PRIVACY POLICY

Effective Date: January 30, 2026

PRIME Clinics and its affiliates (collectively, "PRIME Clinics," "we," "us," or "our") are committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information and personal health information when you use our website, mobile applications, and any other online services (collectively, the "Services").

By accessing or using our Services, you agree to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Services.

1. INFORMATION WE COLLECT

We collect several types of information from and about users of our Services, including:

Personal Information

This refers to information by which you may be personally identified, such as your name, postal address, e-mail address, telephone number, date of birth, and any other identifier by which you may be contacted online or offline.

Personal Health Information (PHI)

In the course of providing clinical coordination, we may collect information regarding your health history, symptoms, laboratory test results, physical characteristics (such as height and weight), and communications with healthcare providers. Personal and health data is managed in compliance with Alberta's Health Information Act (HIA), PIPA, and PIPEDA.

Financial Information

When you make payments through our Services, we collect credit card or other payment information. This data is processed by our third-party, PCI-compliant payment processors. We do not store full credit card numbers on our servers.

Technical and Usage Data

As you navigate through the Services, we may use automatic data collection technologies to collect certain information about your equipment and browsing actions, including:

  • IP address and device identifiers.
  • Operating system and browser type.
  • Details of your visits to our Services, including traffic data, location data, and logs.

2. HOW WE COLLECT INFORMATION

We collect information through three primary methods:

Directly from You

When you register for an account, fill out biological intake forms, subscribe to a newsletter, or communicate with us via email or text message.

Through Automatic Data Collection

As you interact with our Website, we use cookies, web beacons, and other tracking technologies to gather data about your preferences and navigation patterns.

From Third Parties

We may receive information about you from our affiliated healthcare providers, laboratory partners, or other service providers involved in your care coordination.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

Service Delivery

To provide you with the information, products, or services that you request from us, including appointment scheduling and care coordination.

Communication

To contact you regarding your account, clinical updates, billing, and transactional notifications.

Improvement

To analyze how users interact with our Services so we can improve our technology and user experience.

Marketing

With your express consent (where required by law), to provide you with promotional materials about new services or wellness information.

Compliance

To fulfill our legal and regulatory obligations, including those related to health record retention and financial reporting.

4. DISCLOSURE OF YOUR INFORMATION

We do not sell your personal information. We may disclose personal information that we collect or you provide as described in this policy:

To Affiliated Healthcare Providers

To Affiliated Healthcare Providers To facilitate the performance consultations and assessments you seek through our platform.

To Service Providers

To contractors and other third parties we use to support our business (such as hosting providers, payment processors, and customer support tools).

For Business Transfers

To a buyer or other successor in the event of a merger, divestiture, restructuring, or sale of some or all of PRIME Clinics' assets.

For Legal Purposes

To comply with any court order, law, or legal process, including to respond to any government or regulatory request.

To Protect Rights

If we believe disclosure is necessary to protect the rights, property, or safety of PRIME Clinics, our patients, or our providers.

5. DATA SECURITY

We have implemented physical, technical, and administrative measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All health-related data is encrypted in transit and at rest.

However, the safety and security of your information also depend on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Services, you are responsible for keeping this password confidential. Please be aware that the transmission of information via the internet is not completely secure; any transmission of personal information is at your own risk.

6. RETENTION OF DATA

We retain your personal and personal health information for as long as necessary to fulfill the purposes for which it was collected and to satisfy any legal, clinical, accounting, or reporting requirements. In Alberta, health records are generally retained for a minimum of ten years following the last entry or ten years after the patient reaches the age of majority.

7. YOUR PRIVACY RIGHTS AND CHOICES

Under Canadian privacy laws, you have certain rights regarding your information:

Access and Correction

You have the right to request access to and correction of the personal information we hold about you.

Withdrawal of Consent

You may withdraw your consent to our collection or use of your information at any time, subject to legal or contractual restrictions and reasonable notice.

Cookie Management

You can set your browser to refuse all or some browser cookies, though this may make some parts of our Services inaccessible.

Communication Preferences

You can opt out of marketing communications by following the "unsubscribe" instructions in our emails or texting "STOP" to our SMS messages.

8. APPLICABLE HEALTH LEGISLATION AND REGULATORY OBLIGATIONS

PRIME Clinics operates in compliance with all applicable federal and provincial health privacy legislation. Depending on the jurisdiction in which services are rendered, the collection, use, and disclosure of personal health information may be governed by one or more of the following statutes:

Health Information Act (Alberta)

Where PRIME Clinics provides or coordinates health services in Alberta, the collection, use, disclosure, and protection of health information is governed by the Health Information Act, RSA 2000, c H-5 ("HIA"). Under the HIA, PRIME Clinics acts as a custodian of health information and is required to:

  • Collect health information only to the extent necessary for the provision of healthcare services.
  • Take reasonable steps to ensure that health information is accurate, complete, and up to date.
  • Protect health information against unauthorized access, use, disclosure, or destruction.
  • Notify affected individuals in the event of a privacy breach involving their health information.
  • Designate a privacy officer responsible for ensuring compliance with the HIA.

Health Professions Act (Alberta)

Regulated health professionals providing services through Prime Clinics are also subject to the Health Professions Act, RSA 2000, c H-7 ("HPA"). The HPA governs professional conduct standards and requires regulated members to maintain the confidentiality of patient information in accordance with their respective college's standards of practice. PRIME Clinics supports and upholds these obligations as part of its service delivery model.

Personal and health data is managed in compliance with Alberta's Health Information Act (HIA), PIPA, and PIPEDA.

Privacy Breach Management

In the event of a privacy breach involving personal health information, PRIME Clinics will take immediate steps to contain the breach, assess the risk of harm, notify affected individuals and applicable regulatory authorities as required by law, and implement measures to prevent recurrence. Breach notifications will be made in accordance with the applicable legislative requirements of the jurisdiction in which the breach occurred.

Employee Information

PRIME Clinics also recognizes its obligations with respect to the personal information of its employees. Employee personal information is collected, used, and disclosed solely for the purposes of managing the employment relationship and is handled in accordance with applicable privacy legislation, including the Personal Information Protection and Electronic Documents Act, SC 2000, c 5 ("PIPEDA"), or applicable provincial equivalents.

9. THIRD-PARTY LINKS

Our Services may contain links to websites operated by third parties. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to read the privacy policies of every website you visit.

10. CHANGES TO OUR PRIVACY POLICY

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users' personal information, we will notify you through a notice on the Website home page or by email to the primary email address specified in your account.

11. CONTACT INFORMATION

To ask questions or comment about this privacy policy and our privacy practices, or to register a complaint, please contact us at:

lina@primeclinics.ca