Skip to content
Apply

Privacy Policy


Last updated: [DATE OF PUBLICATION] (draft of 23 October 2026)

Stream & Rise is a coaching programme run by two independent professionals, Camille Jamet in France and Byron Baron in Canada. This policy explains what personal information we collect through streamandrise.com and during the programme, why, how long we keep it, who we share it with, and the rights you have. If anything is unclear, write to hello@streamandrise.com.

1. Who is responsible for your information

  • Camille Jamet, self-employed professional, [ADDRESS], France, is the data controller for applicants and clients in France and the rest of the European Union.
  • Byron Baron, operating as BtheMusic!, [ADDRESS], Westmount (Montreal), Quebec, Canada, is responsible for applicants and clients outside the European Union. He is also the person in charge of the protection of personal information under Quebec law (Law 25).

Byron runs the website and its hosting. When he handles information about people in the European Union, he does so on Camille’s behalf and under a written data processing agreement between the two of them. [LEGAL REVIEW: the agreement must be signed before the first client (Partnership Agreement, Art. 10).]

Both providers need your application to decide whether the programme fits, so both of them see it. They use it only for the programme.

For any question or request: hello@streamandrise.com. The message reaches both providers.

2. What we collect

Information you give us

  • Application form: your name, email, artist or project name, a link to your music or main profile, country, preferred session language, your current website, YouTube, Instagram and TikTok audience ranges, how often you release and post, your main obstacle, the stage you think you are at, an optional free-text answer, your budget readiness, and your consent choices.
  • Free audit form: your first name, email and marketing consent.
  • Quick-question form: your name, email, your message and your consent.
  • During the programme: what you tell us in emails, on the 15-minute call and in the sessions, the data you choose to show us (streaming statistics, website or channel figures), and your invoicing details.

Information collected automatically

  • Form context: the page language, the result of the stage quiz if you used it, and campaign tags (utm_source, utm_medium, utm_campaign) if the link you followed contained them.
  • Technical data: IP address, browser type and request logs kept by our host for security and to keep the site running.
  • Cookies: see our Cookie Policy. Only strictly necessary cookies load before you consent.

We do not ask for sensitive information (health, political opinions and so on), and ask you not to send it. The site is not meant for people under 16.

3. Why we use it, and on what legal basis

We ask for your consent when you send a form, and tell you at that moment what the information is for.

Purpose Legal basis (GDPR)
Read your application, decide whether the programme fits, reply to you and arrange the call Steps taken at your request before entering a contract (Art. 6(1)(b))
Deliver the sessions and the deliverables of your tier, and invoice them Performance of the contract (Art. 6(1)(b)); legal obligations for accounting (Art. 6(1)(c))
Send the free audit and occasional practical emails Your consent (Art. 6(1)(a)), which you can withdraw at any time
Answer a quick question Steps taken at your request (Art. 6(1)(b))
Publish a testimonial or a result Your written consent (Art. 6(1)(a)), see section 7
Keep the site secure, prevent spam, and keep a record of any dispute Our legitimate interest in a secure site and in being able to defend our rights (Art. 6(1)(f))

In Canada, we rely on the consent you give when you send a form, for the purposes stated at that time (PIPEDA and the Quebec Act respecting the protection of personal information in the private sector). Marketing emails are sent only with your express consent, as Canada’s Anti-Spam Legislation (CASL) requires.

4. How long we keep it

We keep personal information for no more than 3 years, except where the law requires us to keep records longer:

  • Applications that do not lead to a booking: 12 months after our last exchange, then deleted. [CONFIRM]
  • Clients: 3 years after our last exchange. Invoices and accounting records are kept for as long as tax and accounting law requires in each provider’s country (in general, 10 years in France and 6 years in Quebec). [LEGAL REVIEW]
  • Email list: until you unsubscribe, or 3 years after your last interaction with our emails.
  • Quick questions: 12 months after our answer. [CONFIRM]
  • Records of a dispute: for the time needed to settle it, and at most 3 years after the end of the partnership between the two providers.

5. Who we share it with

We never sell your information. We share it only with:

  • The other provider, as described in section 1.
  • Hostinger, which hosts the site and its database. Some of its infrastructure is in the United States, so data may pass through servers there (see section 6). [VERIFY: data-centre location.]
  • SureForms and SureMail, WordPress plugins that run on our own hosting. Form entries are stored in our WordPress database; emails are sent through the mail provider for hello@streamandrise.com: [CONFIRM: provider name and country].
  • Calendly, only if we send you a booking link and you use it. Calendly’s own privacy policy then applies.
  • YouTube (Google), only if you click to play the intro video. We use YouTube’s privacy-enhanced mode; nothing loads from YouTube before you click.
  • Authorities, when the law requires it.

6. Transfers outside the European Union and outside Quebec

Your information moves between France and Canada, because one provider works in each country, and it may also pass through the United States, because some of our host’s infrastructure is located there.

  • From the EU to Canada: the European Commission recognises Canada as offering an adequate level of protection for organisations subject to PIPEDA. [VERIFY: current status of the adequacy decision.]
  • From the EU to the United States: where the recipient is certified under the EU–US Data Privacy Framework, the transfer relies on the European Commission’s adequacy decision of 10 July 2023. Otherwise it relies on the European Commission’s standard contractual clauses included in Hostinger’s data processing agreement. [VERIFY: Hostinger’s data processing agreement and the certification of its US providers.]
  • From Quebec: before personal information leaves Quebec, including for the United States, Byron assesses the protection it will receive there, as Quebec law requires. [LEGAL REVIEW: Law 25 transfer assessment.]

[LEGAL REVIEW: Partnership Agreement Art. 10 accepts Canadian hosting only if data does not pass through US servers; since it does, the partners need to amend Art. 10 or move to EU-only hosting.]

7. Testimonials and results

We publish a testimonial, your name or your results only with your prior written consent, addressed to both providers. Each provider keeps a copy of it. You can withdraw your consent at any time for future publications.

8. Your rights

Depending on where you live, you have the right to:

  • access the information we hold about you and receive a copy;
  • have it corrected if it is wrong or incomplete;
  • have it deleted, or have its dissemination stopped or a link de-indexed where Quebec law allows;
  • receive it in a structured, commonly used format (portability);
  • object to, or ask us to limit, some uses;
  • withdraw your consent at any time, without affecting what was done before. Every marketing email has an unsubscribe link.

To use any of these rights, write to hello@streamandrise.com. We answer within 30 days. We may ask you to confirm your identity first.

You can also complain to a supervisory authority:

9. If the programme ends

If the two providers stop running Stream & Rise together, each one keeps the information of the clients they worked with, and the contacts that came through the programme are shared between them. Each one then remains responsible for that information under this policy until it is deleted. The website is taken down or transferred within 30 days. [LEGAL REVIEW: whether people must be told individually who now holds their information.]

10. Security and confidentiality incidents

The site runs over HTTPS, admin access is limited to the two providers and protected by strong passwords and two-factor authentication [CONFIRM], and WordPress and its plugins are kept up to date. If a confidentiality incident creates a risk of serious injury (Quebec) or a risk to your rights and freedoms (GDPR), we record it, notify the competent authority (the CNIL within 72 hours where the GDPR requires it, and/or the Commission d’accès à l’information), and tell you without undue delay.

11. Changes

If we change this policy, we update the date at the top. If the change is significant, we tell the people on our list by email.

12. Contact

hello@streamandrise.com