shieldDATA GOVERNANCE & PRIVACY

Privacy Policy

DARE MEDICAL COURIER INC. — How we collect, use, disclose, and protect personal and personal health information under PIPEDA and Ontario's PHIPA.

DARE MEDICAL COURIER INC.

Effective Date: July 29, 2026

01. Who This Policy Covers

This Privacy Policy explains how Dare Medical Courier Inc. (“Dare,” “we,” “us”) collects, uses, discloses, and protects personal information through our website and courier services. It applies to visitors to our website, individuals who contact us, and the healthcare facilities and their staff who register for and use our booking platform.

02. Our Role Under Privacy Law

Dare is a Canadian company subject to the federal Personal Information Protection and Electronic Documents Act (PIPEDA). Because our courier services involve transporting specimens and materials containing personal health information on behalf of healthcare custodians (hospitals, clinics, and laboratories), we also act as an “agent” as defined under Ontario's Personal Health Information Protection Act (PHIPA) when handling that health information. As an agent, we handle personal health information only as instructed by the health information custodian we are serving, and only for the purposes of providing the courier service — we do not use personal health information for our own purposes.

03. Information We Collect

  • check_circleWebsite & contact information: name, email, phone number, company/organisation, and any details you submit through a contact or inquiry form.
  • check_circleAccount & booking information: facility name and address, authorised contact persons, pickup/delivery details, specimen category, and handling requirements for each booking.
  • check_circleTechnical information: IP address, browser type, and website usage data collected through cookies or analytics tools (see Section 7).

We do not intentionally collect the clinical content of specimens themselves (e.g., diagnosis or test results) — our role is the physical, chain-of-custody transport of material, not access to clinical data.

04. How We Use Information

  • check_circleTo create and manage facility accounts and process bookings.
  • check_circleTo dispatch, track, and confirm delivery of a shipment, and to maintain chain-of-custody records.
  • check_circleTo send transactional notifications (status updates, confirmations) related to a booking.
  • check_circleTo respond to inquiries submitted through our website.
  • check_circleTo meet legal, regulatory, insurance, and audit obligations.

We do not sell personal information. We do not use booking or specimen-handling information for marketing purposes.

05. Disclosure of Information

We disclose personal information only:

  • check_circleBetween the pickup and destination facilities involved in a specific booking, as necessary to complete that delivery.
  • check_circleTo our couriers and dispatch staff, on a need-to-know basis, to perform the delivery.
  • check_circleTo service providers who support our operations (e.g., IT hosting, described in Section 8), under contractual confidentiality obligations.
  • check_circleWhere required by law, regulation, or a valid legal process.

06. Retention

We retain chain-of-custody and booking records for seven (7) years from the date of the transaction. This period is set to align with standard Ontario limitation periods and our insurance and audit requirements — long enough that we can defend ourselves and our facility clients against a claim, but not so long that we hold personal information beyond what is reasonably necessary. Records are securely destroyed or de-identified after this period.

07.Cookies & Analytics

Our website uses functional cookies required for the site to operate correctly (e.g., keeping a facility user logged in). We do not use cookies or analytics tools to build advertising profiles of visitors, and we do not sell or share browsing data with third parties for marketing purposes. If we introduce a web analytics tool in the future, we will name that tool in this section and provide instructions for opting out before it is deployed.

08.Data Storage & Security

Personal information is stored on servers located in Canada. We use encryption in transit (TLS/SSL), encrypted backups, and access controls limiting staff access to what is needed for their role. No method of transmission or storage is 100% secure, and we continually review our safeguards as our systems grow.

09. Your Rights

Under PIPEDA and PHIPA, you have the right to access personal information we hold about you, request corrections, and withdraw consent (subject to legal or contractual restrictions). Facility staff should direct such requests to their organisation's privacy officer in the first instance, who may in turn contact us.

10. Breach Notification

In the event of a privacy breach involving personal health information, we will notify the affected health information custodian(s) without unreasonable delay, in accordance with our obligations as an agent under PHIPA, so they can meet their own notification obligations to affected individuals and the Information and Privacy Commissioner of Ontario.

11. Contact / Privacy Officer

Privacy inquiries or concerns can be sent directly to our Privacy Officer:

Privacy Officer, Dare Medical Courier Inc.

Email: info@dare-med.com

You may also contact the Office of the Privacy Commissioner of Canada or the Information and Privacy Commissioner of Ontario if you believe your privacy rights have not been respected.

12. Changes to This Policy

We may update this policy as our services grow. The effective date at the top of this page reflects the most recent revision.