Privacy Policy
Last Updated: 2024
MindfulBiz is committed to maintaining the highest standards of data integrity and transparency. This policy outlines our rigorous approach to personal information management in the context of Ethical AI governance, specifically aligned with Canadian federal and provincial regulations.
1. Identification of Data Controller
The entity responsible for the processing of your personal data under this policy is MindfulBiz, headquartered in Ottawa, Ontario. As a provider of Ethical AI solutions, we operate in strict accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, the Digital Charter Implementation Act.
- Address: 248 Metcalfe Street, Ottawa, ON K2P 1R2
- Email: [email protected]
- Phone: +1 785-242-0000
2. Categories of Data Collected
MindfulBiz collects information that identifies, relates to, or could reasonably be linked with you. This includes:
- Identity & Contact Data: Full name, professional email address, telephone number, and corporate affiliation.
- Technical & Usage Data: IP addresses, browser types, device identifiers, and interaction logs with our AI governance platforms.
- Ethical Auditing Data: Information provided during consultations regarding algorithmic fairness or risk management assessments.
- Cookies & Tracking: We utilize essential and analytical cookies to optimize user experience and monitor site performance.
3. Purpose and Legal Grounds for Processing
In accordance with Canadian law, we process your personal information based on the following legal foundations:
Consent
Obtained when you subscribe to our white papers or request an AI ethics audit.
Contractual Necessity
Processing required to fulfill our service obligations under Enterprise Risk Management agreements.
Legitimate Interest
For the continuous improvement of our AI bias mitigation algorithms and platform security.
Legal Compliance
To satisfy regulatory reporting requirements in Ottawa and broader Canadian jurisdictions.
4. Data Retention and Security
MindfulBiz retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, technical logs are retained for 12 months, while client engagement data is kept for the duration of the contractual relationship plus 7 years for tax and legal defense purposes.
We implement industry-standard AES-256 encryption and multi-factor authentication (MFA) to protect against unauthorized access, alteration, or disclosure.
5. Rights of the Data Subject
Under PIPEDA and relevant privacy frameworks, you possess the following rights regarding your personal information:
- 01. Right to Access: You may request a copy of the personal data we hold about you.
- 02. Right to Correction: You may request the rectification of inaccurate or incomplete data.
- 03. Right to Withdrawal: You may withdraw your consent at any time (subject to legal or contractual restrictions).
- 04. Right to Complaint: You have the right to lodge a formal complaint with the Office of the Privacy Commissioner of Canada (OPC).
6. International Data Transfers
As an organization focused on International Regulatory Alignment, MindfulBiz may process data on servers located outside of Canada. In such instances, we ensure that the recipient jurisdiction provides an "adequate level of protection" or that Standard Contractual Clauses (SCCs) are in place to safeguard your information.