Data Protection and AI Governance Policy

Mobit Solutions Inc. is a design and consulting firm incorporated in Canada, with principal operations managed from Ontario. We collect and process limited business-related personal data for the purposes of communication, project coordination and service delivery.

Our privacy and data-management practices comply with the requirements of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulation (PECR). We implement proportionate and appropriate security measures appropriate to the nature, scope and scale of our business operations.

1.1 Data-protection principles

Mobit Solutions adheres to the following privacy and information-security principles:

  • Data Minimization and Objective Limitation: We collect personal data only as necessary to provide our services or respond to enquiries, and we use such data only for those specified purposes.
  • Legality, fairness and transparency: Personal data is processed lawfully, fairly and transparently, with individuals provided with appropriate information about how their information is used.
  • safety measures: We use secure and reputable cloud-based platforms, including Google Workspace, which implement encryption, access controls, authentication mechanisms, and data-redundancy protection to protect information.
  • Accountability and oversight: Mobit Solutions remains accountable for the personal data under its control and ensures that any third-party service providers involved apply comparable security, privacy and data-protection standards.
  • storage limit: Personal data is only retained as long as necessary to fulfill the stated business purpose or to satisfy legal or regulatory obligations, after which it is securely deleted or anonymized.

1.2 Electronic Communications (PECR Compliance)

Mobit Solution’s electronic communications are conducted in accordance with the Privacy and Electronic Communications Regulations (PECR).

All commercial emails, newsletters, or marketing communications clearly identify the sender and include a functional and accessible unsubscribe or opt-out mechanism. We do not send unsolicited marketing communications without a legal basis, such as prior consent or recognized legitimate interest where permitted by law.

1.3 AI Governance Commitments

Mobit Solutions uses AI-enabled tools to fully support design, research, analysis and productivity activities.

  • We do not use AI systems to process sensitive personal data or confidential customer information.
  • Clients are informed about the use of AI technologies where it is relevant to a project or service engagement.
  • All AI-generated outputs are subject to human inspection, review, and professional judgment before delivery.
  • Any third-party AI or cloud service provider appointed by Cybensoul must demonstrate appropriate privacy, security and confidentiality safeguards in line with UK data-protection law.
  • Mobit Solutions actively monitors emerging UK and international guidance on responsible and transparent AI use, including principles promoted by the UK government and regulatory bodies, and will adapt its practices where appropriate.