Your privacy

Who we are

The Michigan Center for Business Modernization (“MCBMichigan”, “we”, “us”) is an initiative of Mamal Group. We help Michigan small businesses with websites, business apps, automation and consultations. This policy applies to mcbmichigan.org, our client portal and the related services we provide.

Information we collect

Information you give us

• Contact messages. Your name, email address, business name if you include it, and your message.
• Assistance requests. When you use Get started, we collect your name, email address, business name, industry, city or town, ZIP code, current website, and what you would like help with, including timing and priorities.
• Client portal accounts. Your email address, the one-time sign-in codes we send you, and the business and contact details associated with your account.
• Project information. Project requests, consultation details, agreed scope, quotes, feedback, approvals, screenshots and files you share with us while we work together.
• Correspondence. Anything you include when you email us or speak with us during a consultation.

Information collected automatically

• Technical information. Like most websites, our servers receive your IP address, browser type and the pages you request. We use this to deliver the site, prevent abuse, limit repeated submissions and keep our services secure.
• Essential cookies. If you sign in, we set cookies that keep you signed in and protect your session. See Cookies and tracking.

Please do not send us passwords, payment card numbers or sensitive personal information about your customers through our forms or portal.

How we use information

• To respond to your messages and questions.
• To review requests, determine program fit and schedule consultations.
• To scope, fund, build, deliver and support your project.
• To provide the client portal, including sending sign-in codes.
• To prepare quotes and direct you to payment when a project is paid.
• To protect our services, our clients and the public, including preventing spam, fraud and unauthorized access.
• To meet legal, accounting and grant-reporting obligations.

We do not use your information for advertising, and we do not sell or rent it.

Cookies and tracking

We use only the cookies needed to sign you in and protect your session. We do not use advertising cookies, tracking pixels, third-party analytics or cross-site tracking. Because we do not track you across websites, our services work the same whether or not your browser sends a “Do Not Track” signal.

How we share information

We share information only as described here:

• Service providers. Companies that run parts of our service on our behalf, under their own security and confidentiality obligations. These include Amazon Web Services for hosting, storage, backups and sign-in email delivery; Google for business email and consultation meetings; and Stripe for payments. When you pay through Stripe, your payment details go directly to Stripe. We do not receive or store your full card number.
• Legal reasons. When we believe disclosure is required by law, subpoena or other legal process, or is necessary to protect the rights, property or safety of MCBMichigan, our clients or others.
• Organizational changes. If MCBMichigan is reorganized, merged or transferred, information may be transferred as part of that change, subject to this policy.
• With your permission. In any other case where you ask us to or agree to it.

How long we keep information

We keep information only as long as we need it for the purposes above. Contact messages and requests that do not become projects are kept while we respond and follow up. Project and account records are kept for the life of the relationship and as long afterward as needed for support, legal, accounting and grant-reporting requirements.

Our backups are retained for up to 30 days. When you ask us to delete information, we remove it from our active systems, and it leaves our backups as they expire.

Security

We protect information with encrypted connections, encrypted storage, one-time sign-in codes instead of passwords, restricted administrator access and regular backups. No method of transmission or storage is completely secure, but we work to protect your information and to limit who can access it.

Your choices

You can ask us to:

• Tell you what information we hold about you and provide a copy.
• Correct information that is inaccurate or incomplete.
• Delete your information, unless we must keep it for legal, accounting or grant-reporting reasons.
• Stop contacting you about anything other than an active project.

To make a request, contact us. We may need to confirm your identity before acting on it, and we aim to respond within 30 days.

Children

Our services are for businesses and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

Other websites

Our site links to websites we do not control, including client projects and outside resources. Their privacy practices are governed by their own policies.

Changes to this policy

We may update this policy as our services change. We will post the updated version here with a new effective date. If we make a significant change to how we use information we already hold, we will tell affected clients directly.

Contact us

For questions about this policy or to make a privacy request, send us a message and mention “privacy” so it reaches the right person.

Send us a message →