Collection and Use of Personal Information
The Pharmacy may collect personal information from a user of the Website (the “Site User”) when the Site User uses the Pharmacy website. The Pharmacy may use such personal information as is reasonably required to process the Site User’s registration for the Website and/or to provide information and other features on the website that may be useful to the Site User.
Contact information that the Site User provides to the Website may be used to contact him or her in connection with the Website. For instance, depending on which services the Site User has subscribed to and which privacy preferences the Site User has indicated to the Pharmacy, the Pharmacy may use the Site User’s contact information to provide notices regarding changes to the Website or regarding new or updates to the services or products.
The Pharmacy may collect and analyze non-personal information to evaluate how visitors use the Website, including non personal information about usage and service operation that is not associated with a specific personal identity. The Pharmacy also automatically receives and records information on the Pharmacy’s server logs, which information may include the Site User’s computer’s IP address and “cookie” information. The Pharmacy uses the Site User’s IP address to help identify the Site User, gather broad demographic information about the Pharmacy’s users, diagnose problems with the Pharmacy’s systems, and administer the Website. A cookie is a small text file that is stored on the Site User’s computer and cannot read data off of the Site User’s computer. The only information a cookie can collect is information supplied by the Site User.
The Pharmacy collects demographic and profile data in connection with the Website and uses such data to tailor each Site User’s experience at the Website and displaying the content according to the Site User’s preferences.
The Pharmacy may share personal information with third-party subcontractors and agents who work on the Pharmacy’s behalf and third party service providers to who provide advice and services in relation to the website or in relation to products or services featured on the website. Such third parties do not have the right to use personal information beyond what is necessary to assist the Pharmacy and they are contractually obliged to maintain confidentiality and security of the personal information and are restricted from using such information in any way not expressly authorized by the Pharmacy.
Disclosure of Personal Information
The Pharmacy may disclose personal information as follows:
• to third party service providers and to affiliated entities in order to carry out work on behalf of the Pharmacy in relation to the website,
• to law enforcement agencies for the purposes of investigating fraud or other offences,
• to legal, financial, insurance, and other advisors or in connection with the sale, reorganization, or management of all or part of its business or operations, and
• as consented to by the Site User from time to time, including to fulfill any other purposes that are identified when the personal information is collected.
The Pharmacy will not use or disclose personal information for purposes other than those for which it was collected, except with the Site User’s consent or as required or permitted by law. Consent may be express or implied, and given in writing by using or not using a check-off box, electronically, orally, or by the Site User’s conduct, such as accessing the Website and/or use of the services or products provided by the Website.
Storage of Personal Information
While in another jurisdiction for processing, the information may be accessed by the courts, law enforcement, and national security authorities.
[NTD: Under the Alberta Personal Information Protection Act, if a service provider outside of Canada is used by an organization, then the organization has to have policies and practices in place that include information as to the countries in which the collection, use, disclosure, or storage of personal information is or may occur and the purposes for which the service provider outside Canada has been authorized to collect, use, or disclose personal information. Therefore, RHT needs to inform the individual pharmacies as to which US company is going to be providing the hosting services and the scope of what the US company is allowed to do.]
[NTD: Under the Ontario Personal Health Information Protection Act, a health information custodian (including a pharmacy) may disclose personal health information about an individual collected in Ontario to a person outside of Ontario only if the person consents to such disclosure. Therefore, Pharmasave should consider whether it might be feasible to implement an “I accept” button when a customer submits his/her refill order through the Website. The message would say something like “Please press “I accept” if you consent to storage of your prescription refill information as submitted in this form on servers located in the United States.”]
Cookies and IP Addresses
The Pharmacy protects against the loss, misuse, and alteration of personal information with security measures appropriate to the sensitivity of the information, including through the use of physical, organizational, and technological measures and appropriate training of employees. However, it is possible that any information transmitted via the Internet may be intercepted by unknown third parties. The Pharmacy is not responsible for the transmission of personal information that is disclosed or becomes transmitted through no omission or act of the Pharmacy.
When appropriate, Site Users are given the opportunity to (i) opt-out of receiving communications from the Pharmacy, (ii) remove their personal information from the Pharmacy’s records, or (iii) elect to no longer receive services from the Pharmacy. If the Site User wishes to opt-out of receiving further communications, please contact the Pharmacy’s by email or phone using the contact information provided below.