Privacy policy

Draft version to be reviewed by the pharmacist-owner and a legal advisor. Items in square brackets [ ] must be completed. The French version prevails.

Last updated: [date]

At Diyane & Bellali — Pharmaceutical Care Clinic, confidentiality is part of care. This policy explains, in plain language, what personal information we collect, why, how we protect it and what your rights are. It applies to our website, our online shop, appointment booking and our exchanges with you.

Contents

  1. Who we are
  2. Person in charge of the protection of personal information
  3. Information we collect
  4. Why we use it
  5. Your consent
  6. Cookies and analytics tools
  7. Sharing with third parties
  8. Communication outside Quebec
  9. Retention and destruction
  10. Security
  11. Your rights
  12. Confidentiality incidents
  13. Complaints
  14. Minors
  15. Changes to this policy

1. Who we are

Diyane & Bellali — Pharmaceutical Care Clinic is a private business established in Quebec, operated by [legal business name, Quebec enterprise number (NEQ)]. Address: [full address]. Phone: [number]. Email: [email address].

Our pharmacists are members of the Ordre des pharmaciens du Québec and are bound by professional secrecy under the Professional Code and the Code of ethics of pharmacists. This obligation applies in addition to this policy.

2. Person in charge of the protection of personal information

In accordance with the Act respecting the protection of personal information in the private sector, the person in charge is: [name], [title]. You can reach this person at [email address] or [number], or by mail at the address above, marked “Confidential — Person in charge of the protection of personal information”.

3. Information we collect

We collect only the information needed for the purposes described in section 4.

  • Identification and contact details: name, address, phone number, email address.
  • Online orders: products purchased, shipping and billing addresses, order history. Payment is processed by our payment provider; we do not have access to your full card number.
  • Appointments and care: the health information you provide for an appointment, consultation, clinical service or prescription renewal (for example: reason for the visit, medications, allergies, relevant results).
  • Exchanges with us: the content of messages sent through our form, by email or by phone. Our contact form is not designed to receive health information: please do not include any.
  • Browsing: IP address, device and browser type, pages viewed, according to your cookie choices (section 6).

We collect this information from you when you fill out a form, place an order, book an appointment or browse our site.

4. Why we use it

  • To process your orders, payments, delivery or pickup, and returns.
  • To schedule your appointments and provide the pharmaceutical care and services requested.
  • To maintain your pharmacy record, as required by professional regulations.
  • To answer your questions and contact you about your orders or appointments.
  • To keep the site secure and prevent fraud.
  • Only with your consent: to send you promotional communications and measure site use.

We do not use your information for other purposes without your consent, unless the law allows or requires it.

5. Your consent

We ask for consent that is clear, free and informed, given for specific purposes. For health information, which is sensitive information, we ask for express consent. You may withdraw your consent at any time by contacting the person in charge (section 2), subject to legal and professional retention obligations. Withdrawal may prevent us from providing certain services.

6. Cookies and analytics tools

Our site uses cookies that are strictly necessary for it to work (cart, security, language preferences). Analytics and marketing cookies are turned off by default: they are only activated if you accept them in the cookie banner. You can change your choices at any time from that banner or in your browser settings.

Tools used: [list of apps and analytics tools, for example Shopify Analytics].

7. Sharing with third parties

We do not sell your personal information. We share it only when necessary, with service providers acting on our behalf who are contractually bound to protect it:

  • Shopify (website and online shop hosting);
  • [payment processor];
  • [carrier or delivery service];
  • [appointment booking tool];
  • [other providers].

As part of your care, certain information may be shared, as permitted by law, with your insurer, the Régie de l’assurance maladie du Québec or other health professionals involved in your care. We may also share information when required by law.

8. Communication outside Quebec

Some of our providers, including Shopify, may store or process information outside Quebec. Before any such communication, we carry out a privacy impact assessment, as required by law, to ensure your information receives adequate protection.

9. Retention and destruction

We keep your information only as long as needed for the intended purposes or as required by law. Pharmacy records are kept according to the rules of the Ordre des pharmaciens du Québec. Retention periods: [to be specified for orders, messages and browsing data]. After these periods, information is securely destroyed or anonymized.

10. Security

We apply physical, technological and administrative security measures suited to the sensitivity of the information: access limited to those who need it, staff confidentiality commitments, encrypted connections and protected accounts.

11. Your rights

You may:

  • access your personal information and obtain a copy;
  • have inaccurate, incomplete or equivocal information corrected;
  • withdraw your consent;
  • request that the dissemination of your information cease or that a hyperlink associated with your name be de-indexed, in the cases provided by law;
  • receive, in a structured, commonly used technological format, the computerized information you provided to us;
  • be informed when a decision about you is based exclusively on automated processing. [No such decision is currently made — to be confirmed.]

To exercise your rights, write to the person in charge (section 2). We may ask you to confirm your identity. We respond in writing within 30 days of receiving the request.

12. Confidentiality incidents

If a confidentiality incident presents a risk of serious injury, we promptly notify the Commission d’accès à l’information du Québec and the persons concerned. We keep a register of incidents, as required by law.

13. Complaints

For any complaint about your personal information, first write to the person in charge (section 2). We will review it and respond in writing. If you are not satisfied, you may contact the Commission d’accès à l’information du Québec (cai.gouv.qc.ca).

14. Minors

[To be confirmed by the pharmacist-owner.] The online shop is intended for adults. Information about a person under 14 is collected only with the consent of the person having parental authority or the tutor, except as provided by law.

15. Changes to this policy

We may change this policy to reflect changes in our practices or in the law. The current version is always published on this page with its update date. In the event of a significant change, we will inform you through a visible notice on our site.