Privacy policy
We value your privacy and are committed to safeguarding your personal information. This notice outlines our privacy policy and how we handle your data. By using this site, you agree to the practices described in this Privacy Notice.
Updated August 1, 2024
1. Information Collection
Information You Provide
We collect and store any information you provide when interacting with our website. This may include personal details such as your name, address, and email. You can choose not to share certain information, but this may limit your ability to use some features.
Automatic Information
Like many websites, we use cookies and store information when your browser accesses our site. This data includes your IP address, browser type, and clickstream data. You can manage cookie settings in your browser, but disabling them may affect site functionality.
Information from Other Sources
We may receive additional information about you from third parties, such as updated delivery details or credit history, to enhance our services.
2. Cookies and How We Use Them
Cookies are small alphanumeric identifiers stored on your device to recognize your browser and provide a personalized experience. While you can manage cookies in your browser settings, we recommend enabling them to fully benefit from the site’s features.
3. Sharing Information
We do not sell customer information. We only share data under the following circumstances:
- Affiliated Businesses: When you interact with third parties through our site, we share relevant transaction information.
- Agents: We work with third-party service providers (e.g., payment processors) who may access necessary personal information to complete tasks but cannot use it for other purposes.
- Promotional Offers: Occasionally, we may send promotional offers on behalf of other businesses, without sharing your name and contact details.
- Business Transfers: In the event of mergers or acquisitions, customer data may be transferred, but it will remain subject to the existing privacy policy.
- Legal Obligations: We may disclose information to comply with laws or protect our rights, property, or safety.
4. Security of Your Information
We use Secure Sockets Layer (SSL) encryption to protect your data during transmission. While we safeguard your information, it’s important to take steps on your end, such as signing out after using a shared computer.
5. Access to Your Information
You can view and update your personal account information through our website. This includes order history, personal details, and communication preferences.
6. Children's Privacy
This site does not offer products for purchase by children. If you are under 18, you may only use the site with the involvement of a parent or guardian.
7. Updates to This Policy
We may update our privacy notice periodically. You should check our site regularly for any changes. We stand by the commitments made in this notice and will not make any material changes without your consent.
8. Uses and Disclosures of Health Information
- Treatment: We use your health information to provide services and share it with those involved in your care.
- Payment: We may disclose health data to process payments from insurers or third parties.
- Operations: Your information may be used for quality assurance and business operations.
9. Your Rights
- Confidential Communications: You can request communications in specific ways or locations.
- Request Restrictions: You may ask for restrictions on how we use your information.
- Inspection and Copies: You have the right to inspect and obtain copies of your health records.
- Amendment: If your information is incorrect, you can request an amendment.
- Accounting of Disclosures: You can request a list of disclosures made about your health information.
- Right to a Paper Copy: You are entitled to a physical copy of this notice.
10. Complaints
If you believe your privacy rights have been violated, you may file a complaint with us or the Office of Civil Rights. You will not face penalties for filing a complaint.
11. PIPA Privacy Compliance
Healthcare Solutions is committed to safeguarding all personal information entrusted to us according to Alberta’s Personal Information Protection Act (PIPA) by adhering to the 10 principles of PIPA outlined in this policy.
PIPA sets the basic rules for how private-sector organizations in Alberta collect, use or disclose personal information during business activities.
Personal information is information that identifies an individual including name, home address, phone number, age, sex, height, weight, identifying numbers, financial information, and more.
Accountability
- The company, Healthcare Solutions, and its employees will comply with all 10 Principles.
- The Executive Director is responsible for the company’s compliance with this policy.
- Personal information held by the company or transferred to a third party for processing will be protected.
Identify Purpose for Collection
We need to collect personal information from individuals to:
- Provide appropriate medical supplies and collaborate with health professionals.
- Administer third-party billing and collect payment.
- Arrange delivery or make appointments.
- Enroll individuals in loyalty, warranty, and financing programs.
- Conduct customer satisfaction surveys.
- Market events and promotions of interest.
- Identify and inform individuals of health-related benefits or services of interest.
Before or when any personal information is initially collected and if we identify a new purpose for the information, we’ll identify why it’s needed and how it will be used.
Obtain informed consent
- Consent is valid only if people can reasonably understand what they are agreeing to, including the purpose and consequences of collecting, using, or sharing their information.
- We’ll specify what personal information we’re collecting and why in a way that our customers can clearly understand.
- We’ll obtain consent before or at the time of collection, as well as when a new use of their personal information is identified, either verbally, in writing, or electronically (for example, checking a box on a form or clicking a button).
- We may assume consent when an individual volunteers personal information for an obvious purpose (e.g., using a credit card for a purchase).
- For non-sensitive personal information, we may rely on individuals to “opt-out” of consent to disclose information by asking them to check a box on an application or web form.
- We may collect personal information without an individual’s knowledge or consent only as outlined as specific exceptions under PIPA.
- Individuals have the right to refuse or withdraw their consent, but we may not be able to provide them with certain services.
Limit Collection of Personal Information
We only collect the personal information we need for the purposes specified, do not collect personal information randomly, and do not mislead people about why we are collecting it.
Limit use, disclosure, & retention
- We only use or disclose personal information to third parties for the purposes it was collected, unless the individual consents or the use or disclosure is authorized by PIPA.
- Personal information is accessible to employees on a need-to-know basis, and employees are legally bound to confidentiality.
- We have guidelines in place to retain personal information only as long as necessary to fulfill the purposes for which it was collected or as required by law.
- We have guidelines in place to destroy, erase, or render anonymous any personal information that is no longer required for an identified purpose or a legal requirement by shredding paper records and permanently deleting electronic records.
Keep personal information accurate
We make every effort to minimize the possibility of using incorrect information when making a decision about the individual or when disclosing information to third parties.
Safeguard personal information
- We protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification.
- We protect personal information regardless of the format it’s stored in.
Make information about policies & procedures available
- This policy and our other privacy practices are accessible to individuals on our website.
- Individuals can request a copy of this policy at any time.
Provide access to personal information
- Individuals have access and can request copies of personal information the company has about them, with specific exceptions under PIPA.
- If requested we’ll inform individuals if we have any personal information about them, how it is used, and provide a list of any organizations to which it has been disclosed.
- If requested, we’ll provide a copy of this information or explain why we can’t provide some or all of it under PIPA (for example, if it would reveal details about another person, confidential business information, or information that
- is privileged or in mediation records).
- We’ll correct or update any personal information that’s inaccurate or incomplete.
- Detailed requests for access and corrections made to the Executive Director will be responded to within 45 calendar days and, except for corrections, may be charged a fee.
Provide recourse
- We’ll notify the Office of the Information and Privacy Commissioner of Alberta of security breaches affecting personal information that create a risk of significant harm to individuals.
- Individuals with questions, concerns, or complaints about the collection, use, or disclosure of personal information can contact:
Executive Director, Healthcare Solutions
5920 Gateway Blvd NW, Edmonton, Alberta T6H 2H6
Phone: 780-434-0449
Email: privacy@hcs.ca
- We promptly investigate all complaints received and take appropriate measures to correct information handling practices. If not satisfied with our response, individuals may contact the Information and Privacy Commissioner of Alberta:
Office of the Information and Privacy Commissioner of Alberta
Suite 2460, 801 - 6 Avenue SW, Calgary, Alberta T2P 3W2
http://www.oipc.ab.ca
Phone: 403-297-2728
Toll-Free: 1-888-878-4044
Email: generalinfo@oipc.ab.ca