Privacy Notice

MMM Creative Marketing Solutions
Last updated: October 3, 2026

MMM Creative Marketing Solutions ("MMM", "we", "us") is a marketing agency based in Toronto, Ontario. This notice explains how we collect, use, disclose, and protect personal information when you visit our website at mmmcreativemarketingsolutions.ca, request a Strategy Brief through our /brief page, or receive emails from us. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).

1. Who is responsible

MMM is responsible for personal information under its control. Our Privacy Officer is accountable for our compliance with this notice.

Privacy Officer: Dr.Saeed Ahmadi, Founder & CEO
Email: info@mmmcreativemarketingsolutions.ca
WhatsApp (messages only): +1 647-404-4842
If you message us on WhatsApp, WhatsApp's own privacy terms also apply.
Mailing address: 200 Bay Street, North Tower, Suite 1200, Office 1227, Toronto, ON M5J 2J2

2. What we collect

Information you give us. When you request a Strategy Brief, we collect the details you enter in the form, such as your name, business email address, company name, website, role, phone number (if provided), and any information you share about your business and marketing needs.

Business contact information from other sources. We may collect business contact information (such as name, job title, company and work email address) about professionals from public sources, such as company websites and press releases, and from third-party business-data providers. We use it only to contact people about MMM's services in relation to their professional role, and we honour any request to stop.

Consent records. If you tick the optional box to receive marketing emails, we record that you did so, the date and time, the wording you agreed to, and the page where you gave consent.

Technical information. When you visit our website, our hosting provider may automatically collect information such as your IP address, browser type, device information, pages visited, and referring page.

Campaign and ad-click information. If you arrive at our website from one of our advertisements or links, the web address may contain campaign tags (UTM parameters, such as the source, medium, and campaign name) and an ad-click identifier generated by the ad platform (for example, a Google "gclid" or TikTok "ttclid"). When you submit the /brief form, a hidden field records these values with your request. We use them only to understand which of our campaigns led to your request and to measure our marketing. Separately, if you accept analytics and advertising cookies, the tools described in Section 8 also collect information about your visit.

We ask only for the information we need. Please do not send us sensitive personal information (such as health or financial account details) through the form.

3. How we use it

We use personal information to:

• respond to your request and prepare and deliver your Strategy Brief;
• communicate with you about your request, including any follow-up questions;
• tell you about optional paid services related to your request, only as part of responding to that request;
• send you marketing emails, only if you have given express consent;
• measure which of our campaigns lead to brief requests, using the campaign tags and ad-click identifiers described in Section 2;
• if you accept analytics and advertising cookies, understand how visitors use our website, measure our advertising, and show MMM ads on Meta platforms (such as Facebook and Instagram) to people who have visited our site;
• operate, secure, and improve our website; and
• meet our legal and regulatory obligations and keep required records.

We will not use your information for a new purpose without first identifying that purpose and, where required, obtaining your consent.

4. Consent

By submitting the /brief form, you consent to our collecting and using your information to respond to your request as described above.

Marketing emails (CASL). We send commercial electronic messages only with your express consent, given by ticking the optional, unticked marketing box on our form, or where CASL otherwise permits. Ticking this box is not required to request a Strategy Brief.

Withdrawing consent. You can withdraw consent at any time, at no cost, by:

• clicking the unsubscribe link in any of our marketing emails; or
• contacting our Privacy Officer using the details in Section 1.

We act on unsubscribe requests promptly: the same business day wherever possible, and never later than 10 business days. Every marketing email we send identifies MMM, includes our mailing address and a way to contact us, and contains an unsubscribe link that works for at least 60 days after the message is sent. Withdrawing consent to marketing emails does not affect messages we need to send to respond to a request you made.

5. When we share information

We do not sell personal information. We share it only as described below.

• Service providers. We use trusted providers to host our website, host and deliver our email, and supply business contact information: Netlify (website hosting), Vercel (web form hosting), Resend (email delivery), an email hosting provider (for our info@ mailbox), and a third-party business-data provider that supplies publicly available business contact information. These providers may use the information only to perform services for us and must protect it.
• Analytics and advertising partners (only with your consent). If you accept non-essential cookies, Google (Google Analytics) and Meta Platforms (Meta Pixel) receive information about your visit, as described in Section 8. They use it under their own privacy policies as well as to provide services to us.
• Legal reasons. We may disclose information where required or permitted by law, for example in response to a valid legal request.
• Business transfers. If MMM's business is reorganized, sold, or merged, personal information may be transferred to the new owner, subject to appropriate protections.

Some of our web forms, including our project brief form, are hosted by Vercel Inc. (United States). Vercel processes technical data such as IP address and request logs to deliver and secure the site, on our behalf and under its data processing terms. Information you submit through these forms may therefore be stored or processed outside Canada, where it may be accessible to authorities under local law.

6. Storage outside Canada

Some of our service providers, and Google and Meta if you accept optional cookies, may store or process personal information outside Canada, including in the United States. When this happens, the information is subject to the laws of that country, and authorities there may be able to access it. We use contractual and other measures to protect personal information handled by our service providers.

7. How long we keep it

We keep personal information only as long as needed for the purposes described in this notice, or as required by law. Brief requests that do not become client engagements are deleted within 24 months of our last contact. We keep records of marketing consent and withdrawal for three years after our last communication with you, so we can show compliance with CASL. When we no longer need information, we delete or anonymize it securely.

8. Cookies and similar technologies

Cookies are small files that a website stores on your browser. We use two kinds.

Strictly necessary cookies. These are needed for the website to work and to remember your cookie choice. They are always on. We store your cookie choice for 12 months, then ask again.

Analytics and advertising cookies (optional). These are used only if you choose "Accept" in the cookie banner that appears when you first visit our site. Until you accept, these tools do not load and do not set cookies. If you choose "Reject", they stay off.

• Google Analytics (Google LLC). Helps us understand how visitors use our site, such as pages viewed, time on page, the website or ad that referred you, approximate location (city or region, based on your IP address), and device and browser type. It sets cookies such as _ga, which last up to 2 years unless you delete them. We have turned off Google signals and advertising features in Google Analytics, so this data is not used for Google ad personalization. Google processes this information, including in the United States. Google's privacy policy: https://policies.google.com/privacy. You can also use Google's opt-out browser add-on: https://tools.google.com/dlpage/gaoptout.
• Meta Pixel (Meta Platforms, Inc.). Helps us measure the results of our advertising and show relevant ads to people who visited our site. It records pages viewed and actions on our site (for example, submitting the /brief form), along with browser, device and IP information, and sends this to Meta. If you are logged in to Facebook or Instagram, Meta may link this to your account. It sets cookies such as _fbp, which last up to 90 days unless you delete them. We do not send the details you type into our forms (such as your name or email address) to Meta, and we do not use Meta's "Advanced Matching" feature. Meta processes this information, including in the United States. Meta's privacy policy: https://www.facebook.com/privacy/policy. You can manage ad preferences in your Meta account settings.

Changing your choice. You can change your choice at any time using the “Cookie settings” link in the footer of our website, or by deleting cookies in your browser settings. Withdrawing consent stops future collection; it does not affect information collected before you withdrew. Rejecting these cookies does not affect your ability to use our website or request a Strategy Brief.

Campaign tags and ad-click identifiers that appear in the web address are captured when you submit the /brief form, as described in Section 2, and stored with your request.

Cookies, analytics and advertising on our client brief form

Our private client brief form at mmm-brief.vercel.app or any successor address we publish uses the same cookie choice as our main website.

Nothing loads until you choose. Google Analytics 4 and the Meta Pixel are not loaded when you open the form. They load only if you click Accept in the cookie banner. If you click Reject, close the banner or press Escape, neither tool loads and no information about your visit is sent to Google or Meta.

What we record about your choice. We store your choice (accepted or rejected), the date and time you made it and the version of the banner in one strictly necessary first-party cookie named mmm_consent. It lasts 12 months, after which we ask again. Our servers can read this cookie so that they act only on the choice you made.

What is sent if you accept.

• Google Analytics 4 (Google LLC) receives information about your visit: the page address without any query string, browser and device details, an approximate location derived from your IP address, and the events “form started” and “brief submitted”. Google signals and ad personalization are switched off.
• Meta Pixel (Meta Platforms, Inc.) receives the events PageView, BeginBrief (you started the form) and SubmitBrief (you submitted it), along with technical details of your browser and the _fbp cookie. We use the results to measure our ads and to show MMM ads to past visitors on Facebook and Instagram.
• Never sent: we do not send the content of your brief to Google or Meta. That includes your name, email address, phone number, company details and anything you type in the form. We do not use Meta’s Advanced Matching feature.

We do not send your name, email address, phone number or other contact details to Meta or Google, whether in plain text or in hashed form.

Processing outside Canada. Google and Meta may process this information outside Canada, including in the United States. There it may be accessible to courts, law enforcement and national security authorities under local law.

How long it is kept.

• mmm_consent cookie: 12 months.
• Google Analytics cookies (_ga, _ga_<ID>): up to 2 years on your device. Event data is kept in Google Analytics for 2 months.
• Meta Pixel cookie (_fbp): up to 90 days on your device. Data Meta keeps is held under Meta’s own Privacy Policy (https://www.facebook.com/privacy/policy).
• The brief you submit, which is not shared with Google or Meta, is kept for up to 24 months after our last contact with you, or longer if it becomes part of a client engagement or we are required by law to keep it.

Changing your mind. You can withdraw or change your choice at any time with the Cookie settings link at the bottom of the form and of every page of our website. When you withdraw, we stop loading Google Analytics and the Meta Pixel and delete their cookies (_ga, _ga_*, _gid, _gat*, _fbp, _fbc) from your browser. Withdrawing does not affect anything collected before you withdrew.

Contact. For any question about this notice or your personal information, or to ask for access to or correction of your information, contact our Privacy Officer, Saeed Ahmadi, at info@mmmcreativemarketingsolutions.ca, or write to MMM Creative Marketing Solutions, 200 Bay Street, North Tower, Suite 1200, Office 1227, Toronto, ON M5J 2J2.

9. How we protect it

We use reasonable physical, organizational, and technical safeguards appropriate to the sensitivity of the information. These include access limited to people who need it, secure service providers, and encrypted connections (HTTPS). No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the Office of the Privacy Commissioner of Canada where required by law if a breach creates a real risk of significant harm.

10. Your rights

You may ask to access the personal information we hold about you, ask us to correct it if it is inaccurate or incomplete, or withdraw your consent, subject to legal and contractual limits. To make a request, contact our Privacy Officer using the details in Section 1. We will respond within 30 days, or tell you if we need more time as permitted by law. We may need to verify your identity before responding.

11. Children

Our services are intended for businesses. We do not knowingly collect personal information from anyone under the age of majority in their province or territory.

12. Questions and complaints

If you have a question or concern about how we handle personal information, please contact our Privacy Officer first. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

13. Changes to this notice

We may update this notice from time to time. We will post the updated version on this page with a new "Last updated" date. If we make a significant change to how we use personal information, we will seek any consent required by law.