We want to provide you with clear and complete information about which personal data this website gathers and how you can view and control its handling.
If you don’t want us to collect or process your personal information in the ways described in this policy, you shouldn’t use this website.
Who we are
Our website address is: https://headstogetherthinktank.com.
What personal data we collect and why we collect it
Personal data is not just created by your interactions with this site. Personal data is also generated from technical processes such as contact forms, comments, cookies, analytics, and third-party embeds.
Content Management System
The website’s core management is WordPress. By default WordPress does not collect any personal data about visitors, and only collects the data shown on the User Profile screen from registered users accounts.
When visitors leave comments, community discussions or replies on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies are small data files sent from a server to your web browser. They are stored in your browser’s cache and allow a website or a third party to recognize your browser. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
- basic site functions
- secure account login
- remembering account, browser, and regional preferences
- analyzing site traffic and usage
Cookies store data about your use, but they are helpful because they allow us to help this site function and customize your experience. You can configure your desktop or mobile browser’s settings to reflect your preference to accept or reject cookies, including how to handle third-party cookies
Some of the technologies we use are necessary for critical functions like security and site integrity, account authentication, security and privacy preferences, internal site usage and maintenance data, and to make the site work correctly for browsing.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
For Google Analytics Advertising Features, you can opt-out through Google Ads Settings, Ad Settings for mobile apps, or any other available means (for example, the NAI’s consumer opt-out listed above). Google also provides a Google Analytics opt-out plug-in for the web.
Any information that you submit through the contact form will be stored in the database of this website.
Who we share your data with
We don’t share your data with third-parties in a way as to reveal any of your personal information like email, name, etc. or for marketing purposes. However, some data is transferred and/or stored with third-party services we use, like our website provider and other cloud-based services.
Our Website Server
Our website servers are located within Canada and are managed by wpcloud.ca. They provide ongoing updates and maintenance for the website. wpcloud.ca does not share that data with anyone outside of the company. They can access and edit all information held on the website.
Videos from Vimeo
Our website uses embed codes from Vimeo.
If you visit one of our pages featuring a Vimeo video, a connection to the Vimeo server is established. Here the Vimeo server is informed about which of our pages you have visited.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely, until you ask us to erase them. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
As a registered user of this site we also store the personal information you provide in your user profile. All users can see, edit, or delete their personal information at any time. Website administrators can also see and edit that information.
Website and database backups may be kept for 12 months, to ensure that we can restore or rebuild the website in case of failure.
What rights you have over your data
You can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
The personal data that we collect from you will be stored on servers inside Canada. We will take all steps reasonably necessary to ensure that your data is treated securely in accordance with data protection policies.
Visitor comments may be checked through an automated spam detection service.
Changes to this Policy
How we protect your data
We take the protection of your personal information seriously and aim to ensure this this site is as secure as possible. We have implemented restrictions related to the storage of and the ability to access your personal information. These include:
- Daily malware scanning done automatically on our hosting servers.
- Making regular, secure backups of your website data.
- Backups are kept in secure storage.
- Our website is hosted completely within Canada.
- Limiting the number of people with access to the website’s CMS and admin
- Restricting access to sensitive website files with current best hardening practices.
- Individual accounts for users – no shared logins.
- Removing accounts (or reset of associated passwords) when members with user accounts leave our community
- Transferring of website files between local to public environments by secure transfer protocols (SFTP).
Our website platform is continually being upgraded and maintained to keep up to date with latest versions, security practices and technologies, to help minimize security risk.
Please note that no transmission over the Internet or method of electronic storage can be guaranteed to be 100% secure.
What data breach procedures we have in place
In case of a data breach, We will create a fresh backup, scan the site for malware and attempt to identify the breach, removing any associated code and means of access. Subsequently we will look at preventative measures that will prevent a similar breach from happening again, and take action where possible.
This disclaimer governs your use of our website; by using our website, you accept this disclaimer in full. If you disagree with any part of this disclaimer, do not use our website.
2. Intellectual property rights
Unless otherwise stated, we or our licensors own the intellectual property rights in the website and material on the website. Subject to the licence below, all our intellectual property rights are reserved.
3. Limitations of liability
Whilst we endeavour to ensure that the information on this website is correct, we do not warrant its completeness or accuracy; nor do we not commit to ensuring that the website remains available or that the material on this website is kept up-to-date.
To the maximum extent permitted by applicable law we exclude all representations, warranties and conditions (including, without limitation, the conditions implied by law of satisfactory quality, fitness for purpose and the use of reasonable care and skill).
Our liability is limited and excluded to the maximum extent permitted under applicable law. We will not be liable for any direct, indirect or consequential loss or damage arising under this disclaimer or in connection with our website, whether arising in tort, contract, or otherwise – including, without limitation, any loss of profit, contracts, business, goodwill, reputation, data, income, revenue or anticipated savings.
However, nothing in this disclaimer shall exclude or limit our liability for fraud, for death or personal injury caused by our negligence, or for any other liability which cannot be excluded or limited under applicable law.
We may revise this disclaimer from time-to-time. Please check this page regularly to ensure you are familiar with the current version.
5. Entire agreement
This disclaimer constitutes the entire agreement between you and us in relation to your use of our website, and supersedes all previous agreements in respect of your use of this website.
6. Law and jurisdiction
This notice will be governed by and construed in accordance with Canadian law, and any disputes relating to this notice shall be subject to the exclusive jurisdiction of the courts of Canada.
7. Our contact details
Please see contact page for our contact details.