Last updated: 20 August 2026
The Kay Media (“we,” “us,” “our”) operates the website thekaymedia.com. This privacy policy explains what personal information we collect, why we collect it, how we use it, and what rights you have under Canadian privacy law.
We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL). If you are located in Quebec, we also respect your rights under Quebec’s Law 25 (Act respecting the protection of personal information in the private sector).
Information we collect
We collect personal information only when you choose to provide it. We do not buy, scrape, or harvest data from third-party sources.
Information you give us directly
- Waitlist and contact forms. When you fill out our consultation request form, we collect your name, email address, phone number, and any details you include in your message. This form is hosted by Bonsai (hellobonsai.com), a third-party scheduling and invoicing platform.
- Email correspondence. When you email us, we keep the contents of your message, your email address, and any attachments you send.
- Phone calls. If you call us, we may keep notes about the conversation for follow-up purposes. We do not record calls.
Information collected automatically
- Server logs. Our web hosting provider (Hostinger) records standard server logs, including your IP address, browser type, referring URL, pages viewed, and timestamps. These logs are used for security monitoring and troubleshooting.
- Cookies. Our site uses cookies that are necessary for the website to function. WordPress sets session cookies to manage site features. Our caching system (LiteSpeed Cache) may set cookies to improve page load speed. Our security plugin may set cookies for login protection and brute-force prevention.
How we use your information
We use the personal information we collect for these purposes and no others:
- To respond to your inquiry and follow up on potential consulting engagements
- To deliver our marketing consulting services if you become a client
- To send you information you requested (reports, proposals, deliverables)
- To maintain the security of our website and protect against unauthorized access
- To comply with legal obligations
We do not use your personal information for automated decision-making or profiling. We do not sell, rent, or trade your personal information to any third party for marketing purposes.
Third-party services
We use a limited number of third-party services that may process personal information on our behalf:
- Bonsai (hellobonsai.com) — handles our waitlist and consultation booking forms. When you submit a form, your data is processed by Bonsai under their own privacy policy.
- Hostinger — our web hosting provider. Servers are located in data centres that comply with industry-standard physical and network security measures.
- Google (Search Console, Business Profile) — we use Google services to manage our online presence and monitor website performance. Google may collect anonymized usage data through these services.
- WordPress.org — our site runs on WordPress, which uses cookies for core functionality. No personal data is transmitted to WordPress.org through normal site usage.
We do not share your personal information with any third party except as described above, or when required by law (for example, in response to a court order or lawful request by a government authority).
Cookies
Our website uses the following types of cookies:
- Strictly necessary cookies. These are required for the website to function. They include WordPress session cookies and security-related cookies. You cannot opt out of these without affecting site functionality.
- Performance cookies. Our caching system sets cookies to serve pages faster. These cookies do not collect personal information and are used solely to improve load times.
We do not use advertising cookies, remarketing pixels, or social media tracking cookies. Most web browsers allow you to control cookies through their settings. Blocking all cookies may affect your ability to use parts of our website.
Data retention
We keep your personal information only as long as necessary for the purpose it was collected:
- Inquiry and waitlist data: retained for up to 24 months after your last interaction with us, then deleted.
- Client records: retained for the duration of our business relationship plus 7 years, as required by Canadian tax law.
- Server logs: automatically deleted by our hosting provider after 90 days.
Your rights under PIPEDA
Under Canadian privacy law, you have the right to:
- Access your data. You can ask us what personal information we hold about you and receive a copy.
- Correct your data. If any information we hold is inaccurate or incomplete, you can ask us to correct it.
- Withdraw consent. You can withdraw your consent to our collection or use of your personal information at any time. Withdrawal of consent may limit our ability to provide services to you.
- Delete your data. You can ask us to delete your personal information, subject to legal retention requirements.
- File a complaint. If you believe we have handled your personal information improperly, you can file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.
To exercise any of these rights, contact us using the details below. We will respond to your request within 30 days.
Anti-spam (CASL) compliance
We comply with Canada’s Anti-Spam Legislation. We will not send you commercial electronic messages unless you have given us express or implied consent. Every marketing email we send includes a clear unsubscribe mechanism that takes effect within 10 business days. Submitting a consultation request form does not automatically subscribe you to a mailing list.
Data security
We take reasonable measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include HTTPS encryption across our entire website, security headers (HSTS, X-Frame-Options, X-Content-Type-Options), firewall and brute-force protection, regular security monitoring, and restricted access to personal data on a need-to-know basis.
No method of electronic transmission or storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.
Children’s privacy
Our services are directed at business owners and professionals. We do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to this policy
We may update this privacy policy from time to time. When we do, we will revise the “last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the revised policy.
Contact us
If you have questions about this privacy policy or want to exercise your privacy rights, contact us:
The Kay Media
Toronto, Ontario, Canada
Phone: (437) 315-8885
Email: hello@thekaymedia.com