Privacy Policy

Who we are

Mynzak & Company ("we," "our," or "us") is a consulting firm based in British Columbia, Canada. This policy covers personal information we collect through mynzak.com, when you contact us, and when we work with you. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act (PIPA), and, where it applies, Quebec's Act respecting the protection of personal information in the private sector. Our emails follow Canada's Anti-Spam Legislation (CASL).

Person responsible for privacy

Austin Mynzak, Founder and CEO, is responsible for the protection of personal information at Mynzak & Company. You can reach him at info@mynzak.com.

What we collect

• Contact form: first name, last name, email address, company name (optional), and your message.
• Booking a call: when you book through our booking page, your name, email address, and your answers to the booking questions (your company name and size, what prompted you to reach out, and anything you'd like us to look at before the call).
• Business Health Check: your answers and scores are calculated in your browser and stay there unless you choose to send them to us. If you do, we collect your first name, email address, business name (optional), your answers, your scores, and whether you asked to receive occasional insights from us.
• Newsletter: your email address, when you subscribed, the page you subscribed from, and the wording you agreed to, so we can show that you gave permission.
• Clients: names and business contact details of the people we work with, the business information you share during an engagement, and the billing details needed to invoice you.
• Business contacts: we may use publicly available business contact information, such as a work email on a company website or professional profile, or a business contact data provider, to introduce our services. We only use it for business-related outreach, and you can ask us to stop at any time.
• Spam protection: to stop form abuse, we record a scrambled (hashed) version of your IP address for up to 24 hours. We never store your actual IP address in our database. Our hosting provider may keep standard server logs for security.
• Analytics: if you accept analytics cookies, Google Analytics collects information about how you use the site, such as pages visited, time on site, device type, and approximate location.

We do not ask for sensitive information such as financial account numbers, government identification numbers, or health information. If you include something sensitive in a message, we use it only to respond to you.

Why we use it

• To respond to your inquiry and follow up about your needs.
• To follow up about your Health Check results, if you choose to send them to us.
• To deliver, manage, and invoice client engagements.
• To send you occasional emails, only if you have agreed to receive them.
• To understand how the site is used and improve it, only if you accept analytics cookies.
• To protect the site and our forms from spam and abuse.
• To keep the business records the law requires.

We do not use your information for purposes you would not reasonably expect. If we ever want to use it for something new, we will ask you first.

How your Health Check score works

Your Health Check scores are calculated automatically from your answers using a fixed formula. They are for your information only. We do not use them to make decisions about you. If you would like to know how your score was calculated, just ask.

Emails from us

• If you contact us or complete the Health Check, we will reply and may follow up about your inquiry for up to six months.
• We send newsletters and insights only if you have clearly agreed to receive them.
• Every marketing email identifies us, includes our contact information, and has a working unsubscribe link.
• If you unsubscribe, we stop within 10 business days, and usually much sooner.

You can also unsubscribe at any time by emailing info@mynzak.com.

Who we share it with

We never sell or rent personal information. We share it only with the service providers we use to run the site and our business, and only what each one needs to do its job:

• Lovable Cloud (Supabase): website hosting, database, and server functions.
• Notion: our client and lead records.
• Slack: internal notifications when someone contacts us.
• Google Workspace: our email, and our calendar booking page for calls.
• Google Analytics: website analytics, only with your consent.
• Stripe: client invoicing and payments. Card details go directly to Stripe, and we never see full card numbers.
• Apollo: business contact data for outreach.

We may also disclose information when the law requires it, or as part of a sale or reorganization of our business, in which case your information stays protected by this policy.

Some of these providers store or process information outside Canada, including in the United States. Information stored outside Canada is subject to the laws of that country and may be accessible to its authorities. If you are in Quebec, this means your information may be transferred outside Quebec, and we assess whether it will be adequately protected before we do so. We choose providers that protect personal information with appropriate safeguards.

How long we keep it

• Contact and Health Check records: up to 24 months after our last interaction.
• Client records: for as long as needed for the engagement, then for the period tax law requires (generally six years in Canada).
• Newsletter records: until you unsubscribe. After that we keep only a record that you unsubscribed and when you originally gave consent, so we can respect your choice.
• Spam protection records: deleted within 24 hours.
• Analytics data: no longer than 14 months.

When information is no longer needed, we delete or anonymize it.

Cookies

We use one essential item stored in your browser to remember your cookie choice. We do not use advertising cookies. Google Analytics only loads if you click Accept. If you decline, the analytics script is never loaded at all. You can change your choice at any time using the Cookie settings link at the bottom of every page.

Your rights

You can ask to access the personal information we hold about you, correct it, withdraw your consent, or have it deleted, subject to any legal requirement to keep it. Requests are free. We may ask you to confirm your identity first, and we will respond within 30 days. If we need more time, or if we cannot fully meet a request, we will tell you why and explain your options.

If you are in Quebec, you can also ask for your information in a structured, commonly used technological format, ask us to stop disseminating it or to de-index it where the law allows, and ask how any automated processing works.

Wherever you live, we do not sell your personal information or share it for targeted advertising.

To make a request, email info@mynzak.com.

How we protect it

Access to personal information is limited to the people who need it. Our database uses access controls so visitors cannot read other people's submissions, and connections to our site and service providers are encrypted.

If a privacy breach ever creates a real risk of significant harm to you, we will notify you and the relevant privacy regulator as soon as feasible. We keep a record of every privacy incident, however small.

Children

Our site and services are meant for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16.

Questions and complaints

If you have a question or concern, please contact us first at info@mynzak.com. You also have the right to contact the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner for British Columbia, or, if you are in Quebec, the Commission d'accès à l'information du Québec.

Changes to this policy

We may update this policy as our practices or the law change. We will post the updated version here with a new "Last updated" date. If a change is significant, we will also note it on the site and ask for your consent where the law requires it.