Privacy on Malorevi

How I collect information

I collect personal data in a few main ways: information you provide directly, information collected automatically when you visit the site and information generated through analytics or communication tools. I focus on details needed to operate Malorevi, respond to enquiries and understand how professionals engage with AI governance factor material. This section gives a high level overview; later sections explain each category in more depth.

How I use collected information

I use the information I collect to run this site, respond to messages, improve content and maintain a secure, reliable environment for professional visitors. I do not use personal data to make automated decisions that produce legal or similarly significant effects about you. Instead, I focus on understanding broad patterns of engagement and keeping communication with you clear and purposeful.

• • To operate, maintain and improve the functionality, performance and security of Malorevi.
• • To respond to enquiries, requests for information and other messages you send through forms or contact channels.
• • To analyse how visitors navigate AI governance factor content so I can refine explanations, structure and examples.
• • To manage consent preferences, cookie settings and other choices you make about how your data is handled.
• • To prevent, detect and address technical issues, misuse, security incidents or potentially harmful activities.
• • To comply with legal, regulatory or oversight obligations that apply to my activities and service providers.
• • To keep records of interactions, decisions and changes that may be relevant for audits or future reviews.

When I share information

I may share personal data with carefully selected service providers who help me operate Malorevi, such as hosting platforms, analytics services or communication tools. These providers are expected to handle data securely and use it only as instructed. In certain situations, I may also share information when required by law, regulation, court order or to respond to lawful requests from public authorities. If I ever consider a broader change in how I share data, I will update this policy and, where appropriate, provide additional notice.

Your choices and rights

Depending on where you live, work or access Malorevi, you may have certain rights over your personal data. These can include the ability to ask for access, correction, deletion, restriction, portability or to object to certain types of processing. The exact scope of these rights can vary, and some may be limited by legal, technical or contractual requirements. I respect these rights and aim to respond to requests in a timely, transparent manner.

• • You can ask me whether I hold personal data about you and request a copy of that information in an accessible format.
• • If you believe personal data I hold about you is inaccurate or incomplete, you can ask me to correct or update it.
• • In certain circumstances, you can ask me to delete personal data, for example when it is no longer needed or you withdraw consent.
• • In some cases, you may request a copy of certain personal data in a structured, commonly used and machine readable format.
• • In situations where processing is based on legitimate interests, you may be able to object to that processing, particularly for marketing.
• • You may have the right to request that I restrict certain processing activities while a concern or objection is being reviewed.

How I protect your data

I treat security as part of the same craft that guides my governance work. I use a mix of technical and organizational measures to help protect personal data from unauthorised access, loss or misuse. No system is perfect, and I cannot promise absolute security, but I design my setup to reduce unnecessary exposure and to react sensibly if something goes wrong. This section summarises the main safeguards I apply.

How long I keep your data

I keep personal data only for as long as it is reasonably needed for the purposes described in this policy, or as required by applicable law, oversight expectations or contractual obligations. Retention periods can vary depending on whether the data relates to routine site usage, enquiries, security logs or potential legal issues. When information is no longer needed, I take reasonable steps to delete, anonymise or securely archive it.

• • If you create or use any account based features, I may process identifiers, preferences and access logs linked to that account.
• • If I run internal analyses or tests, I may use anonymised or aggregated usage data to understand how governance content performs, without identifying individuals.
• • If you contact me, I may keep your messages, contact details and any information you choose to share so I can respond and maintain a record of our correspondence.
• • If our interactions involve invoicing or payment for services, I may process limited billing details, such as invoice contacts and transaction references, but not full card data.
• • If you consent to occasional updates or outreach, I may process your contact details and interaction history to send relevant, measured communications.

Specific retention periods may change over time as my services, legal obligations and operational needs evolve. I review these periods periodically to ensure they remain appropriate and proportionate.

International data transfers

Service providers or technical infrastructure supporting Malorevi may be located outside your province, territory or country. This can mean that personal data is transferred to jurisdictions with different privacy and data protection laws than those in Canada. Where such transfers occur, I aim to use appropriate safeguards, such as contractual protections, to help ensure your information receives a level of protection consistent with this policy and applicable requirements.

• • Service providers that host or back up data may operate in countries other than your own.
• • These locations may have different data protection laws and enforcement approaches than those in Canada.
• • Where practical, I use contractual protections or similar safeguards to help maintain an appropriate level of protection.
• • Despite these steps, data transfers across borders always carry some risk, which I aim to minimise through careful provider selection.