PRIVACY POLICY

1. Scope and Application

This Privacy Policy applies to personal information collected through:

• www.medione.io
• www.m1skincare.ca
• Our mobile applications
• Any digital services operated by M1
• Pharmacy services provided across Canada (excluding PEI and Nova Scotia)

This policy covers all personal information collected, used, and disclosed by M1 in accordance with:

• PIPEDA (Personal Information Protection and Electronic Documents Act)
• PHIPA (Personal Health Information Protection Act — Ontario)
• Applicable provincial privacy and health information laws
• LegitScript Certification Standard 6: Privacy

2. Personal Information We Collect

"Personal Information" means any information that identifies you or could reasonably be associated with you. M1 collects the following categories:

a) Contact & Identification Information: Name, email, address, phone numbers, date of birth.

b) Personal Health Information (PHI): Medication history, prescriptions, diagnostic information, allergies, conditions, caregiver information.

c) Insurance & Financial Information: Insurance details, insurer contact information, payment method, billing information.

d) Technical & Usage Data: IP address, device identifiers, browser type, cookies, web beacons, pixels, site activity, email interactions.

3. How We Collect Information

A. Directly from you through accounts, forms, emails, calls, apps, prescriptions.

B. From third parties such as healthcare providers, insurers, pharmacies, caregivers.

C. Through technology including cookies, analytics, device identifiers.

4. Accuracy of Information and User Obligations

All information you provide to M1 must be truthful, complete, and accurate. Providing false, misleading, or incomplete information places your health at risk and violates this Privacy Policy.

If you provide falsified, inaccurate, or deceptive information:

• You forfeit any and all liability claims against M1, its owners, its pharmacists, its staff, and its affiliated entities.
• M1 bears no responsibility for any clinical, medical, legal, or financial consequences resulting from incorrect or fraudulent information.
• M1 reserves the immediate right to deny service, terminate your account, and refuse all future access.

M1 may request verification of any information at any time if fraud, abuse, or misrepresentation is suspected.

5. How We Use Personal Information

M1 uses personal information and PHI to dispense medications, provide pharmacy services, deliver prescriptions, communicate updates, give recommendations, assist providers, process claims and payments, improve systems, comply with laws, and maintain quality and safety.

6. Access to Personal Information

A. Circle of Care Professionals: Pharmacists, technicians, physicians, nurses, dietitians, physiotherapists, opticians, respiratory therapists, administrative staff.

B. Service Providers: Developers, hosting providers, analytics tools, operational vendors.

C. Couriers: Name, address, postal code, phone number, email (no PHI).

7. Cloud Infrastructure & Storage

We use secure Google Cloud Platform (GCP) and Firebase. Security measures include MFA, encryption, logs, monitoring, role-based controls, backups, physical and administrative safeguards.

PHI is stored for at least 10 years on local pharmacy software at 4637 Kingston Road E, Scarborough, ON M1E 2P8.

8. Disclosure Without Consent

Allowed for preventing harm, complying with laws, regulatory investigations, law enforcement requests, public health reporting, audits.

9. Your Privacy Choices

You may access, correct, withdraw consent, or change preferences.

10. Cross-Border Considerations

Some providers process non-identifiable or technical data outside Canada. PHI is not transferred without compliant safeguards.

11. Changes to This Policy

We may update periodically. Continued use implies acceptance.

12. Contact – Privacy Officer