Privacy Policy
We believe your health information is sacred. Here's exactly how we protect it.
Last updated: April 14, 2026
Our Privacy Promise
Your information never leaves Canada. It's stored on servers in Hamilton, Ontario.
We don't sell, share, or "anonymize" your data for profit. Your information is yours.
Only licensed healthcare providers and essential staff can access your information.
Want to delete your account? We'll remove everything except legally required healthcare records.
What Information We Collect
Health Information You Provide
- Medical history and current symptoms
- Current medications and allergies
- Pharmacy information
- MSP number (for BC PharmaCare verification)
Contact Information
- Name, address, phone number, email
- Emergency contact information
Payment Information
- Payment processed through Stripe (we don't store your card details)
- Billing address
Technical Information
- IP address and browser type (for security)
- Access logs (who accessed what, when)
- No tracking cookies or analytics beyond essential security
How We Use Your Information
To Provide Healthcare Services
- Nurse practitioner review and prescription decisions
- Sending prescriptions to your chosen pharmacy
- Following up on your treatment progress
To Comply with Healthcare Regulations
- Maintaining healthcare records as required by BC law
- Reporting adverse drug reactions to Health Canada
- Quality assurance and clinical audits
To Protect Your Safety
- Monitoring for drug interactions
- Security monitoring and fraud prevention
- Emergency contact if we're concerned about your safety
Who We Share Information With
❌ We Never Share For
- Marketing or advertising purposes
- Research without your explicit consent
- Insurance companies (they can't ask, we won't tell)
- Employers or family members without your permission
- Data brokers or analytics companies
Data Security
Technical Safeguards
- All data encrypted in transit and at rest
- Multi-factor authentication for all staff accounts
- Regular security audits and penetration testing
- Servers physically located in Canada with Canadian hosting provider
Human Safeguards
- All staff sign confidentiality agreements
- Regular privacy training for all team members
- Strict access controls - staff only see what they need for their role
- Complete audit logs of who accessed what information
Your Rights and Choices
Access Your Information
Request a copy of all information we have about you. We'll provide it within 30 days, free of charge for the first request each year.
Correct Your Information
If any information is wrong, contact us and we'll fix it immediately. For medical information, changes may require verification from a healthcare provider.
Delete Your Account
We'll delete your account and information, except for:
- Healthcare records (kept for 16 years as required by BC law)
- Financial records (kept for 7 years for tax purposes)
- Security logs (kept for 1 year)
Stop Communications
Unsubscribe from non-essential emails anytime. We'll still send critical healthcare communications until your treatment is complete.
Data Retention
16 years after last contact (BC requirement)
7 years (tax requirement)
3 years for quality assurance
1 year for security purposes
Changes to This Policy
We'll email you at least 30 days before making any material changes to this privacy policy. We'll never reduce your privacy protections without your explicit consent.
Minor updates (like contact information changes) will be posted here with an updated date.
Contact Our Privacy Officer
Questions about your privacy or this policy?
Email: privacy@coveredrx.ca
Mail:
Privacy Officer
CoveredRx
[Address]
Hamilton, ON
We respond to all privacy inquiries within 48 hours.
Regulatory Information
CoveredRx operates under the following regulations:
- Personal Information Protection Act (PIPA) - BC privacy law
- Personal Health Information Protection Act (PHIPA) - Health information protection
- College of Physicians and Surgeons of BC - Virtual care guidelines
- BC College of Nurses and Midwives - Nurse practitioner regulations
If you're not satisfied with our response to a privacy concern, you can contact:
- Office of the Information and Privacy Commissioner for BC
www.oipc.bc.ca