Effective October 1st, 2024

This Supplemental Policy provides additional information related to the collection, use, and processing of personal information by Informanos Analytics & Artificial Intelligence Inc. ('Informanos,' 'we,' 'our,' or 'us'). This policy is intended to supplement the information provided in our main Privacy Policy and Terms of Use and applies to specific regions, industries, and services.

1. Regional Data Protection Compliance

Informanos complies with applicable regional data protection laws, including but not limited to the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and the Personal Information Protection and Electronic Documents Act (PIPEDA). This section outlines your rights based on your location:

For EU/EEA Residents (GDPR Compliance):

• Data Access: You have the right to request access to your personal data that we hold, along with details of how we process it.

• Data Deletion: You may request that your personal data be deleted, subject to certain exceptions under the GDPR.

• Data Portability: You have the right to request your data in a structured, machine-readable format.

• Objections and Restrictions: You can object to or request restrictions on the processing of your personal data.

• Right to Withdraw Consent: You may withdraw consent at any time, which will not affect the lawfulness of processing based on consent before its withdrawal.

For California Residents (CCPA Compliance):

• Data Access and Deletion: You have the right to request what personal information we collect about you, how we use it, and the right to request its deletion.

• Opt-Out of Data Sales: Informanos does not sell your personal information, but you still have the right to opt-out of any future sales.

• Non-Discrimination: You will not be discriminated against for exercising your CCPA rights.

For Canadian Residents (PIPEDA Compliance):

• Access and Correction: You can request access to your personal information, and where necessary, request that we correct or update inaccurate information.

• Retention of Personal Information: We will only retain your personal information for as long as required by applicable laws and regulations.

2. Industry-Specific Regulations

• Healthcare (HIPAA Compliance): If Informanos provides services in the healthcare industry, we comply with the Health Insurance Portability and Accountability Act (HIPAA) for handling personal health information (PHI). We ensure that PHI is used only for authorized purposes and maintain strict safeguards to protect its confidentiality.

• Financial Services: For clients in the financial services industry, Informanos adheres to applicable financial regulations, such as FINRA and SEC guidelines, ensuring secure data processing and protection measures are in place. Client financial data is handled with high security, and access is restricted based on need-to-know principles.

3. Data Processing & Storage

Informanos processes personal information for various purposes and takes steps to ensure that data processing activities comply with applicable data protection laws.

• Data Transfer Outside the EU: Personal information may be transferred to and processed in countries outside the European Union, including Canada, the U.S., and other regions where we or our third-party processors operate. When we transfer your data, we ensure that it is protected to a standard that meets EU requirements.

• Retention Periods: We retain personal information for as long as necessary to fulfill the purposes outlined in our Privacy Policy, or as required by law, regulatory, or contractual obligations. The duration of retention may vary based on specific industry practices and regulations.

4. Specialized Services and Consent

Certain specialized services may require additional consents from users, especially when handling sensitive data such as:

• Biometric Data: If Informanos processes biometric information, explicit consent will be obtained, and you will be provided with details on how this data is collected, stored, and used.

• Health and Medical Data: For services related to health or medical data, users will be required to provide express consent for the collection, use, and sharing of such data, with clear options to opt-out at any time.

• Automated Decision-Making and Profiling: Informanos may use automated processes to provide personalized services. You have the right to request human intervention, express your point of view, and contest decisions based solely on automated processing, where such processing produces legal or similarly significant effects

5. Security Measures and Data Breach Response

We take extensive steps to protect personal information through:

• Encryption and Secure Storage: Personal data is encrypted in transit and at rest to ensure its confidentiality. We implement industry-standard security protocols, including firewall protection and secure access controls.

• Regular Security Audits: Informanos regularly audits its systems to identify potential vulnerabilities and implement necessary improvements.

• Breach Notification: In the event of a data breach, Informanos will notify affected individuals and relevant authorities in compliance with applicable laws.

6. Rights and Access Requests

As a user of Informanos’ services, you have specific rights concerning your personal information, depending on your region and the applicable law. These rights may include:

• Right to Access: You have the right to request a copy of your personal data.

• Right to Rectification: If your personal data is inaccurate or incomplete, you can request corrections.

• Right to Erasure (Right to be Forgotten): You may request the deletion of your data, subject to certain conditions.

• Right to Data Portability: In some cases, you may request your personal data in a portable format.

• Right to Object or Restrict Processing You have the right to object to certain data processing activities or request restrictions on the processing of your data.

To exercise any of these rights, contact us at privacy@informanos.com

7. Changes to this Supplemental Policy

We may update this Supplemental Policy periodically to reflect changes in our practices, regulatory requirements, or applicable laws. Material changes will be communicated through appropriate channels, such as notifications on our website or direct communication.

Contact Information

If you have any questions or concerns regarding this Supplemental Policy or wish to exercise your rights regarding your personal information, please contact us at:

Informanos Analytics & Artificial Intelligence Inc.

1157 Escala Crescent,
Kingston, Ontario, K7P 0H6
Canada
Email: privacy@informanos.com