Privacy Notice

1. How to Reach Us

This notice is a summary of Think Research Corporation’s (“TRC”, “us”, “we” or “our”) Privacy Policy, available here, as it relates to our subsidiaries MDBriefCase, RxBriefCase and OncologyEducation, and their handling of the Personally Identifiable Information (“PII”) of customers in the European Union, the United Kingdom, and some US states. Individuals with questions or concerns about this notice or the handling of their PII, are encouraged to contact our Privacy Office by regular mail at:

Think Research Corporation
Attn: Patrick Kenny, Privacy Officer
199 Bay Street, Suite 4000
Toronto, Ontario, Canada, M5L 1A9

or by electronic mail at: [email protected]

2. Collection, Use, and Storage of Your Personal Information

In providing our services, we collect PII directly from visitors to our company websites and also from users of our password-protected member sites, through their interactions with our sites, when they register with us, or attend our events. The PII that we might collect and maintain, falls into the following categories(with examples for each):

• Contact details: name, email address, street address, telephone number;
• Web interaction details: cookies data1, browser type, IP address;
• Account data: profession, specialty, registration number;
• Financial details: credit card or bank account numbers;
• Events-related data: session attendance or dietary restrictions for meals; and
• Customer history: registered user activity logs, test scores and profile preferences.

As the controller of this information, we use it for our legitimate interests, to provide you with contracted services, to arrange payments, to improve our services, to respond to questions, and to keep you informed of our business offerings. We use de-identified data for related purposes, like market research, auditing, and website performance assessment. If we plan to use your PII for additional purposes (other than as permitted or required by law), we will seek your consent. We retain your PII for as long as required to provide our services to you.

To protect your PII from unauthorized access, use, disclosure or compromise, Think Research has implemented physical, technological, organizational, and contractual safeguards, and follows industry best practices for the processing and handling of PII. Your PII is stored with a cloud services provider in the United States, with whom we have a services agreement that includes Standard Contractual Clauses covering data exported from the EU and UK. 

1. See our Cookies-related policies for MDBriefCase, RxBriefCase and OncologyEducation.

3. Sharing Data with Third Parties

Think Research does not sell, rent or lease its customers’ PII to third parties. In providing our services, we contract with sub-processors (e.g. payment processing, conference/event organizers, cloud storage), who may have access to some of your PII, in order to perform their functions on our behalf. These sub-processors are bound by legal agreements, and are committed to equivalent levels of respect for your privacy, and the security of your PII.

4. Data Subjects’ Rights

Privacy-related rights afforded to data subjects vary by region, according to the local legislation. The following rights are afforded to individuals in the European Union and the United Kingdom, and also in some US states that have enacted Consumer Privacy legislation:

• Right to access: You can ask us about any of your PII in our records, what we have done with it, with whom we have shared it, and receive copies.
• Right to correct: If our records are inaccurate, you can request that they be corrected.
• Right to delete: Under certain conditions, you can request that we delete any of your PII in our care.
• Right to be informed: We have a duty to inform you of our privacy-related practices, this being the objective of this Notice, as well as our Corporate Privacy Policy.
• Right to opt out of certain processing: You have the right to restrict or opt out of our use of your PII for certain types of processing (e.g. sales calls).
• Right to opt-out of data sales: Think Research does not sell, lease or rent PII, but if we did, you would have the right to opt out.
• Right to data portability: You have the right to have copies of your PII disclosed in a common file format.
• Right against automated decision making: You have the right to opt out of your PII being assessed solely by an automated process, without human input. 

And also, in some US states:

• Right to opt in for sensitive data processing: You must give informed consent, before we can process your sensitive data.
• Private right of action: You have the right to seek civil damages from us, for violations of a statute.

And also, in France:

• Deceased data subject: You have a right to define guidelines relating to the fate of your PII, in the event of your death.

Individuals may action these rights by reaching out to program staff, or by using the contact details in Section 1, above.

5. Escalating a Concern

If you are concerned about our data-handling practices, or our response to a previously stated concern, you have the right to take the issue to a local data protection authority in your region:

6. Version Control Log