Privacy Policy

1. Who We Are

Molay Inc. ("Molay," "we," "us," or "our") is a data and analytics consulting firm providing next-generation data intelligence services to business clients. We are based in Vancouver, British Columbia, Canada, and are available globally.

2. What Personal Information We Collect

We may collect personal information in the following categories:

3. How We Use Personal Information

We use personal information for the following purposes:

• Service Delivery: To respond to inquiries, provide consulting services, manage client relationships, and perform contractual obligations
• Communication: To send service-related updates, invoices, confirmations, and technical notices
• Marketing and Outreach: To send marketing emails, event invitations, newsletters, and service announcements when you have provided consent or as permitted by law
• Website Improvement: To analyze website usage, improve user experience, and troubleshoot technical issues
• Legal Compliance: To comply with applicable laws, regulations, and legal obligations, including Canada's Anti-Spam Legislation (CASL) and privacy laws
• Fraud Prevention and Security: To detect, prevent, and address fraud, security incidents, and unauthorized access

4. Legal Basis and Consent

5. Sharing Your Personal Information

6. International Data Transfers

Some of our service providers are located outside Canada, including in the United States and other countries. When we transfer personal information to countries outside Canada:

• We ensure that appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions recognized under Canadian law
• The recipient country's laws may not provide the same level of privacy protection as Canada
• You acknowledge and consent to such transfers as necessary for us to provide our services

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy or as required by applicable law. Retention periods vary depending on the context:

• Contact Information: Retained while you are an active contact or customer and for 3 years afterward (or as required for legal, tax, or contractual purposes)
• Website Analytics: Retained for 13 months by default (as per Google Analytics default settings)
• Marketing Consent Records: Retained to demonstrate compliance with CASL for at least 3 years
• Project Data: Retained for the duration of the engagement plus 7 years (for legal and audit purposes)

After the applicable retention period, personal information is securely deleted or anonymized unless we are required to retain it by law.

8. Security Measures

We implement reasonable physical, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption of personal information in transit and at rest
• Restricted access to personal information (limited to employees and contractors with a legitimate business need)
• Firewalls and intrusion-detection systems
• Regular security assessments and updates
• Employee training on privacy and data protection

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (including web beacons and pixels) on our website to:

• Remember your preferences and login information
• Understand website usage and improve user experience
• Deliver targeted content and marketing
• Prevent fraud and enhance security

10. Your Privacy Rights Under Canadian Law

11. Privacy Complaints and Contact with Regulators

If you are not satisfied with how we have handled your personal information or have concerns about our privacy practices, you have the right to:

• Contact Us First: Please contact [email protected] to discuss your concern
• File a Complaint with the Privacy Commissioner of Canada: Visit www.priv.gc.ca or call 1-800-282-1376
• File a Complaint with a Provincial Privacy Regulator: If applicable (e.g., British Columbia Privacy Commissioner, Ontario Information and Privacy Commissioner, Quebec Commission d'accès à l'information)

12. Children and Minors

Our services are directed to business clients and are not intended for children or minors under the age of 18. We do not knowingly collect personal information from children. If we discover that we have collected personal information from a child, we will promptly delete such information.

13. Third-Party Links and Services

Our website may contain links to third-party websites and services that are not operated by Molay. This Privacy Policy does not apply to third-party websites or services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services before providing your personal information.

14. Updates to This Privacy Policy

Molay may update this Privacy Policy from time to time to reflect changes in our privacy practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated policy on our website with a revised "Last Updated" date
• Sending you an email notification (if you have provided your email address)
• Obtaining your consent if required by law

Your continued use of our website or services after updates constitutes your acceptance of the updated Privacy Policy.

15. Accessibility

If you have difficulty accessing or reading this Privacy Policy, please contact us at [email protected], and we will provide the policy in an accessible format.