Privacy Policy

1. Who We Are

This Privacy Policy is provided by Mike Kwal Digital Inc., a corporation doing business as MK-Way and Brand Codex (collectively, "MK-Way," "we," "our," or "us"). We provide brand documentation services and related digital products to entrepreneurs, business owners, and creative professionals through brand-codex.com and related properties. We act as the data controller for personal information collected through our services and comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and Canadian privacy legislation (PIPEDA).

2. Who We Collect Personal Information From

We collect personal information from website visitors, prospective customers who submit forms or interact with our content, paying customers who purchase Brand Codex deliverables and related services, and business partners (vendors, affiliates, contractors). Personal information includes any data that can be used to identify you or that can reasonably be linked to you — for example, your name, address, telephone number, email address, business URL, or payment details.

3. What We Collect

We collect two categories of information: (a) non-personal information that is collected automatically when you interact with our online resources, and (b) personal information that you voluntarily provide to us with your consent through forms, account registration, purchases, or direct communications.

3.1 Voluntarily Submitted Personal Information

Examples of information you may voluntarily provide:

• Identifiers: name, email address, telephone number, mailing address, billing address.
• Professional information: business name, business URL, role, industry.
• Financial information: billing details processed by our payment provider (we do not see or store full payment card numbers — see Section 5).
• Communications: messages, feedback, survey responses, and any content you submit through our website, email, or support channels.
• Brand assets: logos, imagery, copy, website content, and other brand materials you provide or authorize us to access for the purpose of producing your Brand Codex.

3.2 Automatically Collected Non-Personal Information

When you interact with our online resources, we may automatically collect certain non-personal information using tracking technologies (such as cookies, pixels, tags, and software development kits). This may include:

• Device information: operating system, browser type, screen resolution, device identifiers.
• Usage information: pages viewed, links clicked, referral source, session duration, UTM parameters.
• Approximate location: derived from IP address (city/region level — not precise GPS unless you affirmatively grant location access in your device settings).
• Analytics signals: events, conversions, and aggregated behavior reported by Google Analytics 4 and the Meta Pixel.

This information is generally not used to identify you personally, but it may be combined with personal information you have provided in order to improve our services and marketing.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To deliver our products and services — including producing your Brand Codex from your existing website and brand assets, fulfilling workshop and add-on purchases, and managing your account.
• To communicate with you — using the channels you have voluntarily provided (email, telephone, SMS where applicable) to confirm orders, deliver products, provide customer support, and respond to your inquiries. We may use automated systems and human staff to facilitate these communications.
• To improve our services — through analysis of aggregated usage data, customer feedback, and performance metrics.
• To prevent fraud and protect our business — including verifying transactions, detecting suspicious activity, and enforcing our Terms of Service.
• To market our services — including sending newsletters, promotional content, and tailored advertising where permitted by law and consistent with your preferences. You may opt out of marketing communications at any time (see Section 7).
• To comply with legal obligations — including tax, accounting, regulatory, and law enforcement requirements.

5. When and With Whom We Share Information

We do not sell, rent, or trade your voluntarily submitted personal information to third parties. We have not sold personal information in the past twelve months.

We may share information in the following limited circumstances:

• Service providers and vendors who perform functions on our behalf and are contractually bound to handle your data securely and only for authorized purposes. These currently include: Stripe (payment processing), GoHighLevel (CRM and email/SMS delivery), Netlify (website hosting), Wistia (video hosting), Meta (advertising and Pixel/Conversions API), Google (Analytics 4), and similar infrastructure providers.
• Affiliates and contractors we engage to produce your Brand Codex deliverables, who are bound by confidentiality and data-handling obligations.
• Legal and regulatory disclosures when required by law, court order, or to protect our legal rights, your safety, or the safety of others.
• Business transfers in connection with a merger, acquisition, financing, or sale of all or part of our business — in which case we will provide notice before your information is transferred.

6. How We Protect Your Information

We implement reasonable technical and organizational safeguards designed to protect your information, consistent with industry standards. These include encrypted data transmission (TLS/SSL), restricted access controls, vendor security reviews, and regular review of our data-handling practices. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Options

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — request correction of inaccurate or incomplete information.
• Deletion — request that we delete your personal information, subject to legal retention requirements.
• Portability — request a copy of your information in a portable, machine-readable format.
• Restriction or objection — restrict or object to certain types of processing, including direct marketing.
• Withdrawal of consent — withdraw any consent you have previously given.
• Opt out of marketing communications — by clicking the unsubscribe link in any non-transactional email, or by contacting us directly. Transactional and service-related communications (order confirmations, delivery notices, account notifications) cannot be opted out of while you are an active customer.

To exercise any of these rights, email support@mk-way.com with the subject line "Privacy Request." We will respond within the timeframe required by applicable law.

8. Cookies and Tracking Technologies

We use cookies, pixels, tags, and similar technologies to recognize your device, remember your preferences, understand how our site is used, and deliver targeted advertising. The principal third-party tools we use are Google Analytics 4, the Meta Pixel (with the Meta Conversions API for server-side measurement), and GoHighLevel tracking. Hashed identifiers may be shared with these providers to enable advertising attribution and audience matching.

You may control cookies through your browser settings, opt out of Google Analytics via Google's tools, and adjust ad personalization through Meta and Google's privacy controls. Disabling cookies may affect site functionality.

9. Do Not Track Signals

Our website does not currently respond to "Do Not Track" browser signals, as no industry standard for honoring such signals has been finalized.

10. Children's Privacy

Our services are intended for users 18 years of age and older. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a person under 18, we will delete it promptly. If you believe a minor has provided information to us, please contact us at support@mk-way.com.

11. California Privacy Rights (CCPA/CPRA)

California residents have the right to request access to, deletion of, and correction of their personal information; to opt out of the "sale" or "sharing" of personal information; and to limit the use of sensitive personal information. We do not sell personal information and have not done so in the past twelve months. To exercise your California privacy rights, email support@mk-way.com with the subject line "California Privacy Request" or "Do Not Sell or Share My Personal Information."

12. GDPR Rights (EEA, UK, Switzerland)

If you are a resident of the European Economic Area, the United Kingdom, or Switzerland, you have the rights described in Section 7 above as well as the right to lodge a complaint with your local supervisory authority. Our legal bases for processing personal data include: (a) your consent, (b) the performance of a contract with you, (c) compliance with a legal obligation, and (d) our legitimate interests in operating, securing, and improving our business, balanced against your rights and interests.

13. Other Jurisdictions

Residents of other jurisdictions (including Canada, Virginia, Colorado, Connecticut, Utah, and similar) may have rights to access, correct, delete, or opt out of certain processing of their personal information. We will honor such requests as required by applicable law. Contact us at support@mk-way.com to exercise these rights.

14. Third-Party Links

Our website may contain links to external sites and services we do not control. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy practices of any third-party site you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide additional notice (such as an email to active customers or a prominent notice on our website) where required by law. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

16. Contact Us

Questions about this Privacy Policy or our data practices? Contact us at:

Mike Kwal Digital Inc.
DBA MK-Way / Brand Codex
Email: support@mk-way.com