MSP Well is a not-for-profit organization based in Ontario, Canada. Our mission is to support mental health and wellness within the information technology and cybersecurity community through education, outreach, community events, resources and shared support. Because we work in a space where individuals may voluntarily share sensitive or personal experiences about stress or wellness, we maintain a strong commitment to privacy, dignity and responsible data management.
MSP Well is developing and operating a Privacy Information Management System aligned to ISO IEC 27701, the international privacy governance standard. This Privacy Policy explains how we collect, use, protect and disclose personal information.
MSP Well does not provide clinical mental health care, diagnosis, crisis counseling, therapy or any form of regulated professional health service.
If you or someone else is in immediate danger or experiencing a mental health emergency, call 911 or your local emergency number immediately.
If you are outside North America, contact your local emergency services or the nearest crisis hotline in your region.
Any wellness related information shared with MSP Well is voluntary and nonclinical. It is never a substitute for professional mental health or medical care.
This Privacy Policy applies to personal information collected through:
This Policy does not apply to:
MSP Well does not request or retain clinical information.
By using our website, subscribing to communications, registering for events, donating, joining our online communities or creating a user account, you consent to the practices described in this Privacy Policy. You may withdraw consent at any time, subject to legal and contractual limitations.
MSP Well welcomes members from all over the world. Regardless of where you reside, MSP Well applies privacy principles modeled on ISO IEC 27701 to ensure consistent safeguards.
MSP Well operates under:
Where legally required, MSP Well extends supplemental protections under:
When personal information is transferred across borders, MSP Well applies contractual, technical and organizational safeguards to protect the information.
Identification and Contact Information
Engagement and Interaction Information
Voluntary Wellness Related Information
You may choose to share nonclinical information about stress, burnout or your experiences in the IT community. This is entirely voluntary. Such information is treated as sensitive and is handled responsibly. We do not request or store clinical mental health records.
We use personal information to:
We do not sell personal information.
If you share nonclinical wellness information with MSP Well, we:
Our website uses cookies and related technologies to:
You may manage cookies through your browser settings.
MSP Well uses reputable service providers for:
These providers handle personal information according to their own privacy policies and are expected to maintain strong security practices.
We do not control how third-party social platforms use information you provide directly to them.
MSP Well follows a structured Data Lifecycle Management process aligned to ISO IEC 27701. The following retention schedule applies:
Information Category | Examples | Retention | Purpose |
Account Information | Email, login credentials, profile details | Active membership plus three years | Supports account continuity and security |
Newsletter Records | Subscription data, engagement | Until unsubscribed plus two years | Consent tracking and communication history |
Event Registrations | Attendance records, registration data | Seven years | Program evaluation and compliance |
Donation Information | Donor name, amount | Seven years or CRA requirement | Not for profit auditing and financial reporting |
Community Engagement | Posts, activity logs, group membership | Duration of community membership plus one year | Safety, continuity and governance |
Website Analytics | Cookies, IP, browsing data | Fourteen months | Usage analysis and service improvement |
Partner and Vendor Data | Contact information | Duration of relationship plus seven years | Contract management |
Voluntary Wellness Information | Any voluntarily shared nonclinical details | Purpose fulfilled plus one year | Treated as sensitive, minimized and securely destroyed |
All data is securely deleted or anonymized at the end of its retention period.
MSP Well uses administrative, technical and physical safeguards to protect information, including:
Depending on your jurisdiction, you may have the right to:
MSP Well will respond to valid rights requests in accordance with applicable law.
MSP Well is intended for adults. We do not knowingly collect personal information from children under 13.
All volunteers, advisors, board members and facilitators agree to:
Access is granted only on a need-to-know basis.
MSP Well Privacy Office
Email: privacy@mspwell.com
Website: https://www.mspwell.com
We may update this Policy periodically. When changes occur, the new version will be posted with an updated effective date.
Continued use of MSP Well services constitutes acceptance of the updated Policy
The IT channel moves fast and the pressure is real. When we work together, we can build a culture that values mental wellness, supports open conversation and lifts the people behind the technology we all rely on.
