Legal
Privacy Policy
Last updated: July 6, 2026
This Privacy Policy explains how There Management Consulting Inc. (“There,” “we,” “us”) collects, uses, shares, and protects personal information when you visit thereconsulting.ca (the “Site”), download a guide, complete our AI Governance Maturity Snapshot, subscribe to updates, or contact us. We keep data collection to what we need, and tracking to a minimum.
1 · Who we are
There Management Consulting Inc. is a management consulting firm working with leaders and third-sector organizations, based in Mississauga, Ontario, Canada. We are the party responsible for personal information collected through the Site. Questions? Email hello@thereconsulting.ca.
2 · Information we collect
We collect the following categories of information:
- Information you provide. Your email address, and any details you enter, when you request a guide, complete the Maturity Snapshot, subscribe to updates, or reach out to us.
- Snapshot responses. If you complete the AI Governance Maturity Snapshot and ask us to email your results, we store your answers, your score, and your result tier together with your email address so we can send them and, if you wish, discuss them.
- Booking information. If you schedule a call, you provide details (such as your name, email, and any notes) directly to our scheduling provider (see Service providers).
- Usage information. As you browse, we automatically record pages viewed, the site that referred you, and general interactions (such as scroll depth, sections viewed, and link or download clicks), along with a temporary, randomly generated session identifier and basic device/browser information. We do not use this to identify you personally.
You can browse the Site and take the Snapshot without giving us your email — the email step is optional and is only used to send you a copy of your results.
3 · How we use your information
- To deliver what you ask for — email your guide or Snapshot results.
- To respond to enquiries and schedule conversations.
- To send updates or resources you have opted into (you can unsubscribe at any time).
- To understand how the Site is used and improve its content, performance, and accessibility.
- To maintain the security and integrity of the Site and to comply with legal obligations.
4 · Cookies & analytics
We keep tracking to a minimum. We do not use advertising or cross-site tracking cookies. Our first-party analytics (“There Insights”) records pageviews and interactions using a random session identifier stored temporarily in your browser’s session storage — it is cleared when you close the tab and is not shared with other websites. We also use Vercel’s privacy-friendly, cookieless analytics to measure aggregate traffic. These tools help us understand what is useful; they are not used to build advertising profiles or to track you across the web.
5 · How we share information
We do not sell your personal information. We share it only with the service providers listed below, who process it on our behalf to operate the Site and deliver what you request, and only as needed for that purpose. We may also disclose information if required by law, to protect our rights, or in connection with a business transfer.
6 · Service providers
We rely on the following processors:
- Supabase — database and file storage that holds form submissions and Snapshot responses (hosted in Canada).
- Resend — sends the transactional emails that deliver your guide or results.
- Vercel — hosts the Site and provides cookieless, aggregate analytics.
- There Insights — our own first-party analytics service that records the usage information described above.
- Google Drive — hosts the downloadable PDF guides; downloading a guide requests the file from Google.
- Koalendar — our scheduling tool; if you book a call, the details you enter are handled by Koalendar.
Each provider maintains its own privacy practices, and we encourage you to review them.
7 · Where your data is processed
Our database and stored files are hosted in Canada. Some providers (such as Vercel, Resend, and Google) may process data in the United States or other countries. Where personal information is transferred outside your region, we take steps consistent with applicable law — including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, for visitors in the EU/EEA and UK, the General Data Protection Regulation (GDPR).
8 · Legal bases (EEA / UK visitors)
Where the GDPR applies, we process personal information on these bases: your consent (for example, when you submit a form or opt into updates); our legitimate interests (running and securing the Site, understanding usage, and responding to your enquiries); and compliance with legal obligations. You may withdraw consent at any time.
9 · Data retention
We keep personal information only as long as necessary for the purposes described in this policy, or as required by law, after which we delete or anonymize it. You can ask us to delete your information sooner (see Your rights).
10 · Your rights & choices
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information; to withdraw consent; and to object to or restrict certain processing. To exercise any of these, email hello@thereconsulting.ca and we will respond within the time required by applicable law. You can also unsubscribe from our emails at any time using the link in any message.
If you are in Canada and have a concern we have not resolved, you may contact the Office of the Privacy Commissioner of Canada. If you are in the EU/EEA or UK, you may contact your local data protection authority.
11 · Security
We use reasonable technical and organizational measures to protect personal information against loss, misuse, and unauthorized access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
12 · Children’s privacy
The Site is intended for a professional audience and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, please contact us and we will delete it.
13 · Third-party links
The Site links to third-party services (such as our scheduling tool and guide downloads). Those services are governed by their own privacy policies, and we are not responsible for their practices.
14 · Changes to this policy
We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and material changes will be reflected on this page. Please check back periodically.
15 · Contact us
For any privacy question or request, contact us at hello@thereconsulting.ca.
There Management Consulting Inc.
Mississauga, Ontario, Canada