{"id":4925,"date":"2015-08-24T14:58:07","date_gmt":"2015-08-24T14:58:07","guid":{"rendered":"http:\/\/www.thinkresearchgroup.com\/?page_id=4925"},"modified":"2025-09-15T09:46:57","modified_gmt":"2025-09-15T13:46:57","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"4925\" class=\"elementor elementor-4925\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-311b7f9 e-flex e-con-boxed e-con e-parent\" data-id=\"311b7f9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-448fb2f elementor-widget elementor-widget-text-editor\" data-id=\"448fb2f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>This version was posted on September 7, 2025<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-029fd87 elementor-widget elementor-widget-table-of-contents\" data-id=\"029fd87\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;exclude_headings_by_selector&quot;:[],&quot;marker_view&quot;:&quot;bullets&quot;,&quot;icon&quot;:{&quot;value&quot;:&quot;&quot;,&quot;library&quot;:&quot;&quot;},&quot;headings_by_tags&quot;:[&quot;h1&quot;,&quot;h2&quot;,&quot;h3&quot;,&quot;h4&quot;,&quot;h5&quot;,&quot;h6&quot;],&quot;hierarchical_view&quot;:&quot;yes&quot;,&quot;min_height&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;min_height_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;min_height_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"table-of-contents.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-toc__header\">\n\t\t\t<h4 class=\"elementor-toc__header-title\">\n\t\t\t\tTable of Contents\t\t\t<\/h4>\n\t\t\t\t\t<\/div>\n\t\t<div id=\"elementor-toc__029fd87\" class=\"elementor-toc__body\">\n\t\t\t<div class=\"elementor-toc__spinner-container\">\n\t\t\t\t<i class=\"elementor-toc__spinner eicon-animation-spin eicon-loading\" aria-hidden=\"true\"><\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-34f1e2e elementor-widget elementor-widget-text-editor\" data-id=\"34f1e2e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h1>1.\u00a0\u00a0 Introduction<\/h1><p>Think Research Corporation and its subsidiaries (\u201cTRC\u201d, \u201cThink Research\u201d, \u201cus\u201d, \u201cwe\u201d or \u201cour\u201d), provide knowledge-based digital health software solutions which support clinical decision-making processes, standardize care, and facilitate better health care outcomes. Our customers typically include enterprise clients, hospitals, regional health agencies, healthcare professionals, and\/or governments. Primary care, acute care, and long-term care doctors, nurses and pharmacists rely on our solutions to support their practices.<\/p><p>In offering these various products and services to clients and end users in dozens of countries around the world, Think Research Collects, Uses, and Discloses\u00a0<em>Personally Identifiable Information\u00a0<\/em>(PII) through a variety of channels, and our conduct is governed by Privacy and\/or data protection legislation in each of those regions. This is a complex set of obligations and Think Research takes individuals\u2019 Privacy and the Security of their PII very seriously.<\/p><p>This policy establishes Think Research\u2019s core commitments around the Collection, Use and Disclosure of PII, regardless of line of business or jurisdiction. Specific offerings or services may have additional requirements that apply in a particular context, but this policy establishes our baseline position. All Think Research employees, contractors and suppliers must comply with this policy. If this policy conflicts with another policy in the organization, this policy will prevail. If this policy conflicts with Applicable Legislation in a given circumstance, the legislation will prevail.<\/p><p>Anyone having questions or concerns about this policy or the compliance of our practices, is encouraged to contact us using the details provided in Section 4 below.<\/p><hr \/><h1>2.\u00a0\u00a0 Definitions<\/h1><p>For the purposes of this policy, and the Privacy Program at Think Research, the following will be the standard definitions for the listed terms. Where defined terms are used in this policy, they are capitalized.<\/p><p><strong>Applicable Legislation<\/strong>\u00a0\u2013 means (all) Privacy and\/or data protection legislation that may apply in a particular circumstance (e.g. PIPEDA within Canada, HIPAA within the United States, the GDPR within the UK\/EU, etc.)<\/p><p><strong>Collect<\/strong>\u00a0\u2013 in this context, means to request and\/or receive PII (whether from the data subject or a third party), other than as may be excepted under Applicable Legislation.<\/p><p><strong>Confidential Information (CI)<\/strong>\u00a0\u2013 means information that must be protected from unauthorized access, for any of a variety of reasons (e.g. trade secrets), and includes PII.<\/p><p><strong>Consent<\/strong>\u00a0\u2013 refers to an individual\u2019s agreement (or that of their substitute decision-maker, if any) to a proposed course of action concerning the handling of their PII. Note that Consent may be\u00a0<em>explicit<\/em>\u00a0or\u00a0<em>implied<\/em>, depending on the circumstance.<\/p><p><strong>Controller<\/strong>\u00a0&#8211; is an entity that has legal control (if not custody) of a quantity of PII, and determines the Purposes and means of its Processing.<\/p><p><strong>Disclose<\/strong>\u00a0\u2013 in this context, means to provide a quantity of PII to a third party (i.e. other than the data subject), other than as may be excepted under Applicable Legislation.<\/p><p><strong>Employee Personal Information (EPI)<\/strong>\u00a0\u2013 means employment-related information about an identifiable individual (e.g. a staff member\u2019s salary).<\/p><p><strong>Personal Health Information (PHI)<\/strong>\u00a0\u2013 means healthcare-related information about an identifiable individual (e.g. a patient\u2019s blood type).<\/p><p><strong>Personally Identifiable Information (PII)<\/strong>\u00a0\u2013 means information about an identifiable individual (e.g. a customer), and includes PHI, SPI and EPI.<\/p><p><strong>(Data) Privacy<\/strong>\u00a0\u2013 refers to an individual\u2019s control over how PII about them may be Collected, Used, Disclosed, or otherwise handled.<\/p><p><strong>Process(ing)<\/strong>\u00a0&#8211; refers to the Collection, Use, Disclosure, and\/or general handling of PII, whether by a Controller or a Processor.<\/p><p><strong>Processor<\/strong>\u00a0&#8211; a contracted third party, who Processes PII on behalf of, and in accordance with, the instructions of another party, whether that party is a Controller, or a Processor themselves.<\/p><p><strong>Purposes<\/strong>\u00a0\u2013 in this context, means the identified reasons for which some quantity of PII is being requested\/Collected, including its intended Use(s); which inform an individual\u2019s Consent decision(s).<\/p><p><strong>Security<\/strong>\u00a0\u2013 with regard to protecting valuable assets like electronic information systems or data, is the means of achieving an acceptable level of residual risk to those assets.<\/p><p><strong>Sensitive Personal Information (SPI)<\/strong>\u00a0\u2013 means information about an identifiable individual that is of an especially sensitive nature (e.g. PII relating to children, gender identity, sexuality, religious or philosophical beliefs, ethnicity, political affiliation, etc.), as may be defined in Applicable Legislation.<\/p><p><strong>Sub-processor<\/strong>\u00a0&#8211; see Processor.<\/p><p><strong>Use<\/strong>\u00a0\u2013 in this context, means to Process PII for some Purpose, other than as may be excepted under Applicable Legislation.<\/p><hr \/><h1>3.\u00a0\u00a0 Core Principles<\/h1><p>As a Canadian company, Think Research\u2019s Privacy compliance practices are based on the\u00a0<em>Canadian Standards Association\u2019s<\/em>\u00a0\u201cten fair information principles\u201d (CAN\/CSA-Q830-96). However, with operations, clients and end users in over fifty countries around the world, our framework has necessarily expanded to account for additional obligations in those other jurisdictions (e.g. under the\u00a0<em>General Data Protection Regulations\u00a0<\/em>[GDPR] of the European Union and the United Kingdom, or the\u00a0<em>Health Insurance Portability and Accountability Act<\/em>\u00a0[HIPAA] of the United States, etc.) as follows\u2026<\/p><h2>3.1.\u00a0Accountability<\/h2><p>Think Research is accountable for the PII in its custody and\/or control. It has appointed a Privacy Officer, who is accountable for the corporate compliance program and its alignment with all sources of Privacy-related obligations (e.g. legislation, business agreements, or applicable Consents).<\/p><p>Note that in providing its services and products, Think Research\u2019s roles and obligations with respect to any involved PII may vary:<\/p><ul><li>In offering some of our services (e.g. MDBriefcase), where we may have a direct relationship with individuals, Think Research is directly accountable for the PII in our care. (i.e. we may be a Custodian, Trustee, Controller or Covered Entity, as those terms are defined in various laws); or<\/li><li>In other circumstances (e.g. our Digital Front Door offering), Think Research may be responsible for Processing PII on behalf of, and at the direction of, a client organization (i.e. we may be the client\u2019s Agent, Processor, Sub-processor, or Business Associate, as those terms are defined in various laws); and<\/li><li>In some very specific circumstances, we may have additional roles and responsibilities under Applicable Legislation, given the nature of a service or product being offered (e.g. as an\u00a0<em>Electronic Service Provider<\/em>, or\u00a0<em>Health Information Network Provider<\/em>, as those terms are defined in various laws).<\/li><\/ul><h2>3.2. Legal Bases<\/h2><p>In Collecting, Using or Disclosing PII, Think Research does so under one or more legal bases, depending on the services, circumstances, and Applicable Legislation:<\/p><ul><li>Most often with the Consent of the individual, whether explicit or implied. Note that in some circumstances, where Think Research operates as a Processor on behalf of our clients\u2019 interests, the client may have Collected any required Consents;<\/li><li>We may handle PII further to the terms of a business agreement with a client, who may have provided the PII, or authorized us to Collect it on their behalf;<\/li><li>In some circumstances, we may have a legal obligation to Process PII in a particular way, including Disclosure to third parties (e.g. mandatory reporting of some diseases to public health authorities);<\/li><li>In rare circumstances, to protect the vital interests of an individual or group of individuals (i.e. to mitigate a reasonable risk of harm);<\/li><li>Further to our organization\u2019s legitimate interests, related to our business and the Purposes for which PII was Collected, or for a consistent Purpose.<\/li><\/ul><h2>3.3.\u00a0Data Collection Purposes and Limits<\/h2><p>As mentioned above, Think Research offers several products and services to clients and individuals around the world. As a result, there are a variety of data flows, by which we acquire custody and\/or control of PII:<\/p><ul><li>In some of our service facilities, we provide healthcare directly to patients, and so Collect or produce health-related details related to those individuals;<\/li><li>Several of our offerings are delivered via the Internet, so PII is regularly Collected via websites, and web or cloud-based platforms in various business units;<\/li><li>Via similar web and software components that we run on behalf of our clients;<\/li><li>Via e-mail, the telephone, secure document sharing, and during live video chats;<\/li><li>In common circumstances, directly from our business clients.<\/li><\/ul><p>Where Think Research Collects PII directly from individuals, it identifies the Purposes for the Collection, at or before the time of Collection, it does so by fair and lawful means, and limits the Collection to that data which is required for the Purposes identified by the organization or the involved client. In other circumstances, where we are acting on behalf of a client organization, the identification of Purposes for Collection, and the gathering of any required Consents, may be handled by the client.<\/p><p>In the course of providing our services (note: specific practices may vary by service and\/or region), we may Collect and\/or Use the following types of information for the following Purposes:<\/p><table width=\"653\"><tbody><tr><td width=\"127\"><strong>Category<\/strong><\/td><td width=\"181\"><strong>Examples<\/strong><\/td><td width=\"345\"><strong>Purposes<\/strong><\/td><\/tr><tr><td width=\"127\">Identity Information<\/td><td width=\"181\">A name, username, employee number or similar identifier, marital status, date of birth, race\/ethnicity and gender.<\/td><td width=\"345\"><ul><li>To identify and authenticate an individual;<\/li><li>To communicate with an individual;<\/li><li>To create and administer accounts when users register for our services, including through our websites and apps;<\/li><li>To participate in third party media, marketing and advertising campaigns (with individuals\u2019 consent).<\/li><\/ul><\/td><\/tr><tr><td width=\"127\">Contact Information<\/td><td width=\"181\">Billing addresses, postal addresses, email addresses and telephone numbers.<\/td><td width=\"345\"><ul><li>To communicate with individuals and respond to their inquiries related to\u00a0Think Research\u2019s\u00a0services and Platforms;<\/li><li>To inform individuals about our products and services, as well as special promotions, offers or events;<\/li><li>To create and administer accounts when users register for our services, including through our websites and apps.<\/li><\/ul><\/td><\/tr><tr><td width=\"127\">Job Applicant Information<\/td><td width=\"181\">R\u00e9sum\u00e9s, cover letters, reference letters, employment history and interests.<\/td><td width=\"345\"><ul><li>For staffing and recruitment activities;<\/li><li>To maintain an inventory of candidates for current and future work opportunities.<\/li><\/ul><\/td><\/tr><tr><td width=\"127\">Employee Personal Information<\/td><td width=\"181\">Job title, place of work, hire date, employment history, salary, work address, SIN\/SSN, family details, benefits-related information.<\/td><td width=\"345\"><ul><li>To manage the employment relationship;<\/li><li>To determine eligibility and process applications;<\/li><li>To administer products and services to which staff have access.<\/li><\/ul><\/td><\/tr><tr><td width=\"127\">Personal Interaction Information<\/td><td width=\"181\">Telephone recordings and transcripts, records of communications (such as emails, letters, online chat, etc.).<\/td><td width=\"345\"><ul><li>For quality assurance and staff training Purposes;<\/li><li>To provide users with the services and information which they request;<\/li><li>To communicate with users and respond to their inquiries;<\/li><li>To understand any concerns individuals may have, so that we can resolve disputes and improve their experiences.<\/li><\/ul><\/td><\/tr><tr><td width=\"127\">Digital Interaction Information<\/td><td width=\"181\">Geolocation data, IP address, login data, platform access credentials (e.g. user ID\u2019s, passwords, PIN\u2019s), browser type and version, time zone setting and location, browser plug-in types and versions, operating system, type of device used and other technologies related to the devices used to access our websites and\/or our apps.<\/td><td width=\"345\"><ul><li>To personalize a user\u2019s experience and better understand their use of our sites and apps;<\/li><li>To notify individuals of any relevant issues relating to our website or app (e.g., push notifications);<\/li><li>To measure how our apps and websites are performing;<\/li><li>To identify opportunities for new products\/services or improvements to existing ones;<\/li><li>For system or product development and planning, audit and administrative purposes.<\/li><\/ul><p><em>Note:<\/em>\u00a0For more information relating to our use of cookies, Google Analytics, and related technologies, please refer to this webpage\u2019s Cookies Policy.<\/p><\/td><\/tr><tr><td width=\"127\">Financial Information<\/td><td width=\"181\">Banking information, email addresses linked to electronic transfers, employee salary and payment information.<\/td><td width=\"345\"><ul><li>For billing, administering claims and other financial and payment-related functions;<\/li><li>To administer products and services that we provide to client organizations or individuals;<\/li><li>To maintain the employment relationship with staff.<\/li><\/ul><\/td><\/tr><tr><td width=\"127\">Transaction Information<\/td><td width=\"181\">Details about payments to and from individuals, and other details of products and services that they have purchased\u00a0from us, including customer account numbers.<\/td><td width=\"345\"><ul><li>For administering services and auditing;<\/li><li>To understand how users interact with our products and services.<\/li><\/ul><\/td><\/tr><tr><td width=\"127\">Training Information<\/td><td width=\"181\">Details about completed online courses or test scores.<\/td><td width=\"345\"><ul><li>For reporting to client organizations, under various training and accreditation frameworks, or as Consented to by the participants.<\/li><\/ul><\/td><\/tr><tr><td width=\"127\">Personal Health Information<\/td><td width=\"181\"><p>Details about: patient demographics; health history; risk factors; medications and treatments; medication error data; laboratory results; health card number; health insurance information; clinical notes; care elements; photographs and other images; family history; problem lists; allergies and adverse reactions; immunizations; appointments; reports received; alerts and\/or special needs; prescriptions.<\/p><p>Note that the list above is not exhaustive, but generally describes the sorts of Personal Health Information that we might Collect across our various service offerings.<\/p><\/td><td width=\"345\"><ul><li>To provide or facilitate healthcare;<\/li><li>To determine eligibility and Process applications;<\/li><li>To improve patient safety;<\/li><li>To administer products and services that individuals and clients have with us.<\/li><\/ul><p><em>Note<\/em>: Personal Health Information (PHI) Collected for the Purpose of providing one service will not be Used or Disclosed for the Purpose of providing any other service. Although some PHI may be Used by\u00a0Think Research\u00a0in data analytics, it will not be Disclosed in a way that allows identification of any individual.<\/p><\/td><\/tr><tr><td width=\"127\">Biometric Information<\/td><td width=\"181\">Weight, height, body mass index, waist circumference, cholesterol, lipoprotein, triglycerides, glucose and blood pressure readings, sleep patterns or other similar information provided through connected devices or through completed assessments.<\/td><td width=\"345\"><ul><li>To administer products and services that individuals have with us;<\/li><li>Perform services on individuals\u2019 behalf or their sponsor\u2019s behalf;<\/li><li>To determine eligibility and processes;<\/li><li>Understand individuals\u2019 needs, the suitability of our products and services, and assess future needs;<\/li><li>Provide services tailored to individuals\u2019 requirements and to treat them in a more personal way;<\/li><li>Promote and market our products and services;<\/li><li>Improve our business operations and the quality of our products and services;<\/li><li>Develop and test new products and services;<\/li><li>Manage our business and operational needs;<\/li><li>Administer and protect the Security of our business, and our websites, apps and other services;<\/li><li>Meet our legal and regulatory obligations, including to enforce our legal rights;<\/li><li>Carry out activities consistent with the Purposes of any of the above.<\/li><\/ul><\/td><\/tr><\/tbody><\/table><p>Note that Think Research operates several services and solutions that are typically integrated within a client\u2019s web-based platform or program. In these cases, Think Research takes on the role of Processor to the clients&#8217; Controller role (or equivalent terms, under the governing legislation), in which case, all Collection, Use or Disclosure of PII by Think Research is on behalf of, and at the direction of, the client, for their Purposes.<\/p><h2>3.4.\u00a0Limiting Use, Disclosure, and Retention<\/h2><p>Unless an individual Consents otherwise, or as may be permitted or required by law, Think Research will only Use and Disclose PII for the Purposes for which it was Collected, and will only retain it for as long as required to serve those Purposes.<\/p><h3><strong><u>Use<\/u><\/strong><\/h3><p>The specifics of any Collection and Use of individuals\u2019 PII will vary somewhat, depending on which\u00a0Think Research\u00a0products or services are involved, and which details of PII are provided to us. In any case, we may Use PII in the following ways:<\/p><ul><li>As explained in this policy, or as further explained in our platforms\u2019 Terms of Use, Consent statements, and\/or Notices of Privacy Practices;<\/li><li>For the Purposes that are identified to the individual before or at the time the information is Collected (e.g. as on a related Consent form);<\/li><li>To provide services, whether directly to individuals or on behalf of a client;<\/li><li>To verify or authenticate an individual\u2019s identity (e.g. when visiting one of our websites);<\/li><li>To manage accounts and provide support when an individual contacts our Service Centres;<\/li><li>To plan, evaluate and monitor the services we provide;<\/li><li>For research and quality improvement activities (such as sending patient satisfaction surveys), or statistical analysis;<\/li><li>To generate de-identified, aggregated, or anonymized information that does not reveal anyone\u2019s identity.\u00a0Think Research\u00a0Uses this information to conduct research, compile aggregate data sets, statistics, and reports, and to perform analytics on our services, service standards, business operations, and trends;<\/li><li>To improve customer service &#8211; Information provided to us by individuals helps us respond to customer service requests and support their needs more efficiently;<\/li><li>To personalize user experiences &#8211; We may Use aggregate information to better understand how our users as a group use the services and resources provided on our sites;<\/li><li>To improve our websites &#8211; We may Use customer feedback to improve our products and services;<\/li><li>As may be otherwise permitted or required by law.<\/li><\/ul><h3><strong><u>Disclosure<\/u><\/strong><\/h3><p>Think Research\u00a0may share PII:<\/p><ul><li>With other\u00a0Think Research\u00a0entities in order to effectively provide our services, including for internal management and administrative Purposes;<\/li><li>With third party service providers who are required (by agreement) to keep PII confidential and secure, and are restricted from Using or Disclosing the information for reasons other than performing services on our behalf or to comply with legal requirements;<\/li><li>With third parties and partners in the event of a potential merger or acquisition, transfer of assets, reorganization, or bankruptcy. These parties are also required to keep PII confidential and secure and are restricted in their Use of information to this Purpose;<\/li><li>With government, regulatory and law enforcement agencies to meet our compliance, regulatory, and risk management obligations;<\/li><li>With the general public and\/or other users when an individual posts or shares comments, blog postings, testimonials, or other similar information in public or user discussion forums on our technology platforms;<\/li><li>With sponsoring organizations, with express or implied Consent (where this is permitted by law) or if we are required to do so by law;<\/li><li>With other parties to reduce or eliminate a reasonable risk of significant harm to a person or group of persons;<\/li><li>For the Purpose of carrying out an investigation, or as a result of a court order, warrant, subpoena or summons; and\/or<\/li><li>As may be permitted or required by law.<\/li><\/ul><p>Think Research does not sell, trade, lease or rent individuals&#8217; PII to others, except as may be expressly provided for in the applicable Terms of Use for a given service, product or offering. We may share aggregated information regarding visitors and users with our business partners, trusted affiliates and advertisers for the Purposes outlined above. We may use third party service providers to help us operate our business and our sites, or administer activities on our behalf, such as sending out newsletters or surveys. We may share PII with these third parties for those limited Purposes.<\/p><p>We may share de-identified and\/or aggregated information with our clients for reporting Purposes, including usage of our services, and with third party service providers for use in creating marketing materials, case studies and statistical analyses. This allows\u00a0Think Research, its clients and our respective third party service providers to understand how we are performing, or develop relevant products, services or offers.<\/p><h3><strong><u>Retention<\/u><\/strong><\/h3><p>Think Research only retains PII for as long as may be reasonably necessary to provide our services, meet our contractual obligations with clients, comply with legal requirements, and\/or resolve disputes.<\/p><p>To determine the appropriate retention period for PII, we consider the amount, nature, and sensitivity of the PII, the Purposes for which it was Collected, whether we can achieve those Purposes through other means, and the applicable contractual, legal and\/or regulatory\u00a0 requirements.<\/p><p>When we, or a client organization, no longer require a quantity of PII, it is either securely destroyed, deleted, or de-identified.<\/p><h2>3.5. Data\u00a0Accuracy<\/h2><p>Think Research strives to keep PII in its custody and\/or control as accurate, complete, and up-to-date as is necessary, in order to fulfill the Purposes for which it was originally Collected, and is to be Used.<\/p><h2>3.6. Data Security and\u00a0Safeguards<\/h2><p>Think Research has implemented physical, technological, organizational, and contractual safeguards, appropriate to the sensitivity of PII in our custody and\/or control, to protect it from unauthorized access, Use or Disclosure.<\/p><p>We employ industry-standard controls to protect PII, including physical access controls, internet firewalls, intrusion detection and network monitoring.<\/p><h2>3.7.\u00a0Openness<\/h2><p>Think Research accepts and responds to questions, concerns or challenges about its policies and practices relating to the handling of PII. To submit a question or concern, please contact the Privacy Office using the details in Section 4 below.<\/p><h2>3.8. Data Subject Rights<\/h2><p>Upon request, an individual may exercise any of a number of \u201crights\u201d regarding the existence, Use, and Disclosure of their PII. Individuals can gain access to records, challenge the accuracy and completeness of their information, have it amended as appropriate, and other options, as described below. Note that specific rights may vary from region to region, under Applicable Legislation.<\/p><p>Individuals seeking to exercise these rights should contact the program or service of interest, to initiate their request via the applicable process. If they cannot find the appropriate contact information for the program or service, they may contact the corporate Privacy Office using the details in Section 4 (below) to facilitate or redirect their request.<\/p><h3>3.8.1. Accessing Your Information<\/h3><p>When requested in writing, Think Research will inform individuals of the existence, Uses, and any Disclosures of records of their PII, that we maintain, and provide access to copies of the information, and\/or disclose it in common, machine-readable formats. In some rare cases, Think Research may not be able to provide individuals with all of the information that they request, depending on prescribed circumstances. In producing copies of records for requesting individuals, some business units may charge a nominal fee.<\/p><h3>3.8.2. Correcting Your Information<\/h3><p>Think Research will make reasonable efforts to keep PII accurate and up to date. If a change or correction is required (e.g. a change of address), individuals should let us know right away. We will make appropriate updates needed to keep records accurate and individuals can review their PII by looking at the correspondence we send to them, through their online accounts with us, or by requesting access to their PII, as described above.<\/p><p>Note that the right to correction is not absolute, and practices will vary somewhat by context and business unit. Where a correction cannot be fully accommodated (e.g. changes to clinical notes), individuals can have a statement of disagreement about the data included in their files.<\/p><h3>3.8.3. Other Data Subject Rights<\/h3><p>Depending on the country or jurisdiction in which they live, individuals may have additional rights in relation to their PII, including:<\/p><ul><li><strong><em>Right to delete.<\/em><\/strong>\u00a0Individuals may have the right to request the deletion of their PII upon the withdrawal of their Consent for us to Process such information, or other circumstances provided under Applicable Legislation, provided that such data no longer needs to be Processed by us to fulfil our legal and regulatory obligations.\u00a0 Note that this \u201cright to be forgotten\u201d, is not absolute, as in some circumstances the retention of PII (particularly in a clinical context) is a legal requirement.<\/li><li><strong><em>Right to restrict, object to, or opt out of Processing.<\/em><\/strong>\u00a0Individuals may have the right to specify that we restrict the Processing of their PII in various ways, or object to what may be seen as an excessive Collection of PII.<\/li><li><strong><em>Right to data portability.\u00a0<\/em><\/strong>Individuals may have the right to request that we provide them with copies of their PII in a structured, commonly used, and machine-readable format and a right to request that we transfer such information to another party.<\/li><li><strong><em>Right to be free from automated decision-making or profiling.<\/em><\/strong>\u00a0Individuals may have the right to request that we process their information manually, without any decision-making or profiling being conducted by automated, digital solutions.<\/li><li><strong><em>Right to lodge a complaint.\u00a0<\/em><\/strong>Individuals may have the right to lodge a complaint with the relevant regulatory authority about the way that we have handled their PII (see Section 3.9 below).<\/li><\/ul><p><strong><em>Note for data subjects in France<\/em><\/strong>: under French law, individuals also have a right to define guidelines relating to the fate of their personal data in the event of their death.<\/p><p><strong><em>Note for data subjects in the United States<\/em><\/strong>: under some states\u2019 consumer privacy laws,\u00a0 individuals also have a private right of action and\/or a right to opt in for sensitive data processing.<\/p><h2>3.9.\u00a0Challenging Compliance<\/h2><p>An individual is free to challenge Think Research\u2019s compliance with these principles. Their challenge should be in writing, and addressed to our Privacy Office (see contact details in Section 4 below).<\/p><p>Please note that in responding to such communications, we may need to confirm the individual\u2019s identity, request additional details about them, and\/or work with other\u00a0Think Research departments to respond to them fully, or to properly investigate their concern or complaint.<\/p><p>If our response to a challenge is not satisfactory, individuals in most jurisdictions have the option of escalating their concern to the local regulatory authority. If assistance is needed in identifying the correct oversight body, please send a request to our Privacy Office (see Section 4 below) and they will provide assistance.<\/p><h2>3.10. Data Residency<\/h2><p>Think Research is a global organization with affiliates, partners and subcontractors located in several countries around the world. To provide our services,\u00a0Think Research\u00a0may transfer PII across national or regional borders to other\u00a0Think Research\u00a0entities, affiliates or service providers working on our behalf in compliance with Applicable Legislation. For some services or platforms, we are able to accommodate client organizations\u2019 data residency preferences, in that in-scope PII will not leave the country of origin, or be accessed from outside of that region.<\/p><p>Examples of countries that we may transfer PII to and\/or exchange PII with, include, but are not limited to: Australia, Canada, New Zealand, the Republic of Ireland, the United Kingdom and the United States of America. When PII is transferred outside of a country, we take appropriate measures to ensure an equivalent standard of protection under Applicable Legislation. We will also obtain an individual\u2019s Consent where this is required under Applicable Legislation, before such transfers occur.<\/p><p>In particular, for transfers of PII from the European Union (EU) or the United Kingdom (UK), we rely on adequacy decisions from the EU Commission, UK adequacy regulations, the use of\u00a0<em>standard contractual clauses<\/em>\u00a0approved by applicable supervisory bodies, or other appropriate transfer mechanisms.<\/p><hr \/><h1>4. Contact Us<\/h1><p>Individuals that may have questions or concerns about this policy or Think Research\u2019s handling of their PII, should contact our Privacy Office using the following details\u2026<\/p><p>Contact us by regular mail at:<\/p><ul><li class=\"inner-li\">Think Research Corporation<br \/>Attn: Privacy Office<br \/>199 Bay Street, Suite 4000<br \/>Toronto, Ontario, Canada<br \/>M5L 1A9<\/li><\/ul><p>or by electronic mail at:<\/p><ul><li class=\"inner-li\">privacy@thinkresearch.com<\/li><\/ul><p>With respect to the General Data Protection Regulations of the EU and the UK:<\/p><ul><li>Our Data Protection Officer is Patrick Kenny, in Toronto, Ontario, Canada, who can be reached using the contact details above;<\/li><\/ul><ul><li>Our EU Representative is Chris Collenette, in Ireland, who can be reached by e-mail at the address above, or by regular mail at:<br \/>5th Floor Rear, Connaught House, 1 Burlington Road,<br \/>Dublin 4, Dublin, Ireland, D04 C5Y6<\/li><li>Our UK Representative is Dr. Christine Smith, in England, who<br \/>can be reached by e-mail at the address above, or by regular mail at:<\/li><li class=\"inner-li\">Department 849, 196 High Road<br \/>Wood Green<br \/>London, England, N22 8HH<\/li><\/ul><p>Please note that in responding to such communications, we may need to confirm the individual\u2019s identity, request additional details about them, and\/or work with other\u00a0Think Research departments to respond to them fully, or to properly investigate their concern or complaint.<\/p><hr \/><h1>5. Revision History<\/h1><p>This Policy is subject to change, for example to comply with evolving legal requirements or to meet changing business needs. If we make any updates, we will post them on this page and revise the \u2018Effective Date\u2019. We encourage individuals to check this page from time to time, for any changes to our policy, so that they may stay informed about how we protect their Privacy and the PII in our custody and\/or control.<\/p><p><strong><u>Version Control Log<\/u><\/strong><\/p><table width=\"621\"><tbody><tr><td width=\"157\"><strong>Effective Date<\/strong><\/td><td width=\"230\"><strong>Change History<\/strong><\/td><td width=\"161\"><strong>Approved by\u2026<\/strong><\/td><td width=\"74\"><strong>Version<\/strong><\/td><\/tr><tr><td width=\"157\">September 2020<\/td><td width=\"230\">Original TRC Privacy Policy, for US\/CAN, posted to website.<\/td><td width=\"161\">Privacy, Security &amp; Risk Committee<\/td><td width=\"74\">n\/a<\/td><\/tr><tr><td width=\"157\">May 15, 2023<\/td><td width=\"230\">Updates and edits, to incorporate new regions\u00a0 and subsidiaries.<\/td><td width=\"161\">Privacy, Security &amp; Risk Committee<\/td><td width=\"74\">1.3<\/td><\/tr><tr><td width=\"157\">October 19, 2023<\/td><td width=\"230\">Consolidated corporate privacy policy for all regions and all subsidiaries.<\/td><td width=\"161\"><p>Patrick Kenny<\/p><p>Privacy Officer<\/p><\/td><td width=\"74\">2.0<\/td><\/tr><tr><td width=\"157\">October 9, 2024<\/td><td width=\"230\">Minor edits to some sections.<\/td><td width=\"161\"><p>Patrick Kenny<\/p><p>Privacy Officer<\/p><\/td><td width=\"74\">2.01<\/td><\/tr><tr><td width=\"157\">May 30, 2025<\/td><td width=\"230\">Minor edits to some sections.<\/td><td width=\"161\"><p>Patrick Kenny<\/p><p>Privacy Officer<\/p><\/td><td width=\"74\">2.02<\/td><\/tr><\/tbody><\/table><p><strong><u>Annual Review<\/u><\/strong><\/p><p>This policy will be reviewed on an (at least) annual basis, to help ensure that it remains valid, effective, and relevant.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Think Research respects the privacy of our clients, business partners and employees. We recognize the need for appropriate protections and management of the Personal Information and Personal Health Information that you provide to us. As such, Think Research has established this Privacy Statement to assist you in understanding what information we collect and how that information is used. This Privacy Statement applies to Think Research, including its Divisions and Subsidiaries.<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-4925","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Privacy Policy at Think Research<\/title>\n<meta name=\"description\" content=\"We respects the privacy of our clients, business partners &amp; employees. This statement outlines what information we collect and how that information is used.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Policy at Think Research\" \/>\n<meta property=\"og:description\" content=\"We respects the privacy of our clients, business partners &amp; employees. This statement outlines what information we collect and how that information is used.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Think Research Canada\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/TRChealth\/\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-15T13:46:57+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@trchealth\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"21 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/\",\"url\":\"https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/\",\"name\":\"Privacy Policy at Think Research\",\"isPartOf\":{\"@id\":\"https:\/\/www.thinkresearch.com\/ca\/#website\"},\"datePublished\":\"2015-08-24T14:58:07+00:00\",\"dateModified\":\"2025-09-15T13:46:57+00:00\",\"description\":\"We respects the privacy of our clients, business partners & employees. This statement outlines what information we collect and how that information is used.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.thinkresearch.com\/ca\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.thinkresearch.com\/ca\/#website\",\"url\":\"https:\/\/www.thinkresearch.com\/ca\/\",\"name\":\"Think Research Canada\",\"description\":\"Rethinking the future of health care\",\"publisher\":{\"@id\":\"https:\/\/www.thinkresearch.com\/ca\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.thinkresearch.com\/ca\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.thinkresearch.com\/ca\/#organization\",\"name\":\"Think Research\",\"url\":\"https:\/\/www.thinkresearch.com\/ca\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.thinkresearch.com\/ca\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.thinkresearch.com\/ca\/wp-content\/uploads\/sites\/6\/2020\/10\/LogoforBlog-01.png\",\"contentUrl\":\"https:\/\/www.thinkresearch.com\/ca\/wp-content\/uploads\/sites\/6\/2020\/10\/LogoforBlog-01.png\",\"width\":1025,\"height\":684,\"caption\":\"Think Research\"},\"image\":{\"@id\":\"https:\/\/www.thinkresearch.com\/ca\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/TRChealth\/\",\"https:\/\/x.com\/trchealth\",\"https:\/\/www.instagram.com\/thinkresearch\/\",\"https:\/\/www.linkedin.com\/company\/thinkresearch\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy Policy at Think Research","description":"We respects the privacy of our clients, business partners & employees. This statement outlines what information we collect and how that information is used.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/","og_locale":"en_US","og_type":"article","og_title":"Privacy Policy at Think Research","og_description":"We respects the privacy of our clients, business partners & employees. This statement outlines what information we collect and how that information is used.","og_url":"https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/","og_site_name":"Think Research Canada","article_publisher":"https:\/\/www.facebook.com\/TRChealth\/","article_modified_time":"2025-09-15T13:46:57+00:00","twitter_card":"summary_large_image","twitter_site":"@trchealth","twitter_misc":{"Est. reading time":"21 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/","url":"https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/","name":"Privacy Policy at Think Research","isPartOf":{"@id":"https:\/\/www.thinkresearch.com\/ca\/#website"},"datePublished":"2015-08-24T14:58:07+00:00","dateModified":"2025-09-15T13:46:57+00:00","description":"We respects the privacy of our clients, business partners & employees. This statement outlines what information we collect and how that information is used.","breadcrumb":{"@id":"https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.thinkresearch.com\/ca\/privacy-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.thinkresearch.com\/ca\/"},{"@type":"ListItem","position":2,"name":"Privacy Policy"}]},{"@type":"WebSite","@id":"https:\/\/www.thinkresearch.com\/ca\/#website","url":"https:\/\/www.thinkresearch.com\/ca\/","name":"Think Research Canada","description":"Rethinking the future of health care","publisher":{"@id":"https:\/\/www.thinkresearch.com\/ca\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.thinkresearch.com\/ca\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.thinkresearch.com\/ca\/#organization","name":"Think Research","url":"https:\/\/www.thinkresearch.com\/ca\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.thinkresearch.com\/ca\/#\/schema\/logo\/image\/","url":"https:\/\/www.thinkresearch.com\/ca\/wp-content\/uploads\/sites\/6\/2020\/10\/LogoforBlog-01.png","contentUrl":"https:\/\/www.thinkresearch.com\/ca\/wp-content\/uploads\/sites\/6\/2020\/10\/LogoforBlog-01.png","width":1025,"height":684,"caption":"Think Research"},"image":{"@id":"https:\/\/www.thinkresearch.com\/ca\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/TRChealth\/","https:\/\/x.com\/trchealth","https:\/\/www.instagram.com\/thinkresearch\/","https:\/\/www.linkedin.com\/company\/thinkresearch"]}]}},"_links":{"self":[{"href":"https:\/\/www.thinkresearch.com\/ca\/wp-json\/wp\/v2\/pages\/4925","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thinkresearch.com\/ca\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.thinkresearch.com\/ca\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.thinkresearch.com\/ca\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thinkresearch.com\/ca\/wp-json\/wp\/v2\/comments?post=4925"}],"version-history":[{"count":0,"href":"https:\/\/www.thinkresearch.com\/ca\/wp-json\/wp\/v2\/pages\/4925\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.thinkresearch.com\/ca\/wp-json\/wp\/v2\/media?parent=4925"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}