Privacy Policy

01The short version

02Who we are

Morley Management Group is a project management consulting and training practice based in Ontario, Canada. We deliver projects and install project management systems for organizations, and we train project professionals through the Morley Learning Lab.

For the purposes of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Morley Management Group is responsible for the personal information under our control. Questions about this policy, or about your information, go to the contact below.

Privacy contact

support@morleymgmt.com

Phone

1-548-384-0200

Region

Ontario and the GTA, Canada

03Cookies and tracking

A cookie is a small file a website stores in your browser. Some are needed for a site to work. Others exist to measure behaviour or support advertising, and those are the ones we ask permission for.

We group them into three categories. Nothing in the second or third category loads until you allow it.

Strictly necessary

One item only: a record of the cookie choice you made, kept in your browser's local storage so we do not ask again on every page. It contains your preference and the date. It is not shared with anyone, and it cannot identify you. This is the one thing that works without consent, because remembering that you said no is the only way to honour it.

Analytics

If you allow it, we load Google Analytics 4. It tells us things like which pages get read, how people arrive, roughly where in the world they are, and where they stop reading. We use that to make the site better, and for nothing else. IP anonymisation is switched on, and we do not use Analytics to try to work out who you are.

Google processes this data as our service provider. Their handling is described in Google's privacy policy.

Marketing

If you allow it, we load the Meta (Facebook and Instagram) pixel and the LinkedIn Insight Tag. These tell us whether people who saw an ad went on to read about our services or book a call, and they let us show relevant ads to similar organizations. Without them we are guessing at whether advertising is worth the money.

Google Consent Mode

We use Google Consent Mode v2. In plain terms, every tracking permission starts in a denied state before any Google code runs, and it only changes if you grant it. This is not a promise we are asking you to take on trust: with your browser's developer tools open, you can watch that no analytics or advertising request is made until you accept.

Changing or withdrawing your choice

Use the Cookie settings link in the footer of any page, or the button in section 01. If you turn something off that was previously on, we delete the cookies those services set and reload the page so nothing keeps running.

We will ask again after twelve months, or sooner if we add a service that changes what this section says.

Google Fonts

The site loads the Montserrat typeface from Google Fonts. To serve the font, Google receives your IP address and basic request information such as your browser and operating system. This happens as the page loads and is not covered by the consent banner, because the site needs the font to render. We can remove this by hosting the font ourselves. If that matters to you, tell us.

Web hosting

Like almost all web hosts, our host may keep standard server logs, which typically record IP addresses, timestamps, and requested files for security and reliability purposes. We do not use those logs for marketing, and we do not combine them with anything else.

04Information you give us

When you get in touch

If you email us, call us, or use the contact form on this site, we receive whatever you choose to tell us. Usually that is your name, your email address, your organization, and a description of what is not working. The contact form composes that message in your own email app, so nothing reaches us until you send it.

When you work with us

During an engagement, a workshop, a coaching relationship, or a membership, we will normally hold more, such as:

• Contact and role details for the people we work with
• Billing and account information needed to invoice you
• Notes, documents, and project materials created during the work
• Information about your organization's processes, systems, and challenges

Diagnostic work sometimes surfaces sensitive information about individuals, for example during interviews about how a team is functioning. We treat that with care, we share it only with the people who genuinely need it to do the work, and we will tell you up front how findings will be reported.

05Why we collect it

Only for reasons a reasonable person would expect. We use personal information to:

• Answer your enquiry and work out whether we are the right people to help
• Deliver the consulting, training, coaching, or membership you have engaged us for
• Invoice you and keep the financial records the law requires
• Communicate with you about work in progress
• Meet our legal, tax, and professional obligations

We do not sell personal information. We do not rent, trade, or share it for anyone else's marketing. We will not add you to a mailing list because you contacted us about a project.

06Consent

When you send us a message or engage us for work, you are consenting to us using your information for the purposes set out in section 05. Those purposes are the reason you got in touch, so none of them should be a surprise.

Related uses

We also use information for things directly connected to those purposes, such as answering a follow-up question, keeping a record of an engagement, or meeting an obligation that came out of it. That is the same purpose continuing, not a new one, and we do not treat it as requiring fresh consent.

A genuinely different purpose

If we ever want to use your information for something materially different, our commitment is a limit on us rather than a promise to chase you down: we will not do it without consent. If we do not have your consent, we simply do not apply the new purpose to your information. That is a rule we can keep for everyone, because the default is that nothing happens.

What that looks like in practice:

• We update this page and change the date at the top.
• For a material change we put a notice on the website rather than editing quietly.
• If you are an active client and we already hold your email for that work, we tell you directly.

We are deliberately not promising to contact every person who has ever emailed us. For a practice our size that would not be realistic, and a policy that promises something it cannot deliver is worse than one that is straight with you.

Withdrawing consent

Email support@morleymgmt.com at any time. We will confirm what it means in practice, since some information has to be kept to meet legal and accounting obligations, and withdrawing consent may mean we can no longer deliver an active engagement.

07Service providers and sharing

We run a small practice on ordinary business tools. That means a limited number of service providers may process information on our behalf, in categories such as email and scheduling, document storage, invoicing and payment processing, and video conferencing. They may only use it to provide their service to us.

We keep this deliberately short rather than listing vendors that may change. If you want to know exactly which providers hold information relating to you, ask us and we will tell you.

On the website specifically, and only if you have allowed the relevant category, the providers are Google (Analytics), Meta Platforms (the Facebook and Instagram pixel), and LinkedIn (the Insight Tag). Section 03 explains what each one does.

Beyond that, we disclose personal information only when:

• You ask us to, or agree to it
• The law requires it, such as a court order or a valid request from a regulator
• It is needed to establish or defend a legal claim

08Where it is stored, and for how long

Some of our service providers store or process information outside Canada, including in the United States. While information is in another country it may be accessible to the courts and law enforcement of that country under its laws. If this matters for your organization, raise it with us before an engagement starts and we will talk through the options.

We keep personal information only as long as we need it for the purpose it was collected, and for as long afterwards as our legal, tax, and professional obligations require. After that we delete it or make it anonymous. Enquiries that do not turn into work are deleted once it is clear there is nothing to follow up.

09How we protect it

We apply safeguards appropriate to how sensitive the information is: access limited to people who need it, reputable providers with encryption in transit and at rest, and confidentiality obligations in our client agreements.

No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires.

10Your rights

Under PIPEDA you can:

• Ask what we hold. Request access to the personal information we have about you, and an account of how it has been used and who it has been shared with.
• Correct it. Have inaccurate or incomplete information fixed.
• Withdraw consent, subject to legal and contractual limits.
• Ask us to delete it, where we are not required to keep it.
• Complain, to us first, and to the federal Privacy Commissioner if we do not resolve it.

Email support@morleymgmt.com and we will respond within 30 days, which is the period PIPEDA allows. We may need to verify who you are before releasing information, which protects you as much as us. There is no charge for a reasonable request.

11Changes to this policy

If we change how we handle personal information, we update this page and change the date at the top. For a material change, such as adding a service that stores your data, we put a notice on the website rather than editing the text quietly, and we ask for cookie consent again so nothing new runs on an old answer.

Section 06 sets out what happens if a change means using information you have already given us for a genuinely different purpose. The short version is that we do not do it without consent.

12Questions and complaints

Ask us first. We would rather hear a concern directly and fix it than have you take it elsewhere. Email support@morleymgmt.com or call 1-548-384-0200.

If we cannot resolve it, you have the right to complain to the Office of the Privacy Commissioner of Canada, which oversees PIPEDA.