Last updated October 2026
Privacy policy
OMX handles personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). OMX does not build profiles of individuals. Our datasets are company-level, and the personal information we hold is limited to what people provide when they contact us.
1. What we collect and why
Enquiries. When you contact us by email, we receive your name, email address and any information you choose to include, and use them only to respond to you and manage our relationship.
Website. Our website uses essential cookies to operate and may use basic analytics to understand how the site is used.
2. Supplier data and secondary use
Company-level supplier information. OMX maintains a proprietary dataset of company-level information about suppliers, such as company name, location, industry classification, capabilities, certifications, size and ownership. Where this information is not confidential to a client, OMX may retain it and use it for secondary purposes, including maintaining and enriching our dataset, aggregated research and benchmarking, and the delivery of studies for other clients.
Client confidential information. Client spend, contract values, pricing, the association of a supplier with a client or program, and any information a client designates as confidential are used only to deliver that client’s engagement. They are not used for secondary purposes and are never disclosed to other clients.
3. Sharing and storage
We do not sell information. We share it only with service providers, who help us operate and are bound by confidentiality obligations, or where required by law.
Information is stored using secure cloud services, including Google Workspace, and may be stored or processed outside Canada, including in the United States, where it may be subject to the laws of those jurisdictions.
4. Safeguards and retention
We protect information with safeguards appropriate to its sensitivity, and keep personal information only as long as needed for the purposes above or as required by law.
5. Your rights
You may withdraw your consent, or ask to access or correct the personal information we hold about you, by contacting us. If we cannot resolve a concern, you may contact the Office of the Privacy Commissioner of Canada.
6. Contact
Our Privacy Officer is accountable for this policy and can be reached at contact@theomx.com. We may update this policy from time to time; the date above shows when it last changed.