Compass orientation
This is the privacy policy of the reference site (industrialalliance.gr.com), not the carrier’s. The carrier publishes its own customer-data policy on its own domain. This page covers what we, the reference, do and do not collect from visitors who read these pages.
This page sets out the privacy practice of industrialalliance.gr.com, an editorially independent reference to the Industrial Alliance brand and the iA Financial Group product universe. We are not the carrier; we do not sell coverage; we do not capture quote data; we do not run any form that asks a visitor for personal information. The privacy questions a visitor might ordinarily ask of an insurer — how my policy data is handled, how my health information is processed, how my beneficiary record is stored — are not in scope here. Those questions belong to the carrier’s own privacy policy, which is published on its own domain.
What we do is read carrier disclosure documents, read regulatory filings and write plain-English explanations of the brand, the products and the portals. The data we collect from visitors is the data any static website collects: a small slice of analytics that helps us understand which pages are read, which links are followed and whether the site is being scraped abusively. Everything below describes that practice in concrete terms.
What we collect
On each pageview we log three pieces of information: the IP address of the requesting client, the user-agent string of the requesting client, and the referrer URL if one is supplied by the browser. These three values let us count unique sessions, understand which devices our readers use and see which inbound sources sent the traffic. We do not run any login, do not run any form, do not run any quote engine, and do not run any chatbot, so there is no other class of data being captured.
We do not run advertising. We do not load tracking pixels from advertising networks. We do not run a customer-data platform. We do not enrich the visitor record with any third-party identity data. The IP address and user-agent we log are exactly what every webserver on the internet logs by default; we do not augment them in any way.
Data table
| Data type | Purpose | Retention |
|---|---|---|
| IP address | Aggregate traffic counts; abuse detection | 13 months raw, then aggregated |
| User-agent string | Browser and device share for compatibility planning | 13 months raw, then aggregated |
| Referrer URL | Inbound source attribution for editorial planning | 13 months raw, then aggregated |
| Language-preference cookie | Remember English/French interface choice between visits | 12 months from last visit |
| Analytics session cookie | Count unique sessions; first-party only | 30 days from last visit |
| Server access logs | Operational debugging and uptime monitoring | 13 months, then deleted |
| Aggregated counts | Monthly trend analysis after raw data is discarded | 36 months from aggregation |
Cookies
A small number of first-party cookies are set by this site. The first remembers a visitor’s language preference between visits so that an English-preference reader is not asked to choose every time, and a French-preference reader has the same continuity. The second is a session cookie used for analytics that simply counts unique sessions; it does not carry an identifier that we can reverse to a real person.
No third-party advertising cookies are set. No cross-site tracking pixels are loaded. No identity-graph providers are queried. A visitor who blocks all cookies will see the same content as a visitor who allows cookies; the only consequence of blocking is that the language preference will not persist between visits and analytics will under-count unique sessions.
Third-party fonts
Typography on this site is served by Google Fonts (IBM Plex Sans). The browser’s request to fonts.googleapis.com therefore exposes the visitor’s IP address and user-agent string to that service. We do not control or share what Google does with that request and refer visitors to Google’s own privacy policy for that question. A visitor who prefers not to load Google Fonts can use a privacy-hardened browser or a font-blocking extension; the site falls back to a system font stack and remains fully readable when third-party fonts are blocked.
What we do not do
We do not collect names, email addresses, phone numbers, postal addresses or any other directly identifying personal information from visitors. We do not run a quote engine and do not collect coverage-amount, age, sex, smoker-status or any other data that would feed an underwriting model. We do not run a chatbot and do not capture conversation transcripts. We do not run a newsletter sign-up. We do not run a contact form on this domain that submits to anything other than a static thank-you page.
We do not sell analytics data, do not share it with third-party data brokers, and do not use it for advertising targeting. The analytics exists for one reason: to understand which pages are read so we can prioritise editorial updates. Where we cite a regulator, the citation is unaffiliated and we do not receive any compensation for the link.
How long we keep data
Raw analytics data — IP, user-agent, referrer — is kept for thirteen months. After thirteen months the raw data is aggregated to monthly counts and the IP and user-agent detail is discarded. Aggregated counts are kept for up to thirty-six months for trend analysis. Server access logs follow the same thirteen-month rule and are then deleted. The language-preference cookie expires twelve months after the visitor’s last visit; the analytics session cookie expires thirty days after the visitor’s last visit.
Children
This reference is written for adults considering financial-services products. We do not knowingly collect data from children. The analytics we collect does not allow us to determine the age of a visitor, so we cannot proactively distinguish a young reader from an adult; if a parent or guardian believes their child has interacted with this site in a way that raises a concern, the contact route below applies and we will purge the relevant session data on request.
How to contact us
For corrections to a page, for questions about this policy, or for a request to purge any session data that may relate to a specific visitor, the toll-free reference desk number sits at the bottom of every page. Authoritative federal guidance on personal-information practices in Canada is published by the Office of the Privacy Commissioner of Canada, which sets the standard against which our practice is measured.
Changes to this policy
We update this policy whenever the underlying practice changes. The most common reason for an update is a change to the analytics provider or the addition of a new third-party asset (such as a font service); both are uncommon events. When we update the policy we set a refreshed lastmod stamp on the sitemap so that search engines see a freshly modified resource, and we keep a short editorial note at the top of the page if the change is material rather than purely cosmetic.
Frequently asked questions
What does this reference site collect?
Analytics data only. We log IP address, user-agent string and referrer URL on each pageview to understand traffic patterns and to detect abusive scraping. We do not run forms, do not run a quote engine, and do not capture any personally identifiable information from visitors. The data we collect is the data any static website collects by default; we do not enrich it with third-party identity providers and we do not sell or share it. Where we cite a regulator, the citation is unaffiliated and we receive no compensation for the link.
Are cookies used on this site?
A small number of first-party cookies are used to remember a visitor’s language preference and to count unique sessions for analytics. No third-party advertising cookies are set, and no cross-site tracking pixels are loaded. A visitor who blocks all cookies will see the same content as a visitor who allows cookies; the only consequence of blocking is that the language preference will not persist between visits and analytics will under-count unique sessions, neither of which materially affects the reading experience on this domain.
Where do the third-party fonts load from?
Typography is served by Google Fonts (IBM Plex Sans). The browser request to fonts.googleapis.com therefore exposes the visitor’s IP and user-agent to that service. We do not control or share that data; visitors who prefer not to load it can use a privacy-hardened browser or a font-blocking extension. The site falls back to a system font stack and remains fully readable when third-party fonts are blocked, so privacy-conscious readers do not lose access to any content by opting out of the external typography request.
How long is the analytics data retained?
Analytics data is retained for thirteen months in raw form, after which it is aggregated to monthly counts with all IP and user-agent detail discarded. Aggregated counts are kept for up to thirty-six months for trend analysis. Server logs follow the same thirteen-month rule and are then deleted. The language-preference cookie expires twelve months after the visitor’s last visit; the analytics session cookie expires thirty days after the visitor’s last visit, and a visitor who clears cookies between visits resets both timers immediately.