Legal
This draft policy explains how Mystic Finance may collect, use, store, and protect information shared through the website, enquiry forms, consultations, and related service interactions. It should be reviewed by final counsel before launch.
We may collect information that you voluntarily provide through enquiry forms, consultation requests, contact interactions, and service onboarding. This can include your name, phone number, email address, city, business details, and a summary of the issue for which you are seeking support.
We may also collect limited technical information related to website usage, such as device or browser data, analytics events, and basic anti-abuse signals, where permitted by law and your browser settings.
We use submitted information to respond to consultations, assess service fit, communicate about requested support, improve service delivery, maintain internal records, and manage lawful business operations.
Where relevant, information may also be used for internal quality checks, documentation review, lead management, scheduling, and compliance-related recordkeeping.
We aim to store information using commercially reasonable technical and organizational safeguards appropriate for a small advisory business. Access is limited to authorized personnel or service providers who need the information for legitimate business purposes.
No online system can guarantee absolute security. You should avoid sharing unnecessary sensitive information through general website forms until secure onboarding steps are confirmed.
We may use third-party infrastructure or software providers for hosting, analytics, form delivery, authentication, storage, email, and other operational functions. Such providers may process information on our behalf subject to their own terms and security practices.
Subject to applicable law, you may request access, correction, or deletion of certain personal information that you have shared with us. You may also ask us to stop using your information for future consultation follow-up.
Operational, accounting, compliance, or legal obligations may require us to retain certain records for a reasonable period even after a deletion request.