Privacy Policy

M2P Consulting Inc. ("M2P", "we", "us", or "our") is committed to protecting your privacy. This policy explains how we collect, use, share, and protect personal data when you visit our website or interact with us, and the rights you have over your data. Where the EU General Data Protection Regulation (GDPR) or the UK GDPR applies, we process personal data in accordance with those regulations.

Who we are (data controller)

M2P Consulting is the data controller responsible for the personal data processed through this website. We operate across North America, the Middle East, and Europe. For any privacy matter — including the contact details of our data protection point of contact — you can reach us via our contact page or at inquiries@m2p.us.

Information we collect

We collect only the data needed for the purposes below:

• Contact & inquiry data — name, company, email, industry, and the content of your message, when you use our contact form.
• Newsletter data — your email address, when you subscribe.
• Job application data — name, email, phone number, the role applied for, and any CV/résumé or details you submit.
• Technical data — IP address, browser type, pages visited, and referring URLs, collected automatically in server logs to operate and secure the site.

How we use your information and our legal basis

Under the GDPR we rely on the following legal bases (Article 6):

• Responding to inquiries — to reply to your contact-form messages. Basis: our legitimate interest in responding, or steps taken at your request prior to entering a contract.
• Job applications — to assess and manage your application. Basis: steps taken prior to entering a contract, and/or your consent.
• Newsletter — to send insights you asked to receive. Basis: your consent, which you may withdraw at any time via the unsubscribe link or by contacting us.
• Operating and securing the website — to maintain, protect, and improve the site. Basis: our legitimate interest.

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

Cookies and similar technologies

This website does not use advertising or third-party tracking cookies. We use only strictly necessary cookies required for core functionality (for example, when a team member signs in to our content management system). Web fonts are served by Google Fonts, which may receive your IP address as part of delivering those fonts.

How we share your information

We share personal data only with service providers ("processors") who act on our instructions, and only as needed to run this website:

• Netlify — website hosting and form handling (contact, newsletter, and application submissions).
• Google — delivery of web fonts.

We may also disclose data where required by law. We do not sell or rent personal data to anyone.

International data transfers

Our service providers may process data in the United States. Where personal data is transferred outside the EU/EEA or the UK, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework — to ensure your data receives an equivalent level of protection.

Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Inquiry messages are kept while we handle your request and for a reasonable period afterward; job application data is retained for up to 12 months; newsletter data is kept until you unsubscribe.

How we protect your data

We apply appropriate technical and organizational measures to protect personal data, including encryption in transit (HTTPS/TLS), access controls limiting who can view submissions, and the use of reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to safeguard your data and to address any incidents promptly.

Your rights under the GDPR

If the GDPR applies to you, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data ("right to be forgotten");
• restrict or object to our processing;
• request portability of the data you provided to us;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us via our contact page or at inquiries@m2p.us. You also have the right to lodge a complaint with your local data protection supervisory authority.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and where required we will seek your consent.

Contact

If you have questions about this privacy policy or our data practices, please contact us via our contact page or at inquiries@m2p.us.