Last updated: [[POLICY_DATE]]. This policy must be reviewed by your privacy officer and legal counsel before launch — it is a drafted starting point, not legal advice.

Privacy policy

We hold your prescription records and health information. That carries obligations we take seriously, and you should know exactly what we do with it.

Cleandosis is a licensed pharmacy operated by [[LEGAL_ENTITY]] at [[ADDRESS]]. We handle personal health information under Canadian privacy law, including PIPEDA and applicable provincial health-information legislation, and under the privacy obligations imposed on us by [[REGULATOR]].

What we collect

• Identity and contact — name, date of birth, delivery address, phone, email.
• Health information — your prescriptions, the medicines we dispense to you, allergies, other medicines you tell us about, and your prescriber’s details. We need this to dispense safely.
• Order and payment — what you ordered and when. Card details are processed by our payment provider and are not stored on our systems.
• Technical — IP address, browser and pages visited, for security and to keep the site working.

Why we hold it

To dispense your prescription safely and lawfully: verifying the prescription, checking for interactions, keeping the medication record our regulator requires, delivering your order, and contacting you about it — including in the event of a recall.

We do not sell your personal or health information. We do not use your health information for advertising or share it with advertising networks.

Who sees it

• Our pharmacy staff, where needed to dispense your medicine.
• Your prescriber, where we need to confirm or clarify a prescription.
• Service providers — delivery carrier (name and address only) and payment processor — bound to protect it and use it only for that purpose.
• Regulators, where law or our licensing obligations require disclosure.

Nobody else, without your consent.

How long we keep it

Pharmacies are legally required to retain dispensing records for a set period — currently [[RETENTION_PERIOD]] under [[REGULATOR]] rules. We keep prescription records for that period even if you ask us to close your account, because we are obliged to. Marketing preferences and non-clinical account data are deleted on request.

Your rights

You may ask for a copy of what we hold, ask us to correct anything inaccurate, withdraw consent for non-essential uses such as marketing email, or complain about how we have handled your information.

Contact our privacy officer at [[PRIVACY_EMAIL]] or [[PHONE]]. We respond within [[PRIVACY_RESPONSE_DAYS]]. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada, or to [[REGULATOR]].

Security and breaches

The site runs over encrypted connections, access to health records is restricted to staff who need it, and payment card details never touch our servers. No system is perfect: if a breach creates a real risk of significant harm, we will notify affected individuals and the Privacy Commissioner as the law requires.

Cookies

We use cookies necessary to run the site — keeping you logged in, holding your session, security. [[COOKIE_ANALYTICS_STATEMENT]] We do not use advertising cookies that profile you by health condition.