Privacy Policy for Group One Medical Clinic
Last Updated: June 15, 2024
The Company: Group One Medical Clinic 2807832 Ontario Inc,
a corporation incorporated and existing under the laws of Ontario, Canada hereinafter referred to collectively as “GROUP1,” “us,” or “we,” is pleased to offer you access to our webpages (the “Webpages”) and associated online clinics and apps (the “Platforms”).
Privacy Statement
The purpose of this Privacy Statement is to inform you about the types of personal information (as follows, “The Company”, “we” or “us”) collects, uses and discloses. It explains how we use and disclose that information, the choices you have regarding such use and disclosure and how you may correct that information. We are proud to demonstrate our commitment to your privacy by complying with the laws and regulations under applicable privacy laws in Canada, including the Personal Information Protection and Electronic Documents Act. We will treat personal information in a manner consistent with the version of the Privacy Statement under which it was collected and our Privacy Policy, unless we have your consent to treat it differently. This Privacy Statement applies to any personal information we collect or receive about you, from any source, including through our websites and other online platforms (the “Sites”). Your consent is obtained upon account registration or as required by law. HCPs obtain patient consent during appointments. We encourage you to read this Privacy Statement before providing us with any personal information and before using any of the Sites. By providing us with any personal information or using any of the Sites, you are signifying that you agree with all of the terms of this Privacy Statement, so please do not do so if you disagree with any part of this Privacy Statement.
Collection of Personal Information
To which companies does this Privacy Statement apply?
This Privacy Statement applies to the collection, use and disclosure of personal information by Group 1 Clinic – 2807832 Ontario Inc
What is personal information?
Personal information is any factual or subjective information about an identifiable individual. Your personal information may include but is not limited to your name, mailing address, phone numbers, gender, email address, identification numbers, etc. Personal Information, however, does not include any information that is solely used to communicate with you in relation to your employment, business or profession, such as your name, position name or title, work address, work telephone number, or work electronic address.
How do we collect your personal information?
We will always collect your personal information by fair and lawful means. For example, you may provide your personal information when you complete a contest ballot form, submit a promotional product request form, participate in a promotional offer, including one that requires you to submit a receipt, or contact Consumer Affairs. You may also provide your personal information when you use one of our Sites, including by creating an account, entering a contest, signing up for email communications or participating in a survey. We sometimes collect personal information from you through third party service providers.
We may also collect your demographic data, such as your gender and postal code, and information found on a retail receipt such as your basket size/total purchase amount and products purchased, when you provide this information to us. Demographic data may be used to tailor your experience on the Sites and the communications you receive from us, to determine aggregate consumer preferences and purchasing patterns, and promotion evaluation, development and implementation. On occasion, aggregate information that does not identify any particular user may be compiled and shared with our affiliates and other third parties.
What about children?
We generally do not collect information that is identifiable to children. When we do, it is on a limited basis and with the expectation of adult supervision or permission. For example, we may receive children’s names, and associated adult contact information, as part of a contest so that we can notify contest winners. In such cases, we strictly limit the use of that personal information to the purposes for which it was collected. We recommend that parents and guardians take steps to limit and monitor their children’s Internet activities directly, or through software and other tools.
How do we use technology to collect information through the Sites?
We collect anonymous information about any user of the Sites. This anonymous information may include a user’s browser type, type of computer operating system, and the domain name of the website from which the user linked to the Sites. This information is collected for The Company’s internal use, such as to enhance website security, to detect broad demographic trends, to assist The Company in providing content tailored to a user’s interests and to otherwise enhance the user experience on the Sites.
Use of Personal Information
How do we use your personal information?
We use personal information to:
– Manage our relationships with you and provide requested information or services.
– Create HCP and Patient Accounts on the Platforms.
– Facilitate delivery of Health Services or Support Services.
– Conduct research and improve Webpages services.
– Communicate regarding inquiries, customer service, or employment.
– Detect, prevent, or investigate security breaches.
– Process payments and protect our business.
– Maintain internal records.
Whenever we collect your personal information, we will identify the purposes for which we will use that information and we will obtain your consent to such use. We may collect your personal information for a variety of reasons, including: sending you information and communications; responding to product inquiries and other requests; conducting contests and promotions (including sending prizes to winners directly or through third parties acting on our behalf); processing transactions; optimizing your experience on our Sites; addressing product injury claims; and for internal purposes such as analyzing and managing our business and improving our products, services, and promotion efforts. We may also use, or disclose your personal information, if we have reason to believe that using or disclosing such information is necessary to protect our rights, safety or property, including by detecting and preventing fraud. We may also use your personal information as otherwise permitted by law.
When and how do we obtain your consent?
We obtain your consent prior to collecting, using or disclosing your personal information for any purpose. The form of consent that we seek, including whether it is express or implied, will largely depend on the sensitivity of the personal information and the reasonable expectations you might have in the circumstances. In limited circumstances, we may rely on a third party to obtain your consent to the sharing of your personal information with us. You may provide your consent to us either orally or in writing. For example, when you submit a contest ballot form to our redemption house, you provide your consent to allow the redemption house to disclose the information in the ballot form to us so that we may identify you as a contest winner. From time to time, we may collect,
Where do we store your personal information?
We store your personal information in our servers in Canada, as well as our data-centers in the United States. While your personal information is in the U.S., it is subject to U.S. laws, and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies in the U.S., pursuant to applicable laws. Our service providers may, from time to time, also hold your personal information in connection with purposes for which you provided your consent. We may keep a record of your personal information, correspondence or comments in a file specific to you.
Personal information is stored on secure servers in Canada. Third-party service providers may process information outside Canada, subject to local laws.
HCPs may store personal health information on servers outside Canada as per provincial college requirements. We employ physical, administrative, and technical measures to safeguard personal information against loss, unauthorized access, or disclosure. Access to information is restricted to authorized personnel and service providers. HCPs utilizing Platforms have their own security measures for personal information protection. Despite precautions, we cannot guarantee absolute security.
For more information on service providers or data storage, contact us at [email protected].
How long will we use, disclose or retain your personal information?
We will use, disclose or retain your personal information for as long as necessary to fulfill the purposes for which it was collected and as permitted or required by law. We have established minimum and maximum retention periods and secure procedures for maintaining and destroying your personal information.
What about User Generated Content?
From time to time, we may receive content from consumers as part of contests, promotions and other functions of our Sites (“User Generated Content” or “UGC”). Any UGC you submit may be publicly displayed, including on our Sites, and is subject to any terms and conditions communicated to you as part of the submission process. Please remember that any information you disclose in connection with a UGC submission may become public information and you should exercise caution when deciding to disclose your personal, financial or other information in a submission. The Company cannot prevent such information from being used in a manner that may violate this Privacy Statement, the law or your personal privacy and safety and The Company is not responsible for the results of such postings.
The Company Communications
Through our Sites and various offline means, you may sign up or opt-in to receive communications from The Company. If you do not opt-in, The Company will not send you any communications, including promotional offers. Each communication sent to you by The Company contains an “unsubscribe” link or other unsubscribe mechanism, allowing you to opt-out at any time. If you opt-in to receive communications from multiple brands within the Company family of companies, and subsequently wish to opt-out, you may need to opt-out individually from each of the brands you elected to receive communications from.
Disclosure of Personal Information
Generally, we do not disclose your personal information, and where we do, we will identify to whom and for what purposes the disclosure will be made and will obtain your consent to such disclosure. In any case, we only disclose your personal information as permitted or required by law.
We may share personal information, including personal health information, with third-party service providers to operate Webpages and Platforms or fulfill information requests. Service providers comply with this Privacy Policy and use information only for requested services.
Exceptions to consent may occur in limited circumstances:
– When permitted or required by law or regulations.
– In life-threatening emergencies.
– For legal advice, fraud protection, debt collection, or breach investigations.
– In the event of a business merger.
Webpages
Personal information is shared with service providers, including affiliates, to operate Webpages and provide services, optimize Webpages, or for customer service.
Platforms:
Personal information may be shared with service providers, registered HCPs, and third parties at your request (e.g., pharmacies). This includes fraud prevention, payment processing, service provision, customer service, and Health Services delivery.
Service Providers and Personal Information
Webpages – Direct Marketing
If you subscribe to receive direct marketing or promotional communications from GROUP1, we collect your name and email address to provide information about our clinic and associated products and services. If you sign up for newsletters or request additional information, we may share your details with GROUP1 to fulfill your requests.
Platforms – Provider Account Creation
When an HCP registers on our Platforms, we collect personal information including their name, email address, phone number, billing details, information about their medical practice, and registration details with provincial colleges. This information is used to create HCP accounts, verify licensing, confirm identity, and facilitate communication regarding Platform usage.
Platforms – Patient Account Creation
When individuals register as patients on our Platforms to access Health Services with HCPs, we collect their name, email address, phone number, gender, date of birth, province/territory/state of residence, healthcare card details, and billing information. This information is used to create user accounts, and credit card information is processed securely through Stripe without storage on our systems. For patients under 18, the User Account must be held by a parent or legal guardian, who may provide personal information for the minor (“Registered Child”).
Platforms – Patient Visits
HCPs may collect and utilize personal health information about patients during Platform interactions, including consultation reasons, health history, symptoms, and treatments. This information is used to deliver Health Services or Support Services and may be logged in patient accounts for future reference. Patients can also input personal health information into their accounts for HCP reference.
Aside from disclosures, we may use service providers (including our affiliates) to help us operate our business and our Sites and to administer activities on our behalf, such as sending emails, fulfilling orders and conducting contests and promotions. We may share your information with these third parties for those limited purposes. For instance, if you participate in a contest, game or loyalty program resulting in a prize or award, we may share personal information about you with our contest and merchandise fulfillment and management agencies to conduct contests and promotional activities on our behalf. Each of our service providers is required by contract or other binding means to comply with our privacy standards to protect the privacy of your personal information, and to only handle your personal information for The Company purposes (and not for its own purposes).
Ad Networks and Anonymous Information
We may have relationships with third party service providers known as Ad Networks to serve ads on our behalf across the Internet. Using cookies and similar technologies (such as “pixel tags”, “web beacons”, Ad Networks collect anonymous information about your visits to our Sites and other websites in order to deliver advertisements that may be of particular interest to you. This process does not involve the collection of any personal information. For example, the Ad Networks do not know your name, phone number, address or email address and we do not share any personal information about you with these Ad Networks. In connection with these Ad Networks, we adhere to the “Canadian Self-Regulatory Principles for Online Behavioral Advertising”. These Principles were developed by the Digital Advertising Alliance of Canada, a consortium of leading Canadian advertising and marketing associations, with the aim of applying consumer-friendly standards to online behavioral advertising across the World Wide Web.
To opt out of interest-based advertising from third parties collecting data on The Company website, please contact us on www.grouponeclinic.com and request to opt out.
How can you review your personal information that we have collected, used or disclosed?
The Company has a variety of convenient methods available that allow you to review, correct, update or otherwise modify information previously collected from you, including communication preferences. You may:
- modify your information on your account profile page on www.grouponeclinic.com
- write us at [email protected]
We will make available to you any specific personal information of yours that we have collected, used or disclosed, upon your request, to the extent permitted by law. We will make such information available to you in a form that is generally understandable, including explaining any abbreviations or codes.
How do you know that the personal information we have for you is accurate?
We will ensure that your personal information is kept as accurate, complete and up-to-date as possible. We will not routinely update your personal information, unless such a process is necessary. We expect you, from time to time, to supply us with updates to your personal information, when required.
What if the personal information we have for you is inaccurate?
You can, at any time, contact us to review, correct, update or otherwise modify the personal information we have for you. In each such case, you must clearly indicate the information that you wish to have changed or clearly indicate that you wish to have your personal information removed from our database.
If you successfully demonstrate that the personal information we have for you is inaccurate or incomplete, we will amend our records of your personal information as required. Note that despite any request for a change to or removal of your personal information, we may need to retain certain information for record-keeping purposes, and there may also be residual information that will remain within our databases and other records, which will not be removed or changed.
We may make commercially reasonable efforts to transmit any amended information to third parties having access to your personal information, where necessary in the circumstances.
How fast will we respond to your requests?
Please note that requests for changes to your personal information, even those submitted through our Sites, may not be effective immediately. We will attempt to respond to any requests regarding personal information as soon as reasonably possible, and in any event not later than 30 days after receipt of each such request. We will advise you in writing if we cannot respond to any of your requests within this time limit. You have the right to make a complaint to the federal Privacy Commissioner in respect of this time limit.
Are there any costs to you for requesting information on your personal information or on our Privacy Policy?
We will not assess any costs to you for access to your personal information or on our Privacy Policy without first providing you with an estimate of the approximate costs, if any. You may withdraw your request for access to information by notifying us within the 30 day notice period disclosed on the estimate. If you do not notify us within such 30 day period, we will send you a further notice indicating that you will be deemed to have withdrawn your request for access unless you advise us otherwise within 30 days. If after the expiry of this 30 day period, you have not so advised us, we will deem your request to have been withdrawn and provide you with written notice to that effect.
How do we know that it is really you requesting your personal information?
We may request that you provide us with sufficient identification before granting you access to information regarding the existence, use or disclosure of your personal information. Any such identification information shall be used only for this purpose.
What safeguards have we implemented to protect your personal information?
We have implemented physical, organizational, contractual and technological security measures to protect your personal information from loss or theft, unauthorized access, disclosure, copying, use or modification. The only personnel who are granted access to your personal information are those with a business “need-to-know” or whose duties reasonably require access to such information.
What type of security do we provide on our Sites?
The security of all personal information collected through our Sites is of utmost importance to us. We have taken reasonable technical, contractual, administrative and physical security steps to protect the personal information collected from you through the Sites, consistent with standard industry practice and the sensitivity of the personal information collected. For example, if and when you provide credit card information, we use secure socket layer (SSL) encryption to protect it. These security measures are periodically reviewed. However, there are some things that users of our Sites can do to help protect the security of their personal information as well. For instance, no user should ever give out their User name and Password. Also, every user should sign out of their Internet account and close their browser window each time they finish using the Internet so that other people using the same computer will not have access to their information.
Links to Other Sites
Our Sites may contain links to other websites that are not operated by The Company. THE COMPANY IS NOT RESPONSIBLE FOR THE PRIVACY PRACTICES OR THE CONTENT OF SUCH OTHER WEBSITES, INCLUDING WEBSITES OPERATED BY AFFILIATED ENTITIES. We provide such links only as a convenience and the inclusion of a link on any of our Sites does not imply endorsement of the linked to website by The Company. If you provide any personal information through any such third-party websites, your transaction will occur on such third party website (and not on our Sites) and the personal information you provide will be collected by and controlled by the privacy policy of that third party. The Company recommends that you review the privacy policies of third-party websites arrived at from links on our Sites before using those websites.
Whom do I contact with questions or concerns about this Privacy Statement
If you need further assistance, please contact the Company Privacy Officer either by writing to us at: [email protected]
Privacy Statement Updates
The Company reserves the right to make changes in this Privacy Statement. Such changes will take effect immediately upon posting. For your convenience, the last revised date of the current Privacy Statement will be posted at the top of this page. By continuing to interact with us following such changes, including by using our Sites, you will be deemed to have agreed to such changes. If you do not agree with the terms of this Privacy Statement, please do not continue using our Sites.
Governing Law
This Privacy Statement is governed by, and interpreted and enforced in accordance with, the laws in force in the Province of Ontario and the federal laws of Canada (excluding any conflict of laws, rule or principle which might refer such interpretation to the laws of another jurisdiction).