Building wealth together through informed investment choices

Privacy Policy | Mumulus Family Investing

Privacy Policy

Understanding how Mumulus handles the information you share with us when accessing family investment guidance and educational resources through our platform.

Effective: February 1, 2026

Operating mumulus.com means we receive details about the families and individuals who visit our site, request information, or participate in our investment education programs. This document explains what happens with that information from the moment it arrives until it no longer serves a purpose.

We've structured this explanation around how information flows through our operations rather than following the typical collection-use-sharing format you might expect. The goal here is clarity about actual practices, not legal window dressing.

What Information Enters Our Systems

Information reaches us through different channels depending on how you interact with our investment education services. When someone fills out a contact form, registers for a family investing workshop, or downloads educational materials about building generational wealth, we capture what's necessary to fulfill that specific request.

Direct Submissions

Contact forms and registration pages collect what you explicitly provide. For workshop registration, this typically includes your name, email address, phone number, and sometimes details about your family's investment experience or goals. When requesting personalized guidance about teaching children financial literacy or setting up family investment accounts, you might share additional context about your household situation.

Browsing Activity

Technical systems record your device's interaction with our website. IP addresses, browser types, pages visited, time spent reviewing investment strategies, and navigation patterns get logged automatically. This happens whether you submit a form or simply read articles about RESPs, TFSAs, or family budgeting approaches.

Communication Records

Email exchanges, phone conversations about investment workshops, and support inquiries create records we maintain for continuity. If you've asked questions about specific investment vehicles suitable for families or discussed your children's education savings plans, those conversations get documented so we can reference them in future interactions.

Note on cookies and tracking mechanisms: This policy does not address cookies, analytics scripts, pixels, or similar technologies. Those are covered separately in our Cookie Policy, which details specific tracking methods, third-party tools, and your control options.

Why This Information Matters to Our Operations

Every piece of information we gather serves operational needs tied to delivering investment education and family financial planning resources. Nothing gets collected just to have it sitting around.

Service delivery requirements: Your contact details let us send workshop confirmations, share educational materials you've requested about teaching kids about money, or notify you about upcoming webinars on family investment strategies. Without accurate email addresses and names, we can't deliver the resources families specifically ask for.

Understanding what works: Browsing patterns show which investment topics resonate with Canadian families. When we notice heavy traffic on articles about intergenerational wealth transfer or RESP maximization strategies, that signals what educational content to expand. Technical logs help diagnose why certain pages might load slowly or cause confusion during the registration process.

Personalized guidance: Details about your family situation, investment experience, and financial goals allow us to suggest relevant workshops or educational paths. Someone just starting to think about their children's education fund needs different resources than a family already managing multiple investment accounts and looking at estate planning.

Legal compliance and security: Canadian financial services regulations require maintaining certain records, even for educational providers. Transaction logs, access records, and communication histories help us demonstrate compliance with privacy laws and detect unusual activity that might indicate security issues.

How Long Information Stays With Us

Different categories of information have different retention timelines based on operational necessity and regulatory requirements. We don't keep things indefinitely just because we can.

  • Active engagement records: While you're actively participating in workshops, receiving educational materials, or corresponding with us about family investment strategies, we maintain complete records to ensure continuity and quality service.
  • Post-engagement period: After your last interaction, most personal details remain accessible for two years. This covers situations where you return after a gap, need to reference previous workshop materials, or want to pick up where you left off in your family's investment education journey.
  • Aggregated insights: Information stripped of personal identifiers gets retained longer. Patterns about which investment topics Canadian families find most valuable, common questions about RESPs versus RRSPs, or typical paths families take through our educational resources inform future content development.
  • Legal hold requirements: Certain records must be kept for seven years under Canadian financial services regulations, even for educational operations. These typically relate to transactions, formal inquiries, or compliance documentation rather than casual browsing history.

When retention periods expire, deletion happens automatically through scheduled processes. We don't require manual review for routine purging of outdated records.

External Information Movement

Some operational functions require involving outside organizations. Information leaves our direct control in specific, limited circumstances rather than flowing freely to anyone who asks.

Infrastructure Providers

Website hosting, email delivery systems, and customer relationship management platforms operate through third-party services. These providers receive whatever information flows through their systems – contact forms go through email servers, workshop registrations get stored in our CRM database, educational content downloads get logged by hosting infrastructure.

Contracts with infrastructure providers include strict data handling requirements. They're prohibited from accessing information beyond what's necessary to maintain services, and they certainly can't repurpose family investment inquiries for their own marketing efforts.

Workshop Partners and Guest Educators

When bringing in external financial educators for specialized workshops about topics like teaching teenagers about stock markets or navigating family investment decisions, those professionals receive attendee information needed to prepare relevant content and conduct sessions. Names, basic background about investment experience, and specific questions families have submitted all help guest educators deliver valuable sessions.

Legal Obligations

Government agencies occasionally require information disclosure. Tax authorities, financial regulators, or law enforcement might demand records under proper legal authority. When these requests arrive, we verify their legitimacy before releasing anything and limit disclosure to what's specifically required by the order or subpoena.

Business Transitions

Should Mumulus be acquired, merge with another organization, or undergo restructuring, information assets would transfer as part of that process. The successor organization would inherit the same obligations we have regarding privacy protection and proper handling of family financial education records.

Geographic considerations: Some service providers operate servers or staff outside Canada. This means information might be processed or temporarily stored in jurisdictions with different privacy regulations. We prioritize Canadian or European providers where practical, but occasionally operational efficiency requires using providers with U.S. or international presence.

Your Control and Access Rights

Canadian privacy law grants significant control over your personal information. These aren't theoretical rights – they're practical tools you can exercise when needed.

Reviewing what we hold: You can request a complete export of information we maintain about you. This includes form submissions, correspondence history, workshop attendance records, downloaded materials, and browsing patterns where they're linked to your account. We deliver this in readable format within 30 days unless the request is unusually complex.

Correction privileges: Outdated email addresses, changed phone numbers, or incorrect details about your family's investment situation can all be updated. Contact us directly with corrections, and we'll propagate changes across all systems where that information appears.

Deletion requests: You can ask us to remove your information entirely. We'll comply unless legal retention requirements apply or the information is necessary for ongoing service delivery you're actively using. For example, we can't delete records of a workshop you registered for next month while simultaneously maintaining that registration.

Communication preferences: Newsletters about family investment strategies, workshop announcements, and educational content updates can all be opted out of individually. Unsubscribe links appear in every marketing email. Essential service communications – like confirmation of a workshop you registered for – can't be disabled without canceling the underlying service.

Objecting to processing: If you believe we're handling your information inappropriately or beyond what's necessary for the services you requested, you can object formally. We'll review the situation and either adjust our practices or explain why the processing is justified under privacy regulations.

Portability: Information you directly provided can be exported in machine-readable format for transfer to another service provider. This applies to things like contact details and form submissions, not derived data like our internal notes about your inquiries or aggregated browsing statistics.

Reaching Us About Privacy Matters

Questions about how we handle information, requests to exercise your privacy rights, or concerns about our practices can be directed to our team at the coordinates below. We'll respond to privacy inquiries within five business days, though complex requests might take longer to fully resolve.

If you're not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada, which oversees privacy law enforcement across the country.

Postal Address 151 Rue Lavigne
Repentigny, QC J6A 6B6
Canada