Skip to content
MocStudios

Website Privacy

Privacy Policy

Last updated: June 2, 2026

MocStudios is the public trade name of 2696429 Alberta Inc. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit this website, contact us, subscribe to updates, request a demo, or otherwise interact with MocStudios. The practical commitment is simple: collect only what we need, use it for the reason it was provided, keep it protected, and make it possible for people to ask questions or exercise privacy rights without friction.

Privacy at a glance

This website is built for business conversations about operational systems, Microsoft 365 delivery, document control, organizational management, workspace portals, and Delivery Agents. In that context:

  • What we collect: business contact details, inquiry details, newsletter signup details, basic website analytics, technical logs, and authorized admin authentication information.
  • Why we collect it: to respond to inquiries, schedule follow-up, send updates where consent exists, secure the website, understand which content is useful, and manage ordinary business records.
  • Who we share it with: service providers that help us host, secure, analyze, authenticate, store, or send website and business communications. Some of those providers may operate outside Canada. We do not sell personal information.
  • What not to send: confidential project records, regulated client data, sensitive personal information, legal hold material, or controlled evidence through public website forms unless we have agreed to that intake path in writing.
  • Your choices: you can unsubscribe from marketing emails, withdraw consent where applicable, request access or correction, ask questions, or challenge our privacy practices.

This policy reflects our current public website and business inquiry practices. Client projects, proofs of concept, managed services, and product deployments may be governed by additional agreements, statements of work, security schedules, or data-processing terms that describe the applicable project-specific privacy and security responsibilities.

Canadian privacy laws

MocStudios is based in Alberta, Canada. Because our website may receive inquiries from across Canada and service providers may process information across provincial or national borders, our handling of personal information may be subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), Canada's Anti-Spam Legislation (CASL), and other applicable Canadian privacy and private-sector data protection laws.

Alberta, British Columbia, and Quebec have private-sector privacy laws that may apply instead of PIPEDA for collection, use, or disclosure that occurs within those provinces. PIPEDA may still apply to interprovincial, international, or federally regulated activity. Where more than one Canadian privacy law applies to a specific interaction, engagement, or incident, we assess the applicable obligations together.

Where another Canadian private-sector privacy law applies to a particular interaction, such as British Columbia, Quebec, or sector-specific health privacy legislation, we will assess the request or incident under the applicable law and any governing client agreement. If Quebec private-sector privacy rules apply, the privacy officer contact below is the public contact for questions about our privacy practices, access or rectification requests, consent withdrawal, privacy governance practices, and confidentiality incidents.

Business contact information, such as a person's name, title, business email address, business phone number, employer, and role, may not always be treated as personal information when it is used only to communicate with that person about their employment, business, or profession. We still handle business contact information responsibly and limit it to the purposes described here.

Privacy officer and accountability

MocStudios is responsible for personal information under its control. Privacy questions, access requests, correction requests, consent withdrawals, service-provider questions, confidentiality incident questions, or complaints can be sent to:

Responsible title: MocStudios Privacy Officer
Email: privacy@mocstudios.ca
Business location: Calgary, Alberta, Canada

Please include enough detail for us to understand the request and locate the relevant records. We may need to verify identity or authority before disclosing, correcting, or deleting personal information.

Personal information we collect

We limit collection to information that is reasonably needed for the purposes described in this policy. Depending on how you interact with the website, we may collect:

  • Contact inquiry information: name, email address, company, message content, service or product interest, inquiry type, source page, referrer, and follow-up history.
  • Newsletter information: email address, signup source, and subscription date.
  • Technical and usage information: basic website logs, device or browser information, IP address, pages visited, and interactions with the website. If analytics are enabled, our default public-site configuration is limited to high-level page analytics and manually instrumented events. We do not enable automatic click capture, form capture, session recording, dead click capture, performance recording, or analytics-based behavioural advertising on the public website.
  • Admin authentication information: for authorized administrators only, sign-in information may be processed by our authentication provider to secure the administrative area of the platform.

The public website is intended for business inquiries, not for confidential project records. We do not intentionally collect sensitive, regulated, or client-controlled data through public forms, and we ask that you do not submit that information unless we have agreed in writing to receive it through that channel.

How we use personal information

We use personal information for reasonable business purposes, including to:

  • respond to inquiries, consultation requests, and demo requests;
  • schedule discovery calls and prepare relevant follow-up;
  • send newsletters, product updates, or marketing emails where consent exists;
  • administer, secure, monitor, and improve the website;
  • prevent abuse, spam, or excessive form submissions;
  • manage business records and legal obligations; and
  • support client onboarding or delivery where a separate agreement applies.

We do not use website inquiry information to make decisions with legal or similarly significant effects about individuals. We do not use website analytics for online behavioural advertising unless we update this policy and our consent practices.

Consent and communications

By submitting a contact form, you consent to MocStudios using the information you provide to respond to your inquiry and related follow-up. A business inquiry is not a newsletter signup, and we do not require marketing consent to respond to a request. By subscribing to updates, you consent to receive commercial electronic messages from MocStudios or 2696429 Alberta Inc., such as practical articles, product updates, and service announcements. You may unsubscribe or withdraw consent at any time, subject to legal or contractual limits.

Commercial electronic messages from MocStudios are intended to comply with Canada's Anti-Spam Legislation (CASL). Where CASL applies, messages will identify MocStudios or 2696429 Alberta Inc. as the sender, include contact information, provide a working unsubscribe mechanism that can be used at no cost, keep unsubscribe links valid for at least 60 days after a message is sent, process unsubscribe requests within 10 business days or less, and maintain consent or unsubscribe records where required.

We do not require you to consent to newsletters or non-essential marketing communications in order to submit a business inquiry. Optional marketing consent is separate from the information needed to respond to the inquiry itself.

Disclosure and service providers

We do not sell personal information. We may disclose personal information to service providers that help us operate the website, store form submissions, manage authentication, host infrastructure, provide analytics, send communications, or support business operations. We authorize service providers to use personal information only for the purposes for which we provide it to them, and we use contractual, technical, and organizational measures appropriate to the sensitivity of the information and the role of the provider. We may also disclose information where required or permitted by law, to protect rights and security, or as part of a business transaction.

Processing outside Canada

Some service providers may process or store information outside Alberta or Canada, including in the United States or other jurisdictions where they or their subprocessors operate. Information processed outside Canada may be subject to lawful access by courts, law enforcement, or government authorities in those jurisdictions.

  • Countries: outside-Canada processing may occur in the United States and other jurisdictions where our service providers or their subprocessors maintain infrastructure or support operations.
  • Purposes: outside-Canada service providers may be authorized to collect, use, disclose, store, or access personal information to provide website hosting, authentication, analytics, form submission storage, email delivery, security monitoring, support, backup, and ordinary business operations.
  • Questions: the MocStudios Privacy Officer can answer questions about our policies and practices related to service providers outside Canada and how to request access to that information.

If Quebec privacy law applies to a specific engagement, we assess cross-border communication of personal information and related written agreements as required by that law before communicating the information outside Quebec.

For client work, cross-border processing, subprocessors, access controls, security responsibilities, and data location commitments are addressed in the applicable statement of work, subscription terms, security schedule, or data-processing terms.

Retention

We keep personal information only as long as reasonably needed for the purposes described in this policy, to meet legal or business record obligations, to resolve disputes, or to enforce agreements. Contact inquiries are retained while they are needed for business follow-up and relationship management. Newsletter records are kept until the subscription is removed or no longer needed, while consent and unsubscribe records may be kept as needed to demonstrate compliance and honour communication preferences. Rate-limit records and technical logs are used to prevent abuse and secure the site, and are kept only as long as reasonably needed for those purposes. When personal information is no longer needed, we securely delete it, anonymize it where lawful and appropriate, or keep it only where required for legal, security, or legitimate business record purposes.

Safeguards

We use reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of the information. These may include access controls, authentication, rate limiting, restricted administrative access, and service-provider security controls. No website or transmission method is completely secure, so we cannot guarantee absolute security.

Privacy breaches

If we become aware of a privacy breach involving personal information under our control, we will assess the incident, take reasonable steps to reduce risk, consider the sensitivity of the information and the probability of misuse, and keep breach records where required.

Where PIPEDA applies and a breach creates a real risk of significant harm, we will notify affected individuals and report to the Office of the Privacy Commissioner of Canada as required. Where PIPEDA requires breach records, we keep those records for at least two years. Where Alberta PIPA applies and a reasonable person would consider that the breach presents a real risk of significant harm, we will notify the Office of the Information and Privacy Commissioner of Alberta as required, and notify affected individuals where required or directed. Client, service-provider, contractual, and sector-specific notice obligations are assessed alongside statutory requirements.

Where Quebec private-sector privacy law applies and a confidentiality incident presents a risk of serious injury or prejudice, we will notify the Commission d'accès à l'information du Québec and affected individuals as required. Where Quebec law requires an incident register, we maintain that register and keep required entries for at least five years.

Your privacy rights

Subject to applicable law, you may request access to personal information we hold about you, ask how it has been used or disclosed, ask us to correct inaccurate or incomplete information, withdraw consent, ask questions about our practices, or challenge our compliance with this policy. We will take reasonable steps to verify the request and respond within the time required by applicable privacy law.

If PIPEDA applies, access requests are generally answered within 30 calendar days unless an extension is permitted. If Alberta PIPA applies, access requests are generally answered within 45 calendar days unless an extension is permitted. If another Canadian privacy law applies, we will follow the timeline required by that law. We may ask for information needed to verify identity, locate records, or confirm authority before releasing personal information.

If you are not satisfied with our response, you may contact theOffice of the Privacy Commissioner of Canada or, where Alberta PIPA applies, the Office of the Information and Privacy Commissioner of Alberta, or, where Quebec private-sector privacy law applies, the Commission d'accès à l'information du Québec.

Children

This website is intended for business and professional audiences. We do not knowingly collect personal information from children.

Cookies, local storage, and analytics

The website may use cookies, local storage, or similar technologies to support site functionality, remember display preferences, secure administrative sessions, and understand website usage. When public-site analytics are enabled, they are configured to avoid automatic click capture, form capture, session recording, and persistent analytics cookies. We do not use website analytics for online behavioural advertising unless we update our notice and consent practices. You can control cookies through your browser settings, though some features may not work as intended if cookies or local storage are disabled.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page with an updated date.

Related terms

Please also review our Website Terms of Use.