com

Canada and Latin America