Privacy Protection Policy

Last Updated: July 7, 2026

Grylnut Studio (“we,” “our,” or “us”) respects your absolute data privacy. This Policy details our secure methodologies under the Personal Information Protection and Electronic Documents Act (PIPEDA), Canadian Anti-Spam Legislation (CASL), and Quebec Law 25 parameters, in synchronization with the corporate laws of our global parent hub situated in India.

1. Accountability Principles

Operational data collection is globally overseen by our parent enterprise based in India, with precise localized execution performed inside Canadian borders. We take ultimate corporate accountability for every informational transaction processed via our systems.

2. Types of Data We Collect

We gather personal records solely when they are explicitly submitted to our Lead Capture registration database: First Name, Last Name, Email address, Phone number, and specific learning objectives. We never use background scraping tools.

3. Formspree Technical Processor Disclosure

Our contact forms run through the secure services of Formspree, Inc., an American organization. By submitting a registration request, you agree that your information is forwarded to Formspree for structured packaging. Formspree protects all transferred records in strict compliance with Standard Contractual Clauses (SCCs) and robust data security protocols.

4. Usage and Consent (CASL Compliance)

We collect information strictly to organize digital consultations and deliver scheduled platform links. Under CASL legislation, you are required to check our express consent box during form submission. You retain the absolute right to revoke this consent at any point by emailing [email protected].

5. PIPEDA Security Disclosures

Information assets are stored inside heavily guarded, encrypted databases. We do not engage in information marketing, trade, or sales. Your data remains strictly inside Grylnut and our parent administrative team.

6. Cookie Mechanisms

We utilize basic essential session cookies to run secure navigation and maintain state configurations. Optional performance cookies are only activated when a visitor clicks “Accept All” on our local consent banner.

7. Quebec Law 25 Compliance Statement

For our Quebec residents, our global Parent Holding has assigned our designated Data Protection Officer (DPO) to handle local database audits, quick breach responses, and absolute right-to-be-forgotten requests. Direct inquiries to [email protected].

8. Right of Access and Correction

You can inspect, alter, or permanently wipe out any record we retain. Reach out to our customer mailbox at [email protected], and your details will be erased from our systems within 10 days.

9. Indian Juridical Integration

Operational files, data structures, and financial backing records are governed under the jurisdictional framework of India, in perfect coordination with Canadian national acts. Any conflict is evaluated under mutual international transparency parameters.