Privacy Policy

This website is operated by ODINsight ("ODINsight", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, contact us, or interact with ODINsight.

ODINsight is a Canadian health data collaboration initiative. We are committed to privacy, transparency, responsible data governance, and compliance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy and health information laws.

This website is intended to provide information about ODINsight and allow interested organizations or individuals to contact us. It is not intended to collect personal health information through the website.

Information We Collect

We may collect the following information when you interact with the ODINsight website:

• Contact information you provide, such as your name, email address, organization, role, and message content
• Communications you send to us through forms, email, or other contact methods
• Basic website usage information, such as pages visited, approximate time of visit, browser type, device type, and referral source
• Technical information needed to operate and secure the website, such as IP address, logs, and security event data

We do not ask visitors to submit personal health information through this website. Please do not include patient information, clinical records, health card numbers, or other sensitive health information in website contact forms or general email inquiries.

How We Use Information

We use personal information for the following purposes:

• To respond to inquiries
• To communicate with organizations or individuals interested in ODINsight
• To provide information about ODINsight, our approach, governance model, and participation opportunities
• To operate, maintain, secure, and improve the website
• To understand general website engagement and improve clarity, accessibility, and usability
• To meet legal, regulatory, security, or compliance obligations

We collect only the information reasonably necessary for these purposes.

Health Data and Sensitive Information

ODINsight is focused on responsible health data collaboration. However, this public website is not a health data submission portal and should not be used to upload, transmit, or disclose personal health information.

Any future work involving health data, research data, or institutional data collaboration would be handled under appropriate governance, agreements, privacy safeguards, security controls, and applicable Canadian legal requirements.

Consent

By using our website or submitting information to us, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may limit our ability to respond to your inquiry or provide requested information.

Data Sharing

We do not sell personal information.

We may share personal information only in limited circumstances, including:

• With service providers that help us operate the website, manage communications, host infrastructure, or maintain security
• With professional advisors, such as legal, privacy, compliance, or technical advisors
• Where required or permitted by law
• Where necessary to protect the security, rights, or integrity of ODINsight, our website, or our users

Any service providers that process personal information on our behalf are expected to protect that information and use it only for the purposes for which it was provided.

Service Providers and Data Location

ODINsight may use trusted service providers to host the website, process contact forms, manage email communications, provide security monitoring, or support website analytics.

Personal information may be stored or processed in Canada or in other jurisdictions where our service providers operate. Where information is processed outside Canada, it may be subject to the laws of that jurisdiction.

We remain responsible for personal information under our control and use contractual, technical, and organizational safeguards to protect it.

Cookies and Website Analytics

We may use essential cookies or similar technologies to operate and secure the website.

We may also use privacy-conscious analytics to understand general website usage, such as page visits and traffic patterns. We do not use website analytics to identify individual visitors unless required for security, fraud prevention, or legal compliance.

You can adjust your browser settings to block or delete cookies. Some website features may not function properly if cookies are disabled.

Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information against unauthorized access, use, disclosure, alteration, or loss.

These safeguards may include:

• Secure website connections
• Access controls
• Limited internal access to personal information
• Security monitoring
• Vendor review
• Data minimization
• Retention limits

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we take privacy and security seriously.

Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Contact inquiries may be retained for a reasonable period to manage communications, respond to follow-up questions, support relationship management, and maintain business records.

When personal information is no longer required, we will delete, anonymize, or securely dispose of it.

Your Privacy Rights

Depending on applicable law, you may have the right to:

• Ask whether we hold personal information about you
• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Withdraw consent, subject to legal or contractual limits
• Ask questions about our privacy practices
• File a complaint with the appropriate privacy regulator

To exercise these rights, contact us using the information below.

Children

The ODINsight website is not intended for children or individuals under the age of 18. We do not knowingly collect personal information from children through this website.

Links to Other Websites

Our website may contain links to third-party websites or resources. We are not responsible for the privacy practices, content, or security of third-party websites. We encourage visitors to review the privacy policies of any third-party websites they access.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date.

Material changes may be communicated through the website or by other appropriate means.

Contact

For privacy questions, access requests, or concerns, contact: