Last updated on August 14, 2026

Privacy Policy

Think Resilience Inc. ("Think Resilience", "we", "us") is a company incorporated in British Columbia, Canada. Think Resilience provides professional advisory services remotely to clients in Canada and globally. We are committed to protecting personal information in accordance with the Personal Information Protection Act (British Columbia) ("PIPA"), the Personal Information Protection and Electronic Documents Act (Canada) ("PIPEDA"), and, where they apply to you, other privacy laws such as the EU and UK General Data Protection Regulation ("GDPR") and US state privacy laws. This policy explains what personal information we collect through www.thinkresilience.ca (the "Site") and in the course of our business, how we use it, and your rights wherever you are located. 

1. What we collect 

We collect only the personal information we reasonably need: 

  • Contact and inquiry information: name, email address, company, role, and message content when you contact us, book a call, or request information. 

  • Newsletter/subscription information: email address and name when you subscribe to our newsletter. 

  • Client engagement information: business contact details and information you provide during an advisory engagement (governed additionally by our engagement confidentiality terms). 

  • Technical and analytics information: IP address, browser type, pages visited, and similar data collected via cookies through Google Analytics. 

We do not knowingly collect personal information from minors, and we do not sell personal information. 

2. How we use it 

We use personal information to: respond to inquiries and provide our services; administer client engagements, invoicing, and records; send updates or marketing communications only with your consent, in compliance with applicable e-marketing laws: including Canada's Anti-Spam Legislation (CASL) and, where applicable, EU/UK ePrivacy rules and the US CAN-SPAM Act: with an unsubscribe link in every message and the ability to withdraw consent at any time; operate, secure, and improve the Site; and meet legal, tax, and regulatory obligations. 

3. Consent 

We collect, use, and disclose personal information with your consent, or as permitted or required by law. Consent may be express (e.g., subscribing) or implied where the purpose is obvious and you voluntarily provide the information (e.g., emailing us an inquiry). You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice; withdrawing consent may limit our ability to serve you. 

4. Disclosure 

We do not sell, rent, or trade personal information. We share it only with: service providers who process it on our behalf, bound to safeguard it; professional advisors (e.g., accountant, lawyer) where necessary; and authorities where required by law. 

Our service providers currently include: Squarespace (website hosting and forms), Google / Alphabet (analytics and business tools), Munich Re (location-risk data services used in client engagements), and Anthropic (AI tools used to support analysis and drafting). We limit the personal information shared with each provider to what is necessary for its function. 

International storage and transfers: we are based in Canada, and some of our providers store or process data in other countries (e.g., the United States or Europe). Personal information processed abroad is subject to the laws of that jurisdiction, including lawful access by its authorities. Where required, we protect international transfers with appropriate safeguards. 

5. Cookies and analytics 

The Site uses cookies and similar technologies for essential functionality and to understand aggregate Site usage through Google Analytics. We do not use advertising or remarketing pixels. You can set your browser to refuse cookies or use Google's opt-out tools; the Site will still work, though some features may be limited. 

6. Retention 

We keep personal information only as long as needed for the purposes above or as required by law (e.g., tax records), and at least one year after using it to make a decision that affects you, as PIPA requires. When no longer needed, it is securely deleted or anonymized. 

7. Safeguards 

We protect personal information with security measures appropriate to its sensitivity, including access controls, encrypted services, and limiting access to those who need it. No system is perfectly secure; we will respond to any suspected breach promptly and notify affected individuals and regulators where required. 

8. Your rights 

Subject to limited legal exceptions, you may: request access to the personal information we hold about you and how it has been used or disclosed; request correction of inaccurate or incomplete information; withdraw consent; and unsubscribe from marketing at any time. We will respond to written requests within 30 days as required by PIPA. We may charge a minimal fee for access requests where permitted, and will provide an estimate first. 

9. International visitors 

European Economic Area and United Kingdom (GDPR) If you are in the EEA or the UK, the GDPR applies to personal data you provide to us. Our legal bases for processing are: consent (newsletter, analytics cookies), performance of a contract or pre-contractual steps (inquiries and engagements), and legitimate interests (operating and securing the Site). You have the rights of access, rectification, erasure, restriction, objection, and data portability, the right to withdraw consent at any time, and the right to lodge a complaint with your local supervisory authority. Transfers of your data to Canada are covered by the European Commission's and UK's adequacy decisions for Canadian commercial organizations subject to PIPEDA; transfers to other jurisdictions are protected by appropriate safeguards such as standard contractual clauses. 

United States If you are in a US state with a consumer privacy law (e.g., California), you may have rights to know, access, correct, and delete personal information we hold about you, and the right to non-discrimination for exercising them. We do not sell or share personal information for cross-context behavioural advertising. 

Other jurisdictions. Where local law grants you additional privacy rights, we will honour valid requests to the extent required. 

10. Complaints and questions 

Please direct privacy questions, requests, or complaints to info@thinkresilience.ca. 

If we cannot resolve your concern, you may contact the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca) or, for matters under PIPEDA, the Office of the Privacy Commissioner of Canada (priv.gc.ca)

11. Changes to this policy 

We may update this policy from time to time. The "Effective date" above shows the latest revision. Material changes will be posted on this page.