Legal & Privacy
Privacy & Cookie
Policy
At Maxfame Consultancy, transparency isn't a legal checkbox—it's a core value. This policy explains exactly how we collect, use, and protect your data across our operations in Canada, UK, and the US.
Last updated: 26 March 2026GDPR · PIPEDA · UK GDPR compliant
1. Information We Collect
Information You Provide Directly
When you contact us, request a quote, or interact with our forms, we collect: full name, work email address, company name, phone number (optional), and any project details or messages you submit.
Information Collected Automatically
When you visit our website, we automatically collect: IP address, browser type and version, operating system, pages visited and time spent, referring URLs, and device identifiers. This data is collected through cookies and similar tracking technologies.
Business Contact Data
In the course of B2B engagements, we may collect job titles, LinkedIn profiles, and professional contact information legitimately obtained through networking or public sources.
2. How We Use Your Information
Service Delivery
To respond to inquiries, provide quotes, deliver contracted services, and communicate project updates. This processing is necessary for the performance of a contract or pre-contractual steps.
Marketing & Communications
With your consent, we may send newsletters, service updates, and relevant industry content. You may withdraw consent at any time by clicking 'Unsubscribe' in any email or contacting us directly.
Analytics & Improvement
To understand how visitors use our website, identify technical issues, and improve our content and user experience. We rely on legitimate interests for this processing.
Legal Compliance
To comply with applicable laws including GDPR (EU/UK), PIPEDA (Canada), and other relevant regulations where we operate.
4. Data Sharing & Transfers
We Do Not Sell Your Data
Maxfame Consultancy does not sell, rent, or trade personal data to third parties for their own marketing purposes.
Service Providers
We share data with trusted sub-processors who help us deliver our services: cloud hosting providers (AWS, Azure), communication tools (email, CRM), analytics platforms, and project management software. All sub-processors are bound by data processing agreements.
International Transfers
As we operate across Canada, UK, and the US, your data may be transferred internationally. For transfers from the UK/EEA, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions. For Canadian residents, transfers comply with PIPEDA.
Legal Disclosure
We may disclose data when required by law, court order, or to protect the rights, property, or safety of Maxfame, our clients, or the public.
5. Your Rights
Rights Under GDPR (EU/UK)
Right to access your data · Right to rectification · Right to erasure ('right to be forgotten') · Right to restrict processing · Right to data portability · Right to object to processing · Rights related to automated decision-making.
Rights Under PIPEDA (Canada)
Right to access personal information held about you · Right to challenge accuracy · Right to withdraw consent · Right to know what data is collected and why · Right to file a complaint with the Office of the Privacy Commissioner of Canada.
How to Exercise Your Rights
Submit a request to admin@maxfameconsulting.com with the subject line 'Privacy Request'. We will respond within 30 days (GDPR) or 30 days (PIPEDA). Identity verification may be required before we process certain requests.
6. Data Security
Technical Safeguards
We implement industry-standard security measures including TLS/SSL encryption in transit, AES-256 encryption at rest, multi-factor authentication for internal systems, and regular security audits aligned with our ISO 27001 practices.
Organisational Safeguards
Access to personal data is restricted on a need-to-know basis. All staff receive data protection training. We maintain data processing records and conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities.
Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR.
7. Contact & Complaints
Data Controller
Maxfame Consultancy Inc., 210 - 2030 Bristol Cir, Oakville, ON L6H 6P5, Canada. Email: admin@maxfameconsulting.com
UK Representative
Maxfame UK, Southampton, Hampshire, United Kingdom. For UK GDPR enquiries: admin@maxfameconsulting.com
Supervisory Authorities
UK: Information Commissioner's Office (ICO) — ico.org.uk
EU: Your local Data Protection Authority
Canada: Office of the Privacy Commissioner — priv.gc.ca
You have the right to lodge a complaint with your relevant supervisory authority if you believe we have not handled your data appropriately.
Manage Your Cookie Preferences
You can update your cookie preferences at any time. Your choices are stored locally and respected on every visit.
This policy is reviewed and updated periodically. Continued use of our website after any changes constitutes your acceptance of the revised policy. We encourage you to review this page regularly. For questions, contact admin@maxfameconsulting.com.