Privacy Policy

Last updated: 27 June 2026

Mind Narrative Inc. ("Mind Narrative", "we", "us") respects your privacy and complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy requirements. This policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights as an individual in Canada.

1. Data controller identity

The data controller responsible for personal information processed through mindnarrative.pro and our studio programmes is:

Mind Narrative Inc.
161 Bay Street, Suite 2700, Toronto, ON M5J 2S1, Canada
Business Number: 826491735RC0001
Privacy contact: [email protected]

2. Scope

This policy applies to personal information collected when you visit our website, submit contact or enrolment forms, participate in AI literacy studio programmes, attend professional workshops, or communicate with us by email or phone. It does not apply to third-party websites linked from our pages or to AI tools (ChatGPT, Copilot, Claude) that you access under separate vendor terms.

3. Personal information we collect

Depending on your interaction with Mind Narrative, we may collect:

  • Identity and contact data: name, email address, phone number, organization, job title, mailing address.
  • Enrolment data: programme selections, payment confirmation references, attendance records, cohort assignments.
  • Communication data: messages you send via contact forms, email correspondence, workshop feedback.
  • Technical data: IP address, browser type, device information, pages visited, referral source — collected via cookies when you consent.
  • Consent records: timestamps and choices related to PIPEDA consent, cookie preferences and marketing opt-ins.

We do not intentionally collect sensitive health information, financial account numbers, or government identifiers beyond what you voluntarily provide for invoicing or corporate enrolment.

4. Purposes of processing

We process personal information for the following purposes:

  • Responding to enquiries about generative AI programmes and corporate training.
  • Processing programme enrolment, scheduling studio sessions and delivering educational services.
  • Issuing participation certificates and alumni forum access.
  • Managing billing, refunds and contractual obligations with corporate clients.
  • Improving our website, workshop materials and studio operations through aggregated analytics (with consent).
  • Complying with legal obligations, tax requirements and dispute resolution.
  • Protecting the security and integrity of our systems and participants.

5. Lawful bases under PIPEDA

PIPEDA requires that we identify and document purposes before or at the time of collection and obtain meaningful consent where appropriate. Our lawful bases include:

  • Consent: Contact form submission, programme enrolment, optional analytics cookies and marketing communications require your explicit or implied consent as described at collection.
  • Contractual necessity: Processing needed to deliver programmes you have registered for or to perform corporate training agreements.
  • Legitimate interests: Studio security, fraud prevention, internal reporting and service improvement — balanced against your privacy rights.
  • Legal obligation: Retaining financial records, responding to lawful requests from Canadian authorities.

You may withdraw consent for non-essential processing at any time by contacting [email protected], subject to legal or contractual restrictions.

6. How we share information

We do not sell personal information. We may share data with:

  • Payment processors handling programme fees (they process data under their own privacy policies).
  • Email and hosting providers supporting mindnarrative.pro and programme delivery.
  • Professional advisers (accountants, lawyers) bound by confidentiality.
  • Authorities when required by applicable Canadian law.

Cross-border transfers may occur when service providers operate outside Canada. In such cases, we assess safeguards and contractual protections consistent with PIPEDA accountability principles.

7. Retention

We retain personal information only as long as necessary for the purposes described:

  • Contact enquiries: up to 24 months after last communication unless an enrolment follows.
  • Programme records and certificates: up to 7 years for educational and tax documentation.
  • Cookie consent preferences: 6 months, then re-prompted.
  • Analytics data: aggregated reports retained up to 26 months when analytics cookies are accepted.
  • Corporate contract records: duration of contract plus 7 years.

When retention periods expire, we securely delete or anonymize information.

8. Your individual access rights

Under PIPEDA, you have the right to:

  • Request access to personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Withdraw consent where processing is consent-based.
  • Challenge our compliance with PIPEDA principles.

Submit requests to [email protected]. We respond within 30 days unless an extension is permitted. Identity verification may be required. There is no fee for reasonable access requests.

9. Office of the Privacy Commissioner of Canada

If you believe we have not addressed your privacy concern adequately, you may contact the Office of the Privacy Commissioner of Canada (OPC):

Website: www.priv.gc.ca
Toll-free: 1-800-282-1376

We encourage you to contact us first so we may resolve issues directly.

10. Cookies and tracking

We use essential cookies for site functionality and optional analytics cookies with your consent. Details appear in our Cookie Policy. You may manage preferences via our cookie banner or browser settings.

11. Security measures

We implement administrative, technical and physical safeguards appropriate to the sensitivity of information processed, including HTTPS encryption, access controls, staff training on PIPEDA obligations and secure disposal procedures. No method of transmission over the Internet is completely secure; we cannot guarantee absolute security.

12. Children's privacy

Our AI literacy programmes are designed for adult professionals. We do not knowingly collect personal information from individuals under 16 without parental consent. Contact us if you believe we have inadvertently collected such information.

13. AI tools and participant content

During studio sessions, you may input prompts or drafts into third-party generative AI tools under your own account. Those vendors process data under their terms. Mind Narrative facilitators instruct participants not to submit confidential employer data or personal health information into AI tools during exercises unless explicitly authorized.

14. Change log

  • 27 June 2026: Initial publication of privacy policy for mindnarrative.pro.

Material changes will be posted on this page with an updated "Last updated" date. Continued use of our services after changes constitutes acknowledgment where permitted by law.

15. Contact

Privacy enquiries: [email protected]
General contact: [email protected]
Mail: Mind Narrative Inc., 161 Bay Street, Suite 2700, Toronto, ON M5J 2S1, Canada

16. Breach notification

If a security incident creates a real risk of significant harm to individuals, Mind Narrative will notify affected persons and report to the Office of the Privacy Commissioner as required under PIPEDA, documenting containment and remediation measures.

17. Automated decisions

We do not use solely automated processing that produces legal or similarly significant effects. Programme admissions involving capacity limits are reviewed by staff.

18. Complaint process

Privacy complaints sent to [email protected] receive acknowledgment within five business days. We aim to resolve substantiated concerns within 30 days and will explain outcomes clearly, including any OPC referral rights if you remain unsatisfied.

19. Marketing opt-out

Programme-related emails to enrolled participants are necessary for service delivery. Optional studio newsletters require separate consent and include unsubscribe links. Marketing processing stops within ten business days of a valid opt-out.

20. Accuracy and updates

Please notify us of changes to your contact information so certificates, schedules and privacy notices reach you correctly. We take reasonable steps to keep records accurate and will correct verified errors promptly upon request.

21. De-identification

Where feasible, Mind Narrative uses aggregated or de-identified data for curriculum analytics. We do not attempt to re-identify de-identified datasets. Identifiable participant feedback used for testimonials requires separate written permission.

22. Workplace enquiries

Employers sponsoring participants may receive attendance confirmation and participation status. We do not disclose private message content or personal feedback without participant consent unless required by law.

23. Accessibility of privacy information

This policy is published in accessible HTML. Contact [email protected] to request an alternative format if needed; we respond within 15 business days where practicable.

24. Law enforcement and legal process

Mind Narrative discloses personal information to law enforcement only when required by valid legal process under Canadian law or when necessary to protect the safety of individuals. We document such disclosures internally and notify affected individuals when permitted.

25. Data processing records

We maintain internal records of processing activities including purposes, data categories, retention periods and subprocessors, consistent with PIPEDA accountability obligations. Summary information is available on request to [email protected].

26. Policy contact summary

For any privacy matter — access, correction, complaint or consent withdrawal — email [email protected] with sufficient detail for us to identify your records. We are committed to transparent, accountable handling of personal information across all Mind Narrative studio operations.