What personal data about you do we use, and why?

This table lists the types of personal data we use about you, and our reason for this:  

Information you provide to us (either directly or through a third party):

Information collected automatically or generated as part of our service to you:

Who do we share your personal data with?

Sometimes we share your personal data with other companies and organisations.

The types of companies and organisations we share your personal data with are as follows:

• Other companies who provide us with services – We need separate companies to provide us with services we use to support the running of our website (for example, website hosting providers, job application service providers, communication providers). We share your personal data specified above with those companies so they can provide us with those services.
• Regulators, official authorities, and other third parties in relation to legal compliance – For example, the police or the government might legally require use to give them personal data to help them with an investigation, or we might be required to give these companies personal data to enforce our terms, address security and fraud, and to protect you.
• A third party that acquires all or part of our business – we might disclose your personal data to another company which buys or undertakes another type of corporate transaction in respect of our shares or buys all or part of our assets.

Does your personal data ever go to other countries?

Yes, sometimes your personal data goes to other countries as part of using your personal data in the ways we listed above, including in the European Economic Area (“EEA”). If you are in the UK, the EEA, or Switzerland and your personal data goes outside of these countries, the law requires us to take extra steps to make sure your personal data is protected in the place it is going to.

We transfer your personal data to third parties that host or access personal data outside of these jurisdictions, including Canada and the United States.

Where the country outside the UK, EEA or Switzerland is a country which is subject to an adequacy decision by the European Commission or the Information Commissioner’s Office in the UK, we rely on that adequacy decision of the transfer – for example, for Canada and the United States (when recipients are certified under the EU-US Data Protection Framework).

If we send your personal data to a company (either in our “group” of companies or a separate company) which is in a jurisdiction not subject to an adequacy decision,  we will rely on EU/UK standard contractual clauses, which require that company to protect your personal data. To the extent required or permitted by data protection law, we may alternatively rely on an appropriate Data Protection Framework certification, a vendor’s processor binding corporate rules and/or other data transfer mechanisms available under EU/UK data protection law.

We might take similar steps where you are in another country with similar legal requirements, as well. If you want to find out more information about international transfers, you can contact us via email (privacy@inflexion.io).  

How long do we keep your personal data for?

We only keep your personal data for as long as is necessary to fulfil the purpose for which it was collected. As soon as your data is no longer required for the aforementioned purposes it will be deleted.

We might need to keep your personal data for longer if a law requires us to (for example, laws about record-keeping and tax). Normally this is about six to ten years. If we are keeping your personal data for longer in this way, we will make sure it is secure and you can still change what we do with it (see below).  

Your choices and rights

Because your personal data is about you, you should be able to control what happens to it.

We provide different ways you can do this. The easiest way is to write us an email (privacy@inflexion.io) requesting one or more of the following, to the extent these rights are applicable to you:

• “Right to Object ” – you can object to how we are using your personal data if we are using it based on legitimate interests (see above) in certain situations;
• “Right to Portability” – you can request a downloadable copy of your personal data and for us to transfer it to another party. If you wish for us to transfer such personal information to a third party, please ensure you detail that party in your request. Note that we can only do so where it is technically feasible;
• “Right to Access” – you can request to access to the personal data we use about you, and information about how we use it and who we share it with;
• “Right to Deletion” – you can request that specific personal data we store about you is deleted in certain circumstances;
• “Right to Correct” – you can request that information about you that is wrong or outdated is corrected.
• “Right to Restrict” - you can request to restrict the use your personal data, for example to storage purposes only;
• “Right to Withdraw Consent” – you can withdraw your consent if our reason for using your personal data is consent (see above). We will then stop using your personal data in this way (though this doesn’t affect the lawfulness of the processing until you withdraw).

You can also submit requests to exercise these rights by contacting us at (privacy@inflexion.io).

We’re sometimes not able to do the things you tell us to, for example because of the particular legal basis we have been relying on to process your personal data, or because it would interfere with another person’s own privacy rights. If this happens, we’ll explain to you why we aren’t able to do what you tell us to with that piece of personal data.

We may also be required to keep certain personal data to satisfy legal requirements or for security purposes, or if there are valid grounds under data protection laws for us to do so (for example, for the defence of legal claims or freedom of expression) but we will let you know if that is the case.

Updates to this policy

We may make updates to this policy from time to time (for example because our services have changed or because of changes in laws). We will appropriately notify you of this. The date this notice was last updated can be found at the top.  

How can you ask questions or make a complaint about your privacy?

If you have any questions about what we have said in this notice or how your personal data is used, you can contact us about it.

Our contact details are:

E-mail: privacy@inflexion.io

Address:          Suite 300, 10190 104 St NW, Edmonton, Alberta, Canada T5J 1A7

If you are located in the EEA or the United Kingdom and have questions about your personal data or would like to request to access, update, or delete it, you may contact our representative at:

You can also contact the official organisation which regulates personal data in your country (the “regulator”) to lodge a complaint, if you think we are not using your personal data correctly. Please see the Annex to this notice which lists the contact details of the different regulators.

Thank you!

Annex – List of regulators you can contact

You can contact the regulator on this list which is in the country you are located in:

• You can find a list of EU data protection regulators here.
• In the UK, the regulator is the Information Commissioner’s Office which you can contact here.