Privacy Policy

MarTech Canvas handles different types of information for different purposes. It is important to distinguish between personal information and the organisational intelligence that customers use within the platform.

Personal information

Personal information is information that identifies, relates to, describes or can reasonably be associated with an individual, depending on the definition under applicable law.

The personal information we intentionally collect may include:

• name
• email address
• organisation or business name
• role or job title
• account and authentication information
• registration-of-interest information
• business objectives or areas of interest you choose to identify
• marketing preferences and consent records
• subscription and account administration information
• communications with MarTech Canvas
• information associated with privacy, support or service requests

Customer business information and intellectual property

MarTech Canvas is primarily designed to process organisational and business information, rather than customer-level first-party personal data.

Customers may use MarTech Canvas to provide, develop or generate information such as:

• business strategies and objectives
• market intelligence
• brand strategies
• product and service information
• offerings and pricing
• commercial and revenue assumptions
• audience models and customer segments that do not identify individuals
• customer experience strategies
• Marketing, Sales and Service strategies
• organisational capabilities
• operating models
• technology requirements and architecture
• investment assumptions and scenarios
• strategic priorities
• roadmaps
• transformation plans and requirements
• business assumptions and decisions
• simulations and scenarios
• AI-generated organisational analysis and intelligence

This information may be confidential, commercially sensitive and constitute valuable intellectual property belonging to the customer.

Business information that does not relate to an identified or identifiable individual is not personal information merely because it is confidential or commercially sensitive.

Customers retain ownership of the business information and intellectual property they provide to MarTech Canvas. MarTech Canvas does not acquire ownership of that information merely because it is entered into, stored in or processed through the platform.

We treat customer business information as confidential and apply appropriate security and access controls to protect it, including where the information does not constitute personal information under applicable privacy law.

Incidental personal information

MarTech Canvas is not designed as a CRM, customer data platform, marketing automation platform or repository for customer-level first-party data.

Customers should not use MarTech Canvas to upload databases or datasets containing personal information about their customers, prospects, employees or other individuals unless that functionality is expressly supported by MarTech Canvas.

However, personal information may occasionally appear within organisational information provided by customers.

For example, business information could identify an executive, employee or stakeholder in the context of their organisational responsibilities.

Where personal information is included in customer-provided business information, the customer is responsible for ensuring that it has appropriate authority or another lawful basis to provide and use that information.

Technical and service information

When you use our website or platform, we or our service providers may collect technical and operational information such as:

• IP address
• browser and device information
• authentication information
• session information
• security and access logs
• usage information
• cookies and similar technologies
• diagnostic and performance information

Some of this information may constitute personal information under applicable privacy laws.

We may collect personal information directly from you when you:

• register your interest in MarTech Canvas
• subscribe to communications
• create or manage an account
• sign in or authenticate
• administer an organisation's MarTech Canvas account
• purchase or subscribe to services
• use the website or platform
• contact or communicate with us
• make a privacy or support request
• otherwise interact with MarTech Canvas

Certain technical and usage information may be collected automatically when you use our website or platform.

We may also receive information from services or integrations that you or your organisation choose to connect to MarTech Canvas.

Where required by applicable law, we will provide appropriate information about collection and intended use at or before the point at which personal information is collected.

We may use personal information to:

• provide and operate MarTech Canvas
• establish and administer accounts
• authenticate users
• provide subscriptions and requested services
• manage registrations of interest
• understand the interests of prospective customers
• communicate with users and account administrators
• provide support and respond to requests
• maintain the security and integrity of our systems
• prevent misuse, fraud and security threats
• maintain operational and audit records
• understand how our services are used
• improve our website, platform and user experience
• comply with legal and regulatory requirements
• establish, exercise or defend legal rights
• send marketing communications where permitted by applicable law

We seek to collect and use personal information only where it is reasonably necessary and proportionate to the relevant purpose.

Information provided by customers to MarTech Canvas may contain confidential, commercially sensitive business information and intellectual property.

MarTech Canvas processes customer business information only as reasonably necessary to provide, operate, secure and improve the services and functionality made available through the platform, including consultation, analysis, synthesis, simulation, evaluation and planning.

Customers retain ownership of the business information and intellectual property they provide to MarTech Canvas. MarTech Canvas does not acquire ownership of that information merely because it is entered into, stored in or processed through the platform.

We treat customer business information as confidential and apply appropriate security and access controls to protect it, including where the information does not constitute personal information under applicable privacy law.

MarTech Canvas does not disclose customer business information except where reasonably necessary to provide or secure the service, where authorised by the customer, or where required or authorised by law.

Artificial intelligence is an integral part of MarTech Canvas.

Customer business information and other information submitted through the platform may be processed using AI-enabled services to provide functionality including:

• consultation
• analysis
• synthesis
• simulation
• evaluation
• recommendations
• planning
• other Executive Intelligence capabilities

MarTech Canvas uses authorised AI and technology service providers to provide certain platform functionality. Information may be processed by these providers where necessary to provide the relevant service, subject to applicable contractual, privacy, confidentiality and security requirements.

MarTech Canvas is designed to support human judgement and decision-making.

MarTech Canvas advises. People decide.

AI-generated analysis, recommendations and other outputs should therefore be considered decision support rather than a substitute for appropriate human judgement.

Where applicable privacy law provides rights concerning automated decision-making or automated processing of personal information, MarTech Canvas will respect those rights.

Where applicable law requires us to identify a legal basis for processing personal information, our basis will depend on the circumstances and may include:

Contract — where processing is necessary to provide services requested by you or your organisation or to take steps before entering into a contract.

Legitimate interests — where processing is reasonably necessary to operate, secure, administer and improve MarTech Canvas or conduct our business, provided those interests are not overridden by applicable individual rights.

Consent — where you have freely provided consent for a particular purpose.

Legal obligation — where processing is necessary to comply with applicable law.

Other lawful bases may apply where permitted by the relevant jurisdiction.

Where we rely on consent, you may withdraw that consent subject to applicable law.

You may choose to receive MarTech Canvas news, insights, updates and other marketing communications.

Where consent is required, we request marketing consent separately from registration for or use of MarTech Canvas.

Marketing consent is voluntary.

You can unsubscribe at any time using the unsubscribe mechanism provided in our marketing communications or by contacting us.

Withdrawing marketing consent will not prevent us from sending communications reasonably necessary to administer your account, provide requested services, communicate security or service information, respond to requests, or fulfil other non-marketing purposes.

We maintain consent and communication records where reasonably necessary to demonstrate and manage marketing preferences.

We may disclose or make personal information and customer business information available to service providers where reasonably necessary to operate MarTech Canvas.

These may include:

• cloud infrastructure and hosting providers
• AI and technology service providers
• authentication providers
• communications and email providers
• analytics providers
• payment processors
• security and monitoring providers
• professional advisers
• other technology providers required to deliver the services

We may also disclose information where required or authorised by law, to protect MarTech Canvas, our customers, users or others, or in connection with a proposed or completed merger, acquisition, financing, restructuring or sale of all or part of our business, subject to appropriate confidentiality and privacy protections.

We require service providers handling information on our behalf to be subject to appropriate contractual, privacy, confidentiality and security obligations.

MarTech Canvas does not sell personal information for monetary consideration as part of its business model.

MarTech Canvas is an Australian company using technology infrastructure and service providers that may operate internationally.

Information processed through MarTech Canvas may be transferred to, stored in or processed outside the country in which you are located, including in the United States and other jurisdictions in which our technology service providers and their subprocessors operate.

Data residency does not necessarily mean that all processing occurs exclusively within the location in which information is stored.

Where required by applicable law, MarTech Canvas will take appropriate steps to protect personal information transferred internationally. These may include contractual safeguards, recognised international transfer mechanisms, comparable protection requirements or other legally permitted safeguards.

We take reasonable technical, organisational and administrative measures designed to protect personal information and customer business information from loss, misuse, interference, unauthorised access, disclosure, alteration and destruction.

MarTech Canvas uses cloud infrastructure and technology service providers that apply security controls including encryption of platform data in transit and at rest.

The core technology infrastructure supporting MarTech Canvas is provided through service providers that maintain SOC 2 Type II and ISO/IEC 27001 certifications. These independent assurance frameworks support the security controls and information-security management practices of the underlying infrastructure used to deliver MarTech Canvas.

Access to information is restricted according to appropriate operational and security requirements.

No internet-based service or electronic storage system can be guaranteed to be completely secure. We therefore maintain and review security measures appropriate to the nature and sensitivity of the information processed through MarTech Canvas.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, regulatory, security and legitimate business requirements.

Retention periods may vary depending on the type of information and its purpose.

Customer business information is retained for as long as reasonably necessary to provide the MarTech Canvas service and meet applicable legal, security, backup and legitimate business requirements.

Where a customer ceases using MarTech Canvas, customer business information will be handled in accordance with our applicable retention and deletion practices.

When information is no longer required, we take reasonable steps to delete, destroy or de-identify it as appropriate, subject to legitimate legal, security, backup and record-keeping requirements.

MarTech Canvas may use cookies and similar technologies necessary to operate the website and platform, authenticate users, maintain sessions, remember preferences, maintain security, diagnose technical issues and understand how our services are used.

We may use analytics technologies to understand and improve our website, platform and user experience.

Where applicable law requires consent before non-essential cookies or similar technologies are used, we will request that consent.

Where applicable law provides rights to opt out of certain tracking, advertising or data-sharing activities, we will provide the controls required by that law.

Your privacy rights depend on your location, our relationship with you and the privacy laws that apply.

Subject to applicable requirements and exceptions, you may have rights to:

• know whether we process personal information about you
• access personal information
• obtain information about how it is collected, used or disclosed
• correct inaccurate or incomplete information
• request deletion
• withdraw consent
• object to or restrict certain processing
• object to direct marketing
• request portability of certain information
• opt out of certain sale, sharing or targeted advertising activities
• limit certain uses of sensitive personal information
• complain to an applicable privacy or data-protection regulator

We will not discriminate against an individual for exercising a privacy right where prohibited by law.

We may need to verify your identity before fulfilling certain requests.

Where Australian privacy law applies, MarTech Canvas will handle personal information in accordance with applicable requirements of the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

You may request access to or correction of personal information we hold about you and may raise a privacy complaint with us.

If you are not satisfied with our response, you may have the right to contact the Office of the Australian Information Commissioner (OAIC).

Where the New Zealand Privacy Act 2020 applies, individuals may have rights including access to and correction of personal information.

Where personal information is disclosed outside New Zealand, MarTech Canvas will address applicable overseas-disclosure requirements, including requirements relating to appropriate or comparable safeguards.

You may have the right to complain to the Office of the Privacy Commissioner of New Zealand.

Where the UK General Data Protection Regulation and Data Protection Act 2018 apply, individuals may have rights including access, rectification, erasure, restriction, objection, data portability and rights concerning certain automated decision-making.

Where processing is based on consent, you may withdraw that consent without affecting processing lawfully undertaken before withdrawal.

You may object to the use of your personal information for direct marketing.

You may have the right to complain to the UK Information Commissioner's Office (ICO).

Where Canadian privacy law applies, MarTech Canvas will handle personal information in accordance with applicable federal and provincial privacy requirements.

Depending on the applicable law, individuals may have rights concerning access, correction, consent and the handling of their personal information.

MarTech Canvas will also address applicable requirements governing commercial electronic communications, including consent, sender identification and unsubscribe requirements.

You may have the right to complain to the Office of the Privacy Commissioner of Canada or an applicable provincial privacy regulator.

Where Singapore's Personal Data Protection Act applies, MarTech Canvas will address applicable obligations concerning notification, consent, purpose limitation, access, correction, protection, retention, overseas transfers and accountability.

MarTech Canvas will maintain an appropriate privacy contact or Data Protection Officer function where required.

You may have the right to raise a matter with Singapore's Personal Data Protection Commission (PDPC).

Privacy rights in the United States vary by state.

Where an applicable US state privacy law applies to MarTech Canvas, residents may have rights including access, correction, deletion, portability, information about data-processing practices and rights to opt out of certain processing activities.

California

Where the California Consumer Privacy Act, as amended, applies to MarTech Canvas, California residents may have applicable rights including:

• the right to know about personal information collected and how it is used or disclosed
• the right to request deletion
• the right to correct inaccurate personal information
• the right to opt out of the sale or sharing of personal information
• the right to limit certain uses or disclosures of sensitive personal information
• the right not to receive discriminatory treatment for exercising applicable privacy rights

MarTech Canvas does not sell personal information for monetary consideration as part of its business model.

If MarTech Canvas engages in activities legally defined as the "sale" or "sharing" of personal information, we will provide applicable notices and opt-out mechanisms.

MarTech Canvas is a business platform intended for use by organisations and business users.

It is not designed or marketed for use by children.

We do not knowingly seek to collect personal information directly from children through MarTech Canvas.

If we become aware that personal information relating to a child has been collected in circumstances requiring additional consent or protection, we will take appropriate action.

MarTech Canvas may support integrations with third-party services.

Where you or your organisation chooses to connect another service, information may be exchanged with that service as necessary to provide the requested integration.

Third-party services operate under their own terms, security practices and privacy policies.

Customers should review those terms and policies before choosing to connect a third-party service.

If you wish to exercise an applicable privacy right, ask a question about this Privacy Policy or make a complaint about our handling of personal information, please contact:

We may request information reasonably necessary to verify your identity before fulfilling a privacy request.

We will respond within the period required by applicable law.

If you are dissatisfied with our response, you may also have the right to contact the relevant privacy or data-protection regulator in your jurisdiction.

We may update this Privacy Policy as MarTech Canvas develops, our services or information-handling practices change, our technology providers change, we enter additional markets or applicable legal requirements evolve.

The current version will be published on the MarTech Canvas website and identified by its "Last updated" date.

Where a change materially affects how we handle personal information, we will provide additional notice where required by applicable law.