Introduction
At OATRx, we prioritize the privacy and security of personal information for our clients, which include clinics and pharmacies across British Columbia, Canada. This policy outlines how we manage personal information in accordance with PIPEDA and other relevant privacy laws.
Collection of personal information
We collect personal information in two main ways.
From public sources
We gather information about pharmacies, clinics and hospitals from publicly available websites, including business contact information and service offerings.
From registered users
Clinics and pharmacies that register to use our services provide us with the details needed to deliver those services, such as contact information, employee details for account setup, and transactional data for services rendered.
Purpose of collection
The information we collect is used to:
- Provide and manage our services efficiently, including delivery management and appointment scheduling systems.
- Enhance our services and user experience based on performance analytics and user feedback.
- Communicate important updates, service changes and promotional offers.
Consent
Consent is obtained from individuals at the time personal information is collected. We make sure the purposes are clearly communicated, and consent is documented. Individuals may withdraw their consent at any time, subject to legal or contractual restrictions.
Disclosure of personal information
Personal information is not sold, traded or rented to third parties. We may share information with third-party service providers under strict confidentiality agreements to help provide our services. All third-party providers are vetted to ensure they comply with PIPEDA and our own high standards of privacy protection.
Safeguards
We use robust administrative, technical and physical safeguards to protect personal information from unauthorized access, alteration or destruction. Regular audits are conducted to ensure these safeguards remain effective.
Accuracy
We take steps to ensure that the personal information we hold is accurate, complete and up to date. Registered users can review and update their information in their account settings, and we respond promptly to requests to correct inaccurate information.
Openness and transparency
This privacy policy is publicly available on our website and gives a clear and comprehensive description of how we manage personal information.
Individual access
Individuals have the right to access the personal information we hold about them. Requests for access can be made using the contact information below, and we will provide the requested information within 30 days.
Challenging compliance
Concerns or complaints about our compliance with this policy can be directed to our Privacy Officer. We commit to investigating all complaints and taking appropriate action to put things right.
Changes to this policy
We reserve the right to modify this privacy policy at any time. We will post any changes on our website and, where appropriate, notify you by email.
Contact us
For more information about our privacy practices, for questions, or to make a complaint, please contact our Privacy Officer at privacy@oatrx.ca.