Privacy policy
What we collect, why we collect it, and the control you have over it. In plain English, because a privacy policy nobody can read is not a privacy policy.
Last updated · Jul 16, 2026
Who we are
CMO Mag ("we", "us") is an independent marketing publication operated from Toronto, Canada. This policy covers cmomag.com. For questions, requests, or complaints, reach us via CMO Mag on LinkedIn.
What we collect
- Account data. If you create an account: your email address, a securely hashed password (we never store your password itself), and an optional display name.
- Subscription data. If you subscribe or donate, our payment processor handles your card. We store only your customer and subscription identifiers and your plan status. We never see or store your card number.
- Newsletter data. Your email address and the cadences and topics you choose.
- Survey responses. The answers you submit, which we use in aggregate.
- Usage data. Privacy-friendly first-party analytics (Google Analytics) such as pages viewed, referrer, approximate location, and device or browser type. We use this to understand what is worth reading, as part of running the site. IP addresses are handled by Google in line with GA4's built-in IP anonymisation and are not used by us to identify you.
- Local storage. Your free-article count is stored in your own browser, not on our servers.
How we use it
- To run your account, subscription, and newsletter.
- To understand which coverage is useful, so we commission more of it.
- To produce aggregate insight about the marketing industry, which we may publish or license.
- To detect abuse and keep the site working.
Do we sell your data?
We do not sell your personal information. We may publish or license aggregate, de-identified insight — for example, a statistic about how surveyed marketers are shifting their budgets — which cannot identify you or be reverse-engineered back to you. If our practices change, we will update this policy and the date at the top of it.
Your rights
Wherever you live, you can ask us to: give you a copy of your data, correct it, delete it, or stop sending you email. Depending on your location (including the UK, EU, and California) you may also have the right to object to or restrict processing, to data portability, and to opt out of any sale or sharing of personal information — noting that we do not sell it.
Contact us via CMO Mag on LinkedIn and we will action it within 30 days. Every newsletter also has a one-click unsubscribe, and you can delete your account at any time.
How long we keep it
Account and subscription data is kept while your account is open, and for as long afterwards as we need to meet tax and accounting obligations. Newsletter data is kept until you unsubscribe. Survey responses are retained in aggregate. Delete your account and we remove your personal data, except anything we are legally required to retain.
Security
Passwords are hashed with a slow, salted algorithm. Sessions use signed, HTTP-only cookies. Payments are handled entirely by Stripe. No system is perfectly secure, but if a breach ever affects you we will tell you promptly.
Where your data lives
We operate from Canada and use processors in Canada, the United States, and the EU. If you are in the UK or EU, your data may be transferred outside your country under the safeguards those processors provide.
Children
CMO Mag is for marketing professionals. It is not intended for anyone under 16, and we do not knowingly collect their data.
Changes
If we change this policy we will update the date above, and for material changes we will tell you by email or a notice on the site. See also our terms of use and affiliate disclosure.