Privacy Policy

OnMondays Studio
Effective Date: September 1, 2024
Last Updated: September 15, 2025

1. Introduction

OnMondays Studio ("we," "us," or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.

2. Contact Information

Privacy Officer:
OnMondays Studio
Email: sofia@onmondaysco.com

For privacy-related inquiries, complaints, or to exercise your rights, please contact our Privacy Officer via email. Mailing address available upon request for formal complaints or legal requirements.

3. What Personal Information We Collect

We may collect the following types of personal information:

Information You Provide Directly:

Contact Information: Name, email address, phone number, business name, mailing address
Project Information: Details about your business, project requirements, budget information, design preferences
Communication Records: Messages sent through contact forms, emails, phone calls, and meeting notes
Payment Information: Billing address and payment details (processed securely through third-party payment processors)

Information Collected Automatically:

Website Usage Data: IP address, browser type, device information, pages visited, time spent on site
Cookies and Tracking: We use cookies and similar technologies to improve website functionality and analyze usage
Analytics Data: Website performance metrics and user behavior patterns

4. How We Use Your Personal Information

We use your personal information for the following purposes:

Business Operations:

Providing branding, web design, and creative services
Communicating about projects and services
Processing payments and maintaining financial records
Managing client relationships and providing customer support

Website Functionality:

Improving website performance and user experience
Analyzing website traffic and usage patterns
Ensuring website security and preventing fraud

Marketing and Communications:

Sending newsletters and promotional materials (with your consent)
Sharing portfolio examples and case studies (with your consent)
Following up on inquiries and project proposals

5. Legal Basis for Processing

We process your personal information based on:

Consent: When you provide explicit consent for specific uses
Contract: When necessary to fulfill our service agreements
Legitimate Interests: For business operations, security, and improvement of services
Legal Obligations: When required by Canadian law

6. How We Share Your Personal Information

We may share your personal information in the following circumstances:

Service Providers:

Web hosting and cloud storage providers
Email marketing platforms
Payment processors
Analytics and website optimization tools
Project management and communication tools

Business Partners:

Subcontractors and freelancers working on your projects (with your consent)
Printing and production vendors for physical materials

Legal Requirements:

When required by law, court order, or government investigation
To protect our rights, property, or safety, or that of others
In connection with a business sale, merger, or acquisition

We ensure all third parties maintain appropriate privacy and security standards through contractual agreements.

7. International Transfers

Some of our service providers may be located outside Canada, including in the United States. When we transfer personal information internationally, we ensure appropriate safeguards are in place to protect your information in accordance with Canadian privacy laws.

8. How We Protect Your Personal Information

We implement appropriate technical and organizational security measures:

Technical Safeguards:

Secure website encryption (SSL/TLS)
Secure data storage and backup systems
Access controls and authentication
Regular security updates and monitoring

Organizational Safeguards:

Limited access to personal information on a need-to-know basis
Employee privacy training and confidentiality agreements
Regular privacy and security assessments
Incident response procedures

9. Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy:

Client project information: 7 years after project completion for business and legal requirements
Marketing communications: Until you unsubscribe or withdraw consent
Website analytics: 26 months or as configured in our analytics tools
Financial records: As required by Canadian tax and business laws

10. Your Privacy Rights

Under PIPEDA, you have the right to:

Access and Correction:

Request access to your personal information we hold
Request correction of inaccurate or incomplete information
Receive information about how we use and disclose your personal information

Consent Management:

Withdraw consent for marketing communications at any time
Object to certain uses of your personal information
Request restriction of processing in certain circumstances

Data Portability:

Request a copy of your personal information in a commonly used format

To exercise these rights, contact our Privacy Officer using the information provided above. We will respond to your request within 30 days.

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies:

Essential Cookies:

Required for website functionality and security
Cannot be disabled without affecting website performance

Analytics Cookies:

Help us understand website usage and improve user experience
You can opt out through your browser settings or our cookie preferences

Marketing Cookies:

Used for advertising and marketing purposes
Require your consent and can be managed through cookie preferences

You can manage cookie preferences through your browser settings or our cookie consent tool.

12. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy does not apply to these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

13. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

14. Complaints Process

If you have concerns about our handling of your personal information:

Contact our Privacy Officer using the information provided above
File a complaint with the Privacy Commissioner of Canada:
- Website: www.priv.gc.ca
- Phone: 1-800-282-1376
- Email: info@priv.gc.ca

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will:

Post the updated policy on our website
Indicate the "Last Updated" date
Notify you of significant changes via email or website notice
Obtain consent for material changes that affect how we use your personal information

16. Additional Provincial Rights

Depending on your province of residence, you may have additional privacy rights under provincial legislation. Please contact our Privacy Officer for information about rights specific to your jurisdiction.

Consent Statement: By using our website or services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

For questions about this Privacy Policy, please contact sofia@onmondaysco.com.