Privacy Policy
This policy explains how Sumptuous Data Sciences Inc. collects, uses, discloses and protects personal information, in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
Who we are
Sumptuous Data Sciences Inc. ("Sumptuous", "we", "us") is located in Toronto, Ontario, Canada. We are part of the Sumptuous Data Sciences group, headquartered in the USA (Sumptuous Data Sciences, LLC), with offshore delivery operations in India (Sumptuous Data Sciences Pvt. Ltd.). We are responsible for personal information under our control, and we have designated a Privacy Officer who is accountable for our compliance with this policy.
Scope of this policy
This policy covers personal information we collect through this website and in the course of business enquiries, recruitment, events and business relationships. It does not cover:
- Clinical, healthcare or real-world data that we process on behalf of our clients. That data is handled under our client agreements, applicable laws and the client's own privacy notices.
- Our product websites (TrialAccel®, avidence®, R-Assure®, SPARC®), our USA and India websites, or other third-party websites we link to, which have their own policies.
Information we collect
Information you give us
- Contact enquiries: your name, organisation, contact details and the content of your message when you use our contact form.
- Job applications: your name, contact details, resume, work history and any other information you choose to send through our careers form.
- Business relationships: contact and professional details of people at clients, prospects, partners and suppliers, including details shared at conferences and events.
Information collected automatically
- Technical information: IP address, browser type, device information and pages visited, collected through server logs and, only where you allow them, cookies. See our Cookie Policy.
We do not ask for sensitive personal information, such as health information, through this website. Please do not include it in messages to us.
Why we collect it and how we use it
We identify the purposes for collecting personal information at or before the time of collection, and we only use it for those purposes or as permitted or required by law:
- to respond to your enquiries and provide information about our products and services;
- to manage relationships with clients, partners and suppliers;
- to assess job applications and recruit;
- to send business updates and event invitations, where you have consented;
- to operate, secure and improve this website; and
- to meet legal and regulatory obligations and protect our rights.
We do not sell personal information.
Consent
We collect, use and disclose personal information with your knowledge and consent, except where the law allows otherwise. Depending on the sensitivity of the information, consent may be express (for example, ticking a box or submitting a form) or implied (for example, providing your business card at an event). You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. If you withdraw consent, we may not be able to provide some services or respond to some requests.
Commercial electronic messages (CASL)
In line with Canada's Anti-Spam Legislation (CASL), we only send commercial electronic messages, such as newsletters or promotional emails, where we have your express or implied consent. Every such message identifies us and includes a simple way to unsubscribe, and we act on unsubscribe requests within 10 business days.
How we share it
We share personal information only where needed for the purposes above:
- Our group companies in the USA and India, to respond to you and deliver our services.
- Service providers who host our website, email and systems, or help with recruitment and analytics. They may only use the information to provide services to us and must protect it.
- Professional advisers, such as lawyers, accountants and auditors.
- Authorities, where required by law or to protect our rights, property or safety.
- A buyer or successor, if all or part of our business is reorganised, merged or sold, subject to confidentiality obligations.
Storage and transfers outside Canada
Because our group operates in Canada, the USA and India, and some of our service providers are located outside Canada, your personal information may be stored or processed outside Canada. While it is outside Canada, it is subject to the laws of that country and may be accessible to its courts, law enforcement and national security authorities. We use contractual and other measures to give your information a comparable level of protection while it is processed by our group companies and service providers.
How long we keep it
We keep personal information only as long as needed to fulfil the purposes for which it was collected, or as required by law, and then securely destroy or anonymise it. Information used to make a decision about you is kept long enough for you to request access to it.
How we protect it
We protect personal information with safeguards appropriate to its sensitivity, including physical, organisational and technological measures such as access controls, encryption where appropriate and staff confidentiality obligations. If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law.
Access and correction
You may ask to access the personal information we hold about you, learn how it has been used and disclosed, and ask us to correct it if it is inaccurate or incomplete. We will respond within 30 days, or tell you if we need more time as allowed by law. We may need to verify your identity before responding. In limited cases the law allows or requires us to refuse access, and we will explain why.
If you live in Quebec, you also have rights under Quebec's privacy law, including the right to be informed about and to control the use of technologies that identify, locate or profile you.
Children
This website is intended for business and professional audiences. We do not knowingly collect personal information from children.
Privacy Officer and complaints
For questions, access requests or concerns about our privacy practices, please contact our Privacy Officer through our contact form (choose "Privacy question"), or write to: Privacy Officer, Sumptuous Data Sciences Inc., Toronto, Ontario, Canada.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca, or the privacy regulator in your province.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows when it was last revised, and significant changes will be highlighted on this page.