1. Who we are
This website and the Brown Girls Money Moves community, podcast, newsletter, and events are operated by:
LuxStory Media Inc. — doing business as Brown Girls Money Moves.
A for-profit corporation incorporated under the Business Corporations Act (Ontario), Canada.
Contact: info@browngirlangels.com
References in this policy to “we,” “us,” “our,” or “Brown Girls Money Moves” mean LuxStory Media Inc.
2. Scope of this policy
This policy applies to personal information we collect through this website, the Brown Girls Money Moves podcast, the newsletter, the Didi Membership application and operations, our curated events (including Chai & Chaat and Brown Girls Desi Dinners), and any other interaction with our brand operated by LuxStory Media Inc.
Brown Girl Angels Collective is a separate organization with its own privacy practices; see the Brown Girl Angels privacy policy for the angel-investing side of the operation.
3. What we collect
- Membership and event applications — your name, email, city, professional details, and any other information you submit through forms (Tally, Dealum, Google Forms, Typeform, or otherwise).
- Newsletter subscriptions — email address and engagement data, processed by Beehiiv.
- Podcast analytics — aggregated listening data from Anchor, Spotify, Apple Podcasts, YouTube, and similar platforms.
- Event RSVPs and attendance — name, email, and dietary or accessibility preferences you share with us.
- Direct correspondence — the contents of emails, DMs, or web forms you send us.
- Technical data — standard server logs (IP address, browser, referring URL, timestamps) and any cookies our hosting and analytics tools place. We do not run behavioural advertising trackers.
4. Why we collect it and our legal basis
We process your personal information under the consent and legitimate-business-activity grounds permitted by Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and where applicable under Ontario’s consumer-protection and digital-platform laws. Specifically, we use your information to:
- review and respond to membership and event applications;
- operate the Didi Membership and decide whether to admit applicants;
- send you the newsletter and event communications you have opted in to;
- plan, run, and follow up on events (dinners, panels, recordings);
- improve the podcast, website, and programming based on aggregate data; and
- meet our legal, tax, accounting, and recordkeeping obligations.
We rely on your express consent when you subscribe to the newsletter or apply to join a community. We rely on implied consent and legitimate business interest for operational uses such as responding to your direct email or analyzing aggregate podcast data.
5. Canada’s Anti-Spam Legislation (CASL)
We only send commercial electronic messages to people who have opted in or have an existing business or non-business relationship with us as defined under CASL. Every commercial email includes our identity, contact information, and a one-click unsubscribe. You can withdraw consent at any time by clicking unsubscribe or emailing us — we will action it within 10 business days, as CASL requires.
6. Who we share information with
We do not sell or rent your personal information. We share it only with:
- Service providers who process information on our behalf under contract, including Beehiiv (newsletter), Tally and Dealum (applications), Google Workspace, Notion, Zoom, Calendly, Stripe (payments, if applicable), and our podcast hosts and analytics platforms;
- Event venues and partners, only with the minimum information needed (e.g., your name on a guest list);
- Professional advisors — lawyers, accountants, and auditors of LuxStory Media Inc., under their professional duty of confidentiality;
- Authorities, where we are legally required to disclose information under Canadian law, a court order, or a binding regulatory request.
7. Where your data is processed
Our service providers may store and process personal information outside Canada (most commonly in the United States or the European Union). When data leaves Canada, it is subject to the laws of the jurisdiction where it is processed and may be accessible to foreign authorities under the laws of that jurisdiction. By using this site and our services, you acknowledge this cross-border transfer.
8. Retention
We keep membership and application materials for as long as needed to evaluate and, where you become a member, for the duration of your membership plus a reasonable period for legal, tax, and recordkeeping purposes (generally up to seven years for financial records, as required by Canadian tax law). Newsletter and event-RSVP data is kept until you unsubscribe or ask us to delete it. Aggregated, de-identified data may be retained indefinitely.
9. Your rights
Under PIPEDA and similar laws, you may:
- ask what personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- withdraw consent to future processing (subject to legal or contractual restrictions);
- request that we delete personal information we no longer need;
- file a complaint with us first, and if not resolved, with the Office of the Privacy Commissioner of Canada (priv.gc.ca).
If you are in the European Union, the United Kingdom, California, or another jurisdiction with additional rights (e.g., GDPR, UK GDPR, CCPA/CPRA), those rights also apply and we will honour them on request.
10. Security
We use reputable third-party processors with their own security programs, limit access to your information to the people who need it, and require service providers to use appropriate safeguards. No internet system is perfectly secure; if a breach occurs that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.
11. Cookies and analytics
We use a minimal set of first-party cookies for site functionality and aggregated analytics. We do not use cookies for behavioural advertising. You can disable cookies in your browser; some site features may not function without them.
12. Children
Brown Girls Money Moves is intended for adults. We do not knowingly collect personal information from anyone under 18.
13. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top of the page reflects the latest revision. Material changes will be communicated through the newsletter or a prominent notice on the site.
14. How to contact us
Privacy questions, access requests, or complaints can be sent to:
Privacy Officer, LuxStory Media Inc.
doing business as Brown Girls Money Moves
Email: info@browngirlangels.com
Province of Ontario, Canada