Privacy Policy

Last updated: August 12, 2026

Mystique Brand Communications (“Mystique,” “we,” “us” or “our”) respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains what information we collect through mystique.ca, how and why we use it, when it may be shared, and the choices available to you.

1. Information we collect

We may collect the following types of information:

Information you provide

When you complete a form, request a consultation or brand review, book a meeting, subscribe to communications, contact us or otherwise interact with Mystique, you may provide information such as:

your name;
business or organization name;
email address and telephone number;
job title;
appointment details;
information about your business, brand, website, marketing needs or project; and
any other information you choose to include in a form, email, message or conversation.

Please do not submit sensitive personal information unless it is necessary for your request.

Information collected automatically

When you visit our website, we and our service providers may collect technical and usage information, including:

IP address and approximate location;
browser, device and operating-system information;
pages viewed, links clicked, referring pages and time spent on the site;
interactions with forms, advertisements and marketing campaigns;
cookie identifiers and similar online identifiers; and
interactions with our marketing emails, such as opens and link clicks.

2. How we use personal information

We may use personal information to:

respond to inquiries and provide requested information;
schedule consultations and meetings;
evaluate potential projects and provide services;
manage client and prospective-client relationships;
operate, maintain, secure and improve our website;
understand website traffic, visitor behaviour and marketing performance;
personalize and automate relevant follow-up communications;
send marketing communications where you have consented or where otherwise permitted by law;
measure advertising conversions, build advertising audiences and deliver more relevant advertising;
protect against fraud, misuse, security threats and technical problems;
maintain business, security and backup records; and
comply with legal, regulatory and contractual obligations.

We limit our collection and use of personal information to purposes that a reasonable person would consider appropriate in the circumstances.

3. Cookies and similar technologies

Our website uses cookies, pixels, tags and similar technologies. These technologies can remember preferences, keep the website functioning, measure traffic and performance, connect form activity with our customer relationship management system, measure advertising results and support interest-based advertising.

We group these technologies into categories such as necessary, preferences, statistics and marketing. Where required, non-essential technologies are used only after you make a selection through our consent banner.

You can accept, deny or change your choices through the Manage Consent link on our website. You can also adjust cookie controls in your browser. Blocking some technologies may affect certain website features. Withdrawing consent does not affect processing that occurred before consent was withdrawn.

4. Email marketing

We use Constant Contact Lead Gen & CRM, formerly known as SharpSpring, to manage contacts, capture form submissions, automate follow-up, send marketing emails and understand interactions with our website and emails.

We send commercial electronic messages with consent or as otherwise permitted by Canada’s anti-spam legislation. You may unsubscribe using the link included in a marketing email or by contacting us. We may still send non-promotional messages needed to respond to an inquiry, manage an active project or meet legal and administrative obligations.

5. Service providers and disclosures

We use service providers to operate our website, communicate with visitors, schedule appointments, manage relationships, analyze performance and advertise our services. These providers may process personal information on our behalf or collect information through their technologies.

Our principal website service providers include:

ChemiCloud for private website hosting, infrastructure and server backups;
Constant Contact Lead Gen & CRM (formerly SharpSpring) for form capture, customer relationship management, marketing automation, email delivery and engagement tracking;
Calendly for appointment scheduling;
Google Analytics and Google Ads for website analytics, advertising, conversion measurement and related reporting;
Meta for advertising, conversion measurement and audience services through technologies such as the Meta Pixel; and
LinkedIn for advertising, conversion measurement and audience insights through the LinkedIn Insight Tag.

These providers have their own privacy terms and may use cookies or similar technologies as described in their policies. We encourage you to review their privacy information.

We may also disclose personal information:

to professional advisers and contractors who need it to provide services to us and are expected to protect it;
when required by law, court order or lawful government request;
when reasonably necessary to protect Mystique, our clients, website visitors or others from fraud, security threats or unlawful activity; or
in connection with a proposed or completed business transaction, subject to appropriate confidentiality and legal requirements.

We do not sell or rent personal information.

6. Processing outside Canada

Some service providers may process or store personal information outside Canada, including in the United States or other countries where they or their subprocessors operate. Information processed in another country may be subject to that country’s laws and may be accessible to courts, law-enforcement agencies or other government authorities in accordance with those laws.

Mystique remains responsible for personal information under its control and uses contractual or other reasonable measures to require service providers to protect it appropriately.

7. Retention and backups

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, to manage a business or client relationship, and to satisfy legal, accounting, security and contractual requirements.

When information is no longer required, we take reasonable steps to delete, destroy or anonymize it. Copies may remain temporarily in routine website or system backups until those backups are overwritten or securely deleted according to the applicable backup cycle.

8. Safeguards

We use reasonable administrative, technical and physical safeguards appropriate to the nature of the information. These may include access controls, account protections, secure website connections, software maintenance and backups.

No method of internet transmission or electronic storage is completely secure. While we work to protect personal information, we cannot guarantee absolute security.

9. Your choices and privacy rights

Subject to applicable law, you may ask us to:

explain whether we hold personal information about you and how it has been used or disclosed;
provide access to your personal information;
correct inaccurate or incomplete information;
withdraw consent to certain uses of your information;
stop sending marketing communications; or
delete information that we are no longer required or permitted to retain.

We may need to verify your identity before completing a request. Some requests may be limited by legal, contractual or record-retention requirements. If withdrawing consent affects our ability to provide a service, we will explain the consequences where appropriate.

You may also raise a question or complaint about our privacy practices using the contact information below. If a concern is not resolved, you may contact the Office of the Privacy Commissioner of Canada or another privacy regulator with jurisdiction.

10. External websites

Our website may link to websites or services operated by other organizations. We do not control their privacy practices and are not responsible for their content or handling of personal information. Review the privacy policy of an external service before providing information to it.

11. Changes to this policy

We may update this Privacy Policy to reflect changes to our practices, services, technologies or legal obligations. We will post the revised policy on this page and update the “Last updated” date. If a change materially affects how we use information already collected, we will provide any additional notice or obtain any consent required by law.

12. Contact Mystique

Questions, access or correction requests, consent withdrawals and privacy complaints may be directed to:

Paul Bies, Privacy Officer
Mystique Brand Communications
6A–170 The Donway West, Suite 221
Toronto, Ontario M3C 2E8
Email: sales@mystique.ca
Telephone: 416-441-2666