Interpretation and Definitions
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
Website refers to Left Turn Right Turn’s online site, accessible from www.ltrt.ca.
You is the person whose information we are or might be collecting.
LTRT’s Privacy and Security Officer is our Chief Executive Officer, Yuval Grinspun. He may be reached at firstname.lastname@example.org.
Collecting and Using Your Personal Data
Types of Data Collected
When working with clients, we often collect personal information for the purpose of conducting consultations on behalf of our clients. The reason we collect this data is so that our clients can get feedback about their programs, services, or future plans, to make improvements, and be responsive to their customers/clients and stakeholders. The types of information we typically collect include:
We also collect information from our employees and suppliers to fulfil our legal and contractual obligations. This includes:
Purpose of Data Collection and Limiting Collection
We use the data we collect to support our clients with improving their products and services, particularly as it relates to accessibility. Typically, a client is working on an initiative or project and wants to find out what their customers/clients/employees think about that initiative. We support our clients by administering surveys, running focus groups, community engagement, and conducting interviews with the client’s target audience.
We collect data about our employees and suppliers to comply with our legal and contractual obligations and facilitate payment.
We only collect the information that we need for the stated purposes. We do not collect additional information.
We only collect information with Your consent. We commit to sharing with You the purpose and use of that information so that you can make a decision about whether to share that information.
Use of Your Personal Data
We take care to ensure that your personal data is protected. All information that you provide to us, either through surveys, or through participation in interviews and focus groups, is kept confidential. We store your data in Canada and we do not share any identifying information about you (such as your name, location, e-mail address, occupation etc.) with our clients.
The information that is shared with LTRT is aggregated (which means it is combined together) and anonymized (which means we remove any identifying information, such as your name) before we share it with our clients. We will tell our clients how many people filled out the survey and may share statistical information about how many people answered a question in a certain way. We will also share the feedback that you provided with our clients in a way that does not identify who you are.
There are also some unique situations where a person’s identity might be revealed due to the nature of the group that we are collecting feedback from. We will take steps to ensure that confidentiality of our participants is always protected by removing identifiable details or not sharing the information. For each client that we work with, we consider whether a unique situation, such as the one below, is present. For example, if we are surveying a client’s workforce which has only 3% French language speakers, then the language in which the feedback is received could be an identifying factor. In this case, we would translate the feedback into English to preserve anonymity.
Retention of Your Personal Data
We retain raw data collected through surveys, interviews or focus groups for a period of 6 months after the conclusion of the project (6 months starting from the end date of the contract). This includes personally identifying information (such as name and e-mail address).
Documents that include aggregated and anonymized data (such as reports and memos) are kept for a period of 7 years. We have chosen the period of 7 years because it aligns with document retention requirements in the Accessible Canada Act.
Some exceptions to the above timelines may apply.
Transfer of Your Personal Data
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.
Deleting Your Personal Data
You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.
We can delete raw data, such as your name and the feedback you have provided. We cannot delete information that has been aggregated.
If you have shared information with LTRT and you would like that data deleted, please contact us at:
Disclosure of Your Personal Data
If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred.
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
Other legal requirements
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
Security of Your Personal Data
The security of Your Personal Data is important to Us. We follow our IT Security Policy to maintain security. But remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
Breaches of Privacy
Privacy breaches are managed pursuant to our Procedures for Managing a Privacy Breach.