Privacy Policy

HOPE Health Inc. ("HOPE Health," "we," "us," or "our") is committed to protecting your privacy and safeguarding the personal and health information you entrust to us. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our telehealth platform and related services.

We operate in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial health information legislation, including Ontario's Personal Health Information Protection Act (PHIPA), Alberta's Health Information Act (HIA), and British Columbia's Personal Information Protection Act (PIPA).

1. Information We Collect

We collect the following categories of personal information:

• Identity Information: Name, date of birth, sex, email address, phone number, and province of residence.
• Health Information: Medical history, current medications, allergies, height, weight, BMI, clinical assessment responses, treatment preferences, and physician consultation notes.
• Account Information: Login credentials (password stored in encrypted form), communication preferences, and account activity.
• Payment Information: Billing address and payment method details. Payment processing is handled by our PCI-compliant third-party processor; we do not store full credit card numbers.
• Technical Information: IP address, browser type, device information, and usage analytics to improve our platform.

2. How We Use Your Information

We use your personal information for the following purposes:

• Healthcare Services: To facilitate medical consultations, prescriptions, treatment plans, and ongoing care by licensed Canadian physicians.
• Account Management: To create and manage your account, authenticate your identity, and communicate with you about your care.
• Treatment Coordination: To share relevant health information with prescribing physicians and dispensing pharmacies involved in your care.
• Platform Improvement: To analyze usage patterns and improve our services, user experience, and clinical outcomes.
• Legal Compliance: To meet our obligations under federal and provincial health privacy legislation and regulatory requirements.
• Safety: To protect the health and safety of our patients and to prevent fraud or misuse of our platform.

3. Data Storage & Security

We take the protection of your information seriously:

• All data is stored on servers located in Canada, in compliance with Canadian data residency requirements for health information.
• We use encryption in transit (TLS 1.2+) and encryption at rest (AES-256) for all personal and health data.
• Access to patient data is restricted to authorized healthcare professionals and platform administrators on a need-to-know basis.
• We implement row-level security policies ensuring patients can only access their own records.
• Regular security audits and vulnerability assessments are conducted to maintain the integrity of our systems.
• Health records are retained for a minimum of 10 years following your last interaction, in accordance with provincial medical records retention requirements.

4. Your Rights

Under PIPEDA and applicable provincial legislation, you have the right to:

• Access: Request a copy of the personal and health information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Withdraw Consent: Withdraw your consent for the collection or use of your information, subject to legal and contractual restrictions. Note that withdrawing consent for health information processing may affect our ability to provide medical services.
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.
• Data Portability: Request your health records in a commonly used electronic format.

To exercise any of these rights, contact us at privacy@hopetelehealth.ca. We will respond to your request within 30 days.

5. Third-Party Sharing

We do not sell your personal information. We may share your information with the following parties, only as necessary:

• Licensed Physicians: Physicians on our platform who provide medical consultations and prescribe treatments.
• Licensed Pharmacies: Canadian pharmacies that dispense prescribed medications.
• Infrastructure Providers: Cloud hosting and database services that process data on our behalf under strict data processing agreements.
• Payment Processors: PCI-compliant payment providers for transaction processing.
• Regulatory Bodies: When required by law, court order, or to comply with regulatory obligations.

All third-party service providers are contractually bound to protect your information and use it only for the purposes we specify.

6. Cookies & Tracking

We use essential cookies to maintain your authentication session and ensure the platform functions correctly. We may also use analytics tools to understand how our platform is used. For full details, please see our Cookie Policy.

7. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on our platform and, where appropriate, by email. The "Last updated" date at the top of this page indicates when the policy was most recently revised.

8. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact our Privacy Officer: