1. Information We Collect

We may collect the following information when you interact with this Website:

• Name
• Email address
• Phone number (where provided)
• Organization name and title
• Event details submitted through booking or speaker inquiry forms
• Newsletter subscription information
• Correspondence you send us directly

We may also collect limited technical information automatically, including IP address, browser type, device type, pages visited, and general website analytics, through the tools listed in Section 7.

We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has submitted personal information to us, contact us and we will delete it.

2. How Your Information Is Used

Your information is used only for the purposes for which it was collected, which may include:

• Responding to speaking inquiries and managing event bookings
• Coordinating logistics for confirmed engagements
• Sending newsletters or updates, if you have subscribed
• Improving Website functionality and content
• Analyzing website usage in aggregate, non-identifying form
• Internal record-keeping related to outreach and partnership development

Your information is never sold to third parties. We do not use your personal information for any purpose beyond what is described in this policy without asking for your consent first.

3. Use of AI Tools in Handling Your Information

As part of how CMRA operates, team members may use AI-assisted tools to help draft responses to inquiries, correspondence, or outreach communications. Where personal information you have shared with us (such as your name, organization, or event details) is used as context for an AI-assisted draft, that draft is always reviewed and finalized by a human member of the CMRA team before being sent to you. AI tools used for this purpose are provided by third parties whose infrastructure may be located outside Canada, including in the United States, and your information may be processed on servers in that jurisdiction as a result, subject to the laws of that jurisdiction. We do not use AI tools to make automated decisions about you, your inquiry, or any booking.

4. Email Communications

If you subscribe to Carol Murray's newsletter or updates, you may receive emails related to:

• Resilience and leadership insights
• Speaking updates and availability
• Blog content
• Event announcements
• Products

These communications are sent in accordance with Canada's Anti-Spam Legislation (CASL). Every commercial email includes our identification information and a functioning unsubscribe mechanism. You may unsubscribe at any time using the link provided in any email, or by contacting us directly.

5. Your Rights (Canadian Visitors)

Under PIPEDA, you have the right to:

• Ask what personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent for our collection, use, or disclosure of your information, subject to legal or contractual restrictions
• Request that we delete your personal information, where retention is not otherwise required

To exercise any of these rights, contact us using the details in Section 11. We will respond within a reasonable time and at no cost to you, except in limited circumstances permitted by law.

6. Your Rights (European Visitors — GDPR)

If you are located in the European Economic Area (EEA), you additionally have the right to:

• Request access to your personal data
• Request correction of inaccurate information
• Request deletion of your personal data ("right to be forgotten")
• Withdraw consent for data processing
• Request a copy of your data in a portable format

Requests may be submitted via email using the contact details in Section 11.

7. Third-Party Services

This Website and CMRA's operations may use trusted third-party services, including:

• Website hosting: Google
• Email/newsletter platform: Google
• Website analytics: Google
• Content and CRM tools used internally (e.g., basecamp) for managing booking inquiries

These services may collect or process limited information on our behalf, including anonymous usage data. Some of these providers are based outside Canada, meaning your information may be stored or processed on servers outside Canada and could be accessible under the laws of that jurisdiction. We select providers that maintain reasonable security and privacy standards, and we only share the minimum information necessary for them to perform their function.

8. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy, or as required by law. Booking and outreach records are generally retained for the duration of an active relationship plus a reasonable follow-up period, after which they are deleted or anonymized.

9. Data Protection and Breach Notification

We use reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, misuse, or disclosure. No online system can guarantee absolute security. In the event of a breach of security safeguards that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA.

10. Cookies

This Website may use cookies and similar technologies to improve user experience and analyze website traffic. You can disable cookies through your browser settings; doing so may affect some Website functionality.

11. Contact

For privacy-related questions, access requests, or complaints, contact:

Lisa Hayward, Privacy Officer

lisa@carolmurray.ca

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect immediately upon posting, with the "Last Updated" date revised accordingly.