Privacy Policy

Last updated: August 2025

1. Information We Collect

• Account creation and profile details
• Purchase and payment information
• Support and communication records
• Newsletter subscriptions
• Research participation data (with consent)

2. How We Use Your Information

• Provide and improve services
• Process orders and payments
• Send updates about your health data
• Conduct research (only with consent)
• Comply with legal obligations

3. Data Protection & Compliance

Your data is protected with end‑to‑end encryption and stored in compliance with:

• ISO 27001 — Information Security Management
• HIPAA — Health Insurance Portability and Accountability Act
• PIPEDA — Personal Information Protection and Electronic Documents Act
• Law 25 — Quebec Personal Information Protection
• Bill S‑201 — Genetic Non‑Discrimination Act

4. Security Measures

• End‑to‑end AES‑256 encryption in transit and at rest
• Enterprise‑grade cloud security with regular audits
• Role‑based access controls & multi‑factor authentication
• Data minimization practices
• Third‑party penetration testing

5. Data Retention

• Account data — while account remains active
• Health data — 10 years
• Payment data — 7 years
• Technical logs — up to 2 years

6. Data Sharing

We do not sell or trade personal data. Sharing occurs only:

• With explicit consent
• To comply with legal obligations

7. International Data Transfers

Data may be securely transferred to:

• Canada — Headquarters & processing
• USA — Certified partner labs
• EU — Secure cloud services

8. Incident Response

• Immediate notification to affected individuals
• Rapid investigation and containment
• Regulatory reporting as required
• Full transparency on remediation

9. Your Rights

• Access, correct, or delete your data
• Withdraw consent at any time
• Export data in portable format

10. Contact

← Back to Home