Privacy Policy

1. Introduction
FlashPharmacy (“we,” “us,” “our”) respects your privacy and is committed to safeguarding your personal information. We provide a platform that includes our public website, patient portal application, pharmacy management application, and related online and mobile services (collectively, the “Services”). Through these Services, you can:

• Upload prescriptions and request medication refills
• Communicate with pharmacists and healthcare professionals
• Manage your medication history and delivery preferences
• Access an e-commerce store to purchase health and wellness products
• Receive health-related updates, promotional offers, and other communications

This Privacy Policy (“Policy”) outlines how we collect, use, disclose, store, and protect your personal information, including personal health information, in compliance with Canadian federal and provincial privacy laws, as applicable.

By using our Services, or by clicking “Sign Up,” “Log In,” “Submit,” or similar buttons, you acknowledge that you have read and understood this Policy and consent to our handling of your personal information as described herein.

2. Scope of This Policy
This Policy applies to all users of the Services, including patients, authorized healthcare professionals, pharmacy staff, and visitors. It governs all personal information collected, used, or disclosed through our website, mobile applications, and any associated platforms.

3. Definitions

• Personal Information: Any information about an identifiable individual, including name, address, date of birth, contact details, prescription history, and health information.
• Personal Health Information (PHI): Includes prescription details, health card numbers, medical history, and other information related to healthcare services.
• Authorized Health Professionals: Pharmacists, pharmacy technicians, and other licensed healthcare providers who access the Platform to provide services.
• Users: Individuals who use the Services, including patients, healthcare providers, and visitors.

4. Consent and Account Creation
You may create an account or submit prescription requests through our Services. By doing so, you consent to the collection, use, and disclosure of your personal information as described in this Policy. Certain transactional communications, such as account verification codes, prescription updates, or order confirmations, are essential to the Services and will be sent to you by default.

5. Information We Collect
We only collect the personal information necessary to provide and improve our Services and to meet our legal and regulatory obligations. The information we may collect includes:

• Registration Information: Name, address, email address, phone number, date of birth, gender (if needed), and other contact details.
• Health and Prescription Information: Provincial health card number, prescription details, prescribing practitioner information, medication history, allergies, insurance details, and any other health data you provide.
• Authentication Details: Login credentials (phone number, email address), verification codes, and in the future, login via third-party accounts (e.g., Google, Apple) to streamline your authentication process.
• Transaction and Payment Information: Payment card details (secured through tokenization), billing and shipping addresses, order history, and related information for purchases made through our e-commerce store.
• Technical and Usage Data: IP addresses, device identifiers, browser type, access times, pages visited, and other data collected through cookies or similar technologies for analytics and service improvement.
• Communications: Information you provide when contacting customer support, responding to surveys, or communicating with pharmacists or customer service representatives.

6. Login Methods and Future Integrations
Currently, you can log in using:

• Phone Number: A verification code will be sent to your mobile device.
• Email Address: A verification code will be sent to your email.

In the future, we may offer login via third-party services (e.g., Google, Apple). By using these login methods, you consent to our receiving certain personal information from the third party, such as your name and email address, as permitted by their privacy policies.

7. Communications and Notification Preferences
By default, when you sign up, request prescriptions, or otherwise interact with our Services, you are automatically subscribed to receive communications via text (SMS) and email in three categories:

1. Transactional/Important Messages: Verification codes for login, order confirmations, prescription readiness notifications, account-related alerts. These are necessary for providing the Services and cannot generally be unsubscribed from without affecting your use of the Services.
2. Medical/Health Campaigns: Updates on vaccination drives, health-related awareness campaigns, check-up drives, and similar healthcare initiatives.
3. Promotional Offers and Discounts: Information about special offers, discounts, loyalty programs, and other promotional deals.

You may choose to unsubscribe or adjust preferences for the Medical/Health Campaign messages and Promotional Offers at any time by following the instructions provided in these communications or by contacting our customer support. Please note that unsubscribing from promotional or medical campaign messages will not affect transactional communications necessary for your use of the Services.

8. Use of Personal Information
We use your personal information to:

• Provide and deliver Services, including prescription fulfillment, e-commerce transactions, and appointment scheduling.
• Facilitate secure authentication and account management.
• Communicate updates regarding prescriptions, orders, account activities, and healthcare notifications.
• Personalize your experience and enhance the usability of the Services.
• Comply with regulatory and legal requirements, including pharmacy practice regulations, professional standards, and reporting obligations.
• Monitor and improve the quality, efficiency, and relevance of our Services through analytics and aggregated data insights.
• Detect, investigate, and prevent security threats, fraudulent activities, or unauthorized access.

9. Disclosure of Personal Information
We do not sell, rent, or trade your personal information. We may disclose it under limited circumstances:

• Healthcare Providers and Staff: Pharmacists and authorized staff who need access to fulfill prescriptions and provide healthcare services.
• Service Providers: Third-party vendors who assist with operations such as payment processing, delivery services, data hosting, communications support, and analytics. These providers must protect your personal information and use it only for authorized purposes.
• Legal and Regulatory Requirements: To comply with laws, regulatory bodies, subpoenas, or court orders; to protect our rights, interests, or property; or to ensure public safety.
• Business Transactions: In the event of a merger, acquisition, restructuring, or sale of assets, personal information may be transferred to the acquiring entity under confidentiality obligations and in accordance with applicable law.

10. No Third-Party Advertising
We do not host or display third-party advertisements (e.g., Google AdWords) that collect your personal information for advertising purposes. Any marketing communications we send are based solely on our own products, services, promotions, and health campaigns.

11. E-Commerce Store
We offer an e-commerce store where you can purchase health-related and wellness products. We collect and use your personal information to:

• Process orders and manage payments.
• Arrange for shipping and delivery.
• Handle returns, refunds, and customer support inquiries.
• Improve product offerings and user experience.

12. Security and Storage of Personal Information
We use reasonable safeguards, including technical, administrative, and physical measures, to protect your personal information against loss, theft, unauthorized access, disclosure, copying, or modification. Our servers may be located in Canada or other jurisdictions that ensure a comparable level of data protection. Despite our best efforts, no method of transmission or storage is 100% secure. In the event of a breach that poses a risk of significant harm, we will notify affected individuals and relevant authorities as required by law.

13. Retention of Personal Information
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Policy, to comply with legal and regulatory requirements, and as needed for recordkeeping, audits, or dispute resolution. Once no longer required, personal information is securely destroyed or anonymized.

14. Accessing, Correcting, and Deleting Your Information
You may request access to, correction of, or deletion of your personal information by contacting us at the details provided below. We will verify your identity before fulfilling such requests and will inform you of any consequences, such as loss of service functionality. Certain records, especially those related to pharmacy records and healthcare services, may be required by law to be retained for a specific period.

15. Withdrawal of Consent
You may withdraw your consent to our collection, use, or disclosure of your personal information at any time by contacting us. Please note that withdrawing consent may limit our ability to provide certain Services.

16. Children’s Privacy
Our Services are intended for use by adults. If a parent or guardian assists a minor in accessing our Services, they consent to the collection and use of that minor’s personal information. We do not knowingly collect information from individuals under the age of majority without appropriate parental or guardian consent.

17. Cookies and Analytics
We may use cookies, web beacons, and similar technologies to improve user experience, track usage patterns, and conduct analytics. You can configure your browser to refuse cookies, but doing so may affect certain functionalities of the Services. We use analytics tools to help us understand how users interact with our Services and to improve their performance.

18. Future Updates
We may add new features or services, such as login via Google or Apple accounts, without materially changing how we handle personal information. We will update this Policy if our privacy practices materially change and will notify you of any significant changes before they take effect.

19. Changes to This Privacy Policy
We reserve the right to modify this Policy at any time. Material changes will be communicated through a prominent notice on our website or via email. The “Effective Date” at the top of this Policy will always indicate when it was last updated. Your continued use of the Services after such changes constitutes acceptance of the revised Policy.

20. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us.