Privacy Policy

LifeLink ("we," "our," or "us") operates a comprehensive medical records management and healthcare coordination platform in Canada. This Privacy Policy describes how we collect, use, disclose, and protect your personal information and personal health information ("PHI") when you use our Services.

By using LifeLink, you agree to the collection and use of information in accordance with this Privacy Policy. We are committed to complying with applicable Canadian privacy laws, including:

• Personal Information Protection and Electronic Documents Act (PIPEDA)
• Personal Health Information Protection Act (PHIPA) - Ontario
• Personal Information Protection Act (PIPA) - Alberta and British Columbia
• Other applicable provincial health information privacy laws

Personal Information:

• Name, email address, phone number
• Date of birth
• Mailing address
• Canadian health card number (Health Card number)
• Account credentials and authentication information

Personal Health Information (PHI):

• Medical records, test results, and diagnostic reports
• Prescription information and medication history
• Healthcare provider notes and visit summaries
• Insurance information
• Health conditions, diagnoses, and treatment history
• Family medical history (if provided)
• Allergies and adverse reactions

Usage Information:

• Device information (device type, operating system, browser)
• IP address and location data
• Log files and access timestamps
• Platform usage patterns and features accessed
• Communication preferences

We use your information for the following purposes:

Service Provision:

• To provide, maintain, and improve our healthcare coordination platform
• To aggregate and organize your medical records from multiple healthcare providers
• To facilitate communication between you and your healthcare providers
• To enable secure sharing of medical records with authorized parties
• To send you appointment reminders and health-related notifications
• To process appointments and bookings

Account Management:

• To create and manage your account
• To authenticate your identity
• To communicate with you about your account and our Services
• To respond to your inquiries and support requests

Legal and Compliance:

• To comply with applicable laws, regulations, and legal obligations
• To respond to legal requests, court orders, or government regulations
• To protect our rights, privacy, safety, or property
• To detect, prevent, or address fraud, security, or technical issues

Service Improvement:

• To analyze usage patterns and improve our platform
• To develop new features and services
• To conduct research and analytics (in anonymized and aggregated form)

We do not sell your personal information or PHI. We only share your information in the following circumstances:

With Your Consent:

• When you explicitly authorize us to share information with specific healthcare providers
• When you request that we share records with family members or other authorized individuals
• When you choose to download or export your medical records

Healthcare Providers:

• Authorized healthcare providers involved in your care who are registered on our platform
• Hospitals and clinics that have partnered with LifeLink to provide services
• Healthcare facilities where you have appointments or receive care

Service Providers:

• Third-party service providers who assist us in operating our platform (e.g., cloud hosting, data storage)
• All service providers are contractually obligated to protect your information and use it only for specified purposes

Legal Requirements:

• When required by law, court order, or government regulation
• To respond to legal process or government requests
• To protect our rights, privacy, safety, or property
• To investigate potential violations of our Terms of Service

We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All data is encrypted in transit using TLS/SSL protocols and encrypted at rest
• Access Controls: Strict access controls and authentication mechanisms
• Audit Logs: Comprehensive logging of all data access and modifications
• Regular Security Audits: Regular security assessments and vulnerability testing
• Staff Training: All staff receive privacy and security training
• Secure Infrastructure: Data is stored on secure, compliant cloud infrastructure

Under Canadian privacy laws, you have the following rights regarding your personal information:

Access Rights:

• Request access to your personal information and PHI
• View and download your medical records at any time
• Request a copy of your information in a portable format

Correction Rights:

• Request correction of inaccurate or incomplete information
• Update your personal information through your account settings
• Note: Medical records created by healthcare providers may require correction through the provider

Deletion Rights:

• Request deletion of your account and personal information
• Note: We may retain certain information as required by law (e.g., medical records retention requirements)

Withdrawal of Consent:

• Withdraw your consent for certain uses of your information
• Note: Withdrawal may limit our ability to provide certain Services

Opt-Out Rights:

• Opt out of marketing communications (you may still receive important service-related communications)
• Control your notification preferences through account settings

We retain your information for as long as necessary to:

• Provide our Services to you
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements
• Maintain medical records as required by provincial health information laws

Medical records are typically retained according to provincial retention requirements, which may require retention for extended periods (e.g., 10-30 years depending on the province and type of record).

When you request account deletion, we will delete or anonymize your information except where we are legally required to retain it.

We use cookies and similar tracking technologies to enhance your experience, analyze usage, and improve our Services. Types of cookies we use:

• Essential Cookies: Required for the platform to function properly (e.g., authentication)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how users interact with our marketing website (lifelink.tech) in aggregated form, via Google Analytics
• Advertising & Remarketing Cookies: On our public marketing website, we use Google Ads and Google Signals to measure ad performance, show LifeLink ads to prior visitors on other sites (remarketing), and understand usage across your devices when you are signed in to a Google Account. This links website interaction data to your Google identity within Google's systems for these advertising purposes. This applies only to our public marketing website, not to the clinical EMR platform itself. You can opt out of personalized advertising at any time via Google Ad Settings or by disabling advertising cookies in your browser.

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Services.

LifeLink is not intended for children under the age of 18 without parental or guardian supervision. If you are under 18, a parent or legal guardian must create and manage your account on your behalf.

We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13 without appropriate consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@lifelink.tech.

Your information is primarily stored and processed in Canada. However, we may use service providers located outside of Canada. When we transfer information outside of Canada, we ensure that appropriate safeguards are in place to protect your information in accordance with Canadian privacy laws.

By using our Services, you consent to the transfer of your information to service providers located outside of Canada, subject to the safeguards described in this Privacy Policy.

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites or services you access through our platform.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email or through the platform
• Provide at least 30 days' notice before material changes take effect

Your continued use of our Services after changes take effect constitutes acceptance of the updated Privacy Policy. If you do not agree to the changes, you should stop using our Services and may request account deletion.

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: