Effective date: January 1, 2026 Last updated: May 1, 2026
1. Introduction
This Privacy Policy explains how Moving Mountains Consulting Ltd. (“OKR Leader,” “we,” “us,” or “our”) collects, uses, shares, and protects information about you when you visit okrleader.com (the “Website”), use the OKR Leader software application (the “App”), subscribe to our newsletter, download our resources, or otherwise interact with us (collectively, the “Services”).
We are committed to protecting your privacy and being transparent about how we handle your information. If you do not agree with this Policy, please do not use our Services.
Who we are: Moving Mountains Consulting Ltd. PO Box 1741, D’Arcy, BC, V0N 1L0, Canada Privacy contact: privacy@okrleader.com
2. Information We Collect
We collect information in three ways: information you give us, information we collect automatically, and information from third parties.
2.1 Information you provide
- Newsletter signups: First name and email address.
- Free resource downloads and lead magnets: First name and email address.
- Contact form submissions: Name, email address, and the contents of your message.
- Blog comments: Name, email address, comment content, and any other information you choose to share.
- Meeting bookings (via TidyCal): Name, email address, scheduling preferences, and any information you provide when booking.
- Account registration (App, when launched): Name, email address, company name, role, password, and any profile information you provide.
- Payment information (App, when launched): Billing name, billing address, and payment card details. Payment card details are processed and stored by Stripe, our payment processor; we do not store full payment card numbers on our systems.
- Customer content (App, when launched): OKR data, team and organizational data, comments, check-in entries, and other content you create or upload while using the App.
- Customer support: Any information you provide when you contact us for support.
2.2 Information collected automatically
When you visit the Website or use the App, we automatically collect:
- Device and browser information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
- Usage data: Pages viewed, links clicked, time spent on pages, referring URLs, and the date and time of access.
- Cookies and similar technologies: See Section 4 for details.
2.3 Information from third parties
We may receive information about you from third parties, including:
- Email service providers (SwipeOne): Engagement data such as opens, clicks, bounces, and unsubscribes.
- Analytics providers (Google Analytics): Aggregated information about how visitors use the Website.
- Payment processors (Stripe, when App is launched): Confirmation of payment and limited billing details.
- Social media or referral partners: Information you authorize them to share.
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Services.
- Send you the newsletter you subscribed to and the resources you requested.
- Respond to your inquiries, comments, and support requests.
- Process payments and manage subscriptions (App, when launched).
- Personalize your experience and recommend relevant content.
- Analyze how the Services are used and improve performance and functionality.
- Detect, prevent, and respond to fraud, abuse, security issues, and technical problems.
- Comply with legal obligations and enforce our Terms and Conditions.
- Send you transactional and administrative messages (e.g., account updates, billing notices, policy changes).
- With your consent, send you marketing communications about our products and services.
3.1 Legal basis for processing (EEA, UK, and Switzerland)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the General Data Protection Regulation (GDPR) and UK GDPR:
- Consent: For marketing emails, optional cookies, and any processing where we ask for your consent.
- Contract: To provide the Services you have signed up for, including delivering the newsletter, resources, and (when launched) the App.
- Legitimate interests: To improve our Services, prevent fraud, secure our systems, and conduct analytics, where these interests are not overridden by your rights.
- Legal obligation: To comply with applicable laws, including tax, accounting, and regulatory requirements.
You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
4. Cookies and Tracking Technologies
We use cookies and similar technologies on the Website. The only third-party cookie we currently use is from Google Analytics, which helps us understand how visitors use the Website.
You can control cookies through your browser settings or by using browser extensions. If you reject non-essential cookies, some features of the Website may not function as intended. If a cookie consent banner is presented to you on first visit, your selection will be respected.
We do not use cookies for advertising or retargeting, and we do not allow third parties to track you across other websites through our Website.
5. How We Share Your Information
We do not sell your personal information. We share your information only as described below.
5.1 Service providers (subprocessors)
We share information with trusted third-party service providers who help us operate the Services. These providers process information only on our behalf and under contract.
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Website and App hosting | All data we collect | United States |
| SwipeOne | Email marketing and newsletter delivery | First name, email, engagement data | United States |
| Airtable | Customer relationship management and content management | Contact details, signup data | United States |
| Google Analytics | Website analytics | IP address, usage data | United States |
| Stripe (when App is launched) | Payment processing | Billing name, address, payment details | United States |
| TidyCal | Meeting scheduling | Name, email, booking details | United States |
5.2 Legal and safety reasons
We may disclose your information if we believe in good faith that disclosure is necessary to:
- Comply with a legal obligation, court order, subpoena, or governmental request.
- Enforce our Terms and Conditions or other agreements.
- Protect the rights, property, or safety of OKR Leader, our users, or others.
- Detect, prevent, or address fraud, security, or technical issues.
5.3 Business transfers
If we are involved in a merger, acquisition, financing, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you (by email and a prominent notice on the Website) of any such change in ownership or control of your personal information.
5.4 With your consent
We may share your information for any other purpose with your consent.
6. International Data Transfers
We are based in Canada and our subprocessors are primarily located in the United States. If you are located outside Canada or the United States, your information will be transferred to, stored, and processed in countries that may have different data protection laws than your country.
For users in the EEA, UK, or Switzerland: Canada has been recognized by the European Commission as providing an adequate level of data protection for personal data transferred from the EEA to Canadian commercial organizations subject to PIPEDA. Where we transfer your data onward to providers in the United States or other jurisdictions, we rely on appropriate safeguards such as Standard Contractual Clauses, the EU-US Data Privacy Framework (where applicable), or other lawful transfer mechanisms.
7. Data Retention
We retain your information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention practices include:
- Newsletter subscribers: Until you unsubscribe, plus a reasonable suppression list period to honor your unsubscribe request.
- Free resource downloads: Until you unsubscribe or request deletion.
- Contact form submissions: Up to 24 months after the last interaction.
- Blog comments: Until you request deletion or we close comments on the post.
- App account data (when launched): For the duration of your account, plus up to 90 days after account closure to allow recovery, after which data is deleted or anonymized (except where retention is required by law).
- Billing records (when App is launched): Up to 7 years to comply with tax and accounting requirements.
- Analytics data: Up to 26 months in Google Analytics; aggregated data may be retained longer.
You may request deletion at any time as described in Section 8.
8. Your Privacy Rights
Depending on where you live, you have certain rights with respect to your personal information. To exercise any of these rights, contact us at privacy@okrleader.com. We will respond within the timeframes required by applicable law (typically 30 days). We may need to verify your identity before fulfilling your request.
8.1 All users
- Access: Request a copy of the personal information we hold about you.
- Correction: Ask us to correct inaccurate or incomplete information.
- Deletion: Ask us to delete your personal information, subject to legal exceptions.
- Unsubscribe: Opt out of marketing emails at any time using the unsubscribe link in every email.
8.2 Residents of the EEA, UK, and Switzerland (GDPR / UK GDPR)
In addition to the rights above, you have the right to:
- Restrict processing of your personal data in certain circumstances.
- Object to processing based on legitimate interests, including for direct marketing.
- Data portability: Receive your personal data in a structured, machine-readable format and transmit it to another controller.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with your local supervisory authority if you believe we have violated applicable data protection law.
8.3 Residents of Canada (PIPEDA)
You have the right to:
- Access your personal information and request corrections.
- Withdraw consent to our collection, use, or disclosure of your personal information, subject to legal or contractual restrictions and reasonable notice.
- File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).
8.4 Residents of California (CCPA / CPRA)
In addition to the rights above, you have the right to:
- Know what personal information we collect, use, disclose, and (if applicable) sell about you.
- Request deletion of your personal information.
- Correct inaccurate personal information.
- Limit the use of sensitive personal information.
- Opt out of the sale or sharing of personal information. We do not sell personal information and do not share personal information for cross-context behavioral advertising.
- Be free from discrimination for exercising your privacy rights.
You may designate an authorized agent to make a request on your behalf. We will require verification of the agent’s authority.
9. Children’s Privacy
The Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us at privacy@okrleader.com and we will take steps to delete the information.
10. Security
We take reasonable administrative, technical, and physical measures to protect your personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. For details on our security practices, see our Data Security Policy.
No method of transmission over the internet or electronic storage is 100% secure. While we work to protect your information, we cannot guarantee absolute security.
11. Third-Party Links
The Website may contain links to third-party websites and services. This Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party sites you visit.
12. Marketing Communications and Anti-Spam
We comply with Canada’s Anti-Spam Legislation (CASL) and similar laws. We will only send you marketing emails if you have given us your express or implied consent. Every marketing email includes a clear identification of OKR Leader, our contact information, and a working unsubscribe link.
To unsubscribe, click the unsubscribe link in any email, or email privacy@okrleader.com. We will process unsubscribe requests promptly, typically within 10 business days as required by CASL.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have provided one) or by posting a prominent notice on the Website. The “Last updated” date at the top of this Policy reflects the most recent revision. Your continued use of the Services after the effective date of the updated Policy constitutes your acceptance of the changes.
14. Contact Us
For privacy questions, requests, or complaints, contact:
Moving Mountains Consulting Ltd. Attn: Privacy PO Box 1741, D’Arcy, BC, V0N 1L0, Canada Email: privacy@okrleader.com
For legal notices, contact: legal@okrleader.com