Legal · Privacy
Privacy Policy
1. Scope and who we are
This Privacy Policy describes how LIIMRA Data & Analytics ("LIIMRA", "we", "our", "us") collects, uses, discloses, and safeguards personal information. It applies to our website at liimra.ca, our research engagements, and any related services or communications.
LIIMRA is a Canadian research and data-analytics firm headquartered in Edmonton, Alberta, on Treaty 6 Territory. We are committed to handling personal information in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), and the requirements that come with engagements under the federal Privacy Act and Alberta's Freedom of Information and Protection of Privacy Act (FOIP).
2. What personal information we collect
The personal information we may collect depends on how you interact with us. Typical categories include:
- Contact information — name, work email, organisation, role, and the message content you provide on contact or briefing forms.
- Research-engagement information — survey responses, interview transcripts, focus-group inputs, administrative records, and other primary or secondary data that you, your organisation, or research participants provide as part of an engagement.
- Site usage data — IP address, browser type and version, device type, referring URL, pages viewed, and session timestamps collected via cookies and standard server logs.
- Career-application information — résumé, cover letter, and any supporting materials you choose to send us in response to a role posting.
We do not knowingly collect sensitive personal information (e.g., health, financial, or biometric data) outside of a research engagement that has its own consent process and ethics oversight.
3. Why we collect it
We collect personal information to:
- Respond to your briefing requests, questions, and inbound inquiries.
- Deliver the research, evaluation, and analytics services agreed in writing with your organisation.
- Operate, secure, and improve our website and email communications.
- Comply with applicable laws, including responding to lawful access requests and producing FOIP-disclosable methodology footnotes.
- Assess and respond to job applications.
We do not sell personal information.
4. Consent
We rely on your express or implied consent to collect and use personal information. Express consent is obtained at the point of collection (e.g., when you submit a briefing form or sign a research-engagement consent form). Implied consent applies to obvious uses — for example, replying to your email reply with our response.
You may withdraw consent at any time by writing to info@liimra.ca, subject to legal or contractual restrictions and reasonable notice.
5. Cookies, analytics, and tracking
Our site uses a small number of cookies and similar technologies:
- Strictly necessary — security, session, and language preferences. These cannot be switched off.
- Performance & analytics — aggregated, non-identifying metrics to understand how the site is used. We use first-party analytics where reasonably possible.
You can control cookies through your browser settings or via the consent banner shown on first visit. See our full Cookie Policy for details.
6. When we disclose personal information
We disclose personal information only:
- To service providers (e.g., cloud hosting, email infrastructure) bound by written confidentiality and data-protection obligations no less protective than this Policy.
- To the client organisation that commissioned an engagement, in the form of de-identified or aggregated reporting unless the engagement scope expressly authorises identifiable reporting and participant consent has been obtained.
- Where required by law, court order, or lawful regulatory request, including under PIPEDA, the federal Privacy Act, or provincial access-to-information statutes.
- To protect our rights, property, or safety, or that of others, when we reasonably believe disclosure is necessary.
- In connection with a sale, merger, or reorganisation, with appropriate confidentiality undertakings.
7. How we protect your information
We maintain administrative, technical, and physical safeguards designed to be appropriate to the sensitivity of the information, including access controls, encryption in transit and at rest where appropriate, audit logging, and regular security review. We provide privacy and security training to staff and limit access on a need-to-know basis.
No system can guarantee absolute security. We will notify affected individuals and the appropriate regulator(s) of any breach of security safeguards that poses a real risk of significant harm, as required by law.
8. How long we keep it
We retain personal information only as long as needed for the purposes described or as required by law, contract, or professional standards. Inbound contact-form messages are retained for up to 24 months. Engagement records follow the retention schedule set in the engagement agreement (typically 5–7 years post-engagement). Career application records are retained for up to 12 months unless you ask us to retain them longer for future opportunities.
9. Your rights
Subject to applicable law, you have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Withdraw consent to specific uses, subject to legal or contractual restrictions.
- Make a complaint to our Privacy Officer or to the Office of the Privacy Commissioner of Canada.
To make a request, write to info@liimra.ca with the subject "Privacy request". We will respond within 30 days of a verified request and may charge a reasonable fee where permitted by law.
10. Cross-border transfers
Our primary data residency is in Canada. Some service providers may process limited information outside Canada (typically in the United States or European Union). Where this occurs, we use contractual safeguards designed to provide comparable protection. For engagements requiring strict Canadian residency, we accommodate that requirement in the engagement agreement.
11. Indigenous-data principles (OCAP®)
For engagements involving First Nations data, we recognise and apply the First Nations principles of Ownership, Control, Access, and Possession (OCAP®) as set out by the First Nations Information Governance Centre. We negotiate data-sharing, custodianship, and publication rights with the participating Nation(s) before fieldwork begins and document those terms in the engagement agreement.
12. Children's privacy
Our website is intended for an adult audience. We do not knowingly collect personal information from children under 13 outside of a research engagement that has explicit guardian consent and ethics-review approval.
13. Changes to this policy
We may update this Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date and, where appropriate, communicated by other reasonable means. Continued use of our website or services after changes take effect constitutes acceptance of the updated Policy.
14. Contact & Privacy Officer
If you have questions about this Policy, want to exercise a right, or wish to lodge a complaint, contact our Privacy Officer:
Privacy Officer
LIIMRA Data & Analytics
Edmonton, Alberta, Canada
Email: info@liimra.ca
Subject line: "Privacy request"
You may also contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.