Effective and last updated: August 29, 2026
The Human Toolbox is Craig Soles, a sole proprietor based in Vancouver, British Columbia, Canada, operating thehumantoolbox.com ("The Human Toolbox," "we," "us," or "our"). This policy explains what information we collect through this site and our related tools, why we collect it, how it's stored, and how you can control or delete it.
This policy covers thehumantoolbox.com and the tools it links to or runs on our behalf: the contact/opt-in form, the free-consult booking flow, the secure document-sharing links we sometimes send clients, and the checkout flow for anything purchased through this domain (including Founding Coach and shop purchases). Our separate product, DragnPost (dragnpost.co), is built and operated by the same business but has its own, more detailed privacy policy at dragnpost.co/privacy.html, since it collects meaningfully different data (uploaded video, connected social accounts). If anything below and DragnPost's own policy ever appear to conflict for something that happened on dragnpost.co, DragnPost's own policy governs.
When you fill out the "Get in touch" form on this site, we collect your first name and email address, store them, and send you one automated confirmation email with a link to book a free 15-minute call. Booking itself happens through Calendly (calendly.com), a separate service with its own privacy policy; we receive the appointment details Calendly shares with us (your name, email, and the time you booked) but do not control how Calendly itself handles your data before that point.
If you buy something through this site (a Founding Coach reservation, a shop item, or a DragnPost subscription checkout hosted on this domain), Stripe (our payment processor) collects and stores your billing details directly. We retain your Stripe customer ID and order/subscription status, but we never see or store your full card number ourselves.
When we send you a one-time secure link to view a document (for example a report or a form), opening that link records the time, your IP address, and your browser's user-agent string, purely to log that the document was actually viewed and to enforce the link's view limit and expiry. We do not use this information for anything beyond that access log.
The consent/waiver PDF linked from our booking pages is a standalone downloadable file. Downloading it does not send us any information; any personal information you write on that form when you sign it in person is handled directly with Craig as part of your in-person session, not collected through this website.
We do not use anything you send us to train AI models, and we do not use it for advertising or marketing to anyone else.
We use Google's Gmail API, through a real, Human Toolbox-owned OAuth connection to thehumantoolbox2026@gmail.com, as one of the ways this business sends its own automated email: booking confirmations, report deliveries, payment-reconciliation notices, and similar transactional messages tied to the activity described above.
| What we request | What that allows | What it does not allow |
|---|---|---|
gmail.send (Google's "send email on your behalf" scope) | Compose and send an email as thehumantoolbox2026@gmail.com — the same as if we typed and hit send ourselves. | It cannot read, search, forward, label, or delete anything already in the mailbox. It has no access to any other Google service (Drive, Calendar, Contacts) tied to that account. |
This connection sends mail from our own business inbox to a recipient (a customer, a coach applicant, or Craig himself); it is not a tool that touches, reads, or exports anyone else's Gmail account. The OAuth credentials for this connection are stored server-side as environment variables, never exposed in this site's code, and never shared with any third party except Google itself (to actually deliver the message).
We do not use this Gmail connection to collect Google user data for any purpose beyond sending the specific transactional email described above, we do not use any data obtained through it to serve advertising, and we do not transfer, sell, or use it to train AI or machine-learning models of any kind.
We do not sell your data, and we do not share it with third parties for their own marketing, advertising, or resale purposes. We work with a small number of infrastructure providers who process data strictly on our behalf, to run the business:
We may disclose information if required to by law, or to protect the rights, property, or safety of The Human Toolbox, our clients, or others.
To exercise any of these rights, email thehumantoolbox@outlook.com. We'll respond and act on genuine requests promptly.
We use industry-standard measures to protect your data in transit and at rest, including access controls on our database and storage systems, server-side-only storage of API credentials (including the Gmail OAuth credentials described in Section 4), and one-time, expiring, view-limited links for any document containing personal information. No system is perfectly secure, and we can't guarantee absolute security, but we take real, concrete steps to protect what you share with us rather than treating this as a formality.
The Human Toolbox is a business site intended for adults seeking bodywork, aesthetic, or coaching services. It is not directed at, and we do not knowingly collect information from, children under 13.
If we make a material change to how we handle your data, we'll update the effective date above and, where the change is significant, note it clearly on this page.
Questions about this policy, or a request under Section 6, can be sent to thehumantoolbox@outlook.com.