Disclaimer

DO NOT USE THE PLATFORM OR PLATFORM SERVICES FOR MEDICAL EMERGENCIES. IF YOU HAVE A MEDICAL EMERGENCY, CALL 911 IMMEDIATELY OR ATTEND THE EMERGENCY ROOM OF THE NEAREST HOSPITAL OR HEALTH CENTRE.

Committed to Your Privacy

Biscuit Health is committed to protecting and preserving your privacy. Our business and team are built around the Privacy by Design principles to ensure our platform is a safe space for our communities.

The Biscuit Health Platform enables our communities to access specialized allergy care and tools to manage their care through our mobile App or website (herein collectively referred to as the "Platform").

By accessing or using the Platform, you understand that your information will be treated in accordance with this Biscuit Health Privacy Commitment ("Privacy Commitment"). Our Privacy Commitment and practices are consistent with the 10 Fair Information Principles and we strive to apply the principles of Privacy by Design in the development and review of our products and services.

If you do not want us to collect, use or disclose your Personal Information or Personal Health Information in the ways identified in this Privacy Commitment, you may choose not to use Biscuit Health Services or the Platform.

Definitions

The following definitions apply to this Privacy Commitment:

Term:	Definition:
You	An individual who uses, or registers to use, our Services.
Medical Record	A record of your Personal Health Information, which may include but is not limited to: the name(s) of your Healthcare Practitioners or Care Coaches; patient identification and medical history; photos you upload; records of examinations and clinical notes; requisitions for treatment; consents to treatment; records of treatment received; reports of investigative procedures; diagnoses; and records of missed/cancelled appointments. Note: Your Medical Record excludes your Biscuit Health account profile.
Healthcare Practitioners	Practitioners that provide or assist in the provision of healthcare through our Services, which may include physicians, nurse practitioners, registered nurses, naturopathic doctors, dietitians, and care coaches.
Personal Health Information	Any Personal Information regulated under applicable health privacy legislation in the provinces in which we operate, including information that relates to an individual's physical or mental health and healthcare.
Personal Information	Any information about an identifiable individual, other than business contact information used to contact the individual in their business or professional capacity. Does not include de-identified or aggregated information.
Services	The Biscuit Health app, our website https://heybiscuit.ca, the products we ship you, and our physical clinics.
Biscuit / Biscuit Health	In this Privacy Commitment, "we", "us", "our", "Biscuit" or "Biscuit Health" refer to Biscuit Health Inc.
Biscuit Family	Biscuit Health Inc. and its subsidiary companies and corporate affiliates, as they may exist from time to time.

Accountability

In most provinces, Biscuit Health has overall responsibility for protecting the privacy of your Medical Records and other Personal Information and we are directly accountable to you.

Consent

When you access or use our Services, you consent to our collection, use, disclosure, and storage of your Personal Information as described in this Privacy Commitment.

You can withdraw your consent at any time, subject to limited restrictions.

Collection and Use of Personal Information

We collect only the Personal Information required for us to establish and maintain a responsible healthcare and service relationship with you, to provide our Services, and to develop, enhance or market our products and services and to maintain and improve the security and functionality of the Biscuit Health website and App.

We collect Personal Information to set up an account for you on the Biscuit Health App so that you can access and use the Biscuit Health care-related services, including:

Consultations with Healthcare Practitioners, virtually or in person
Consultation with Care Coaches, virtually or in person
MyHealth, Care Plan and other features that may be added/removed from time to time

We also collect other information from you as you use our Services:

App usage information
Website and device information
Cookies
Payment information or healthcare number

We may use Personal Information to send you relevant marketing messages. You can opt-out of receiving them at any time.

Sharing and Disclosure of Personal Information

For continuity of care purposes, we may share Personal Information among your Healthcare Practitioners and others who assist in the provision of healthcare to you.

We will not disclose your Personal Information for any purpose other than what has been outlined in this Privacy Commitment or as permitted under applicable law unless we obtain your express consent. We disclose only the limited amount of Personal Information necessary to meet these purposes.

We do not sell your Personal Information to any third parties.

We may share your Personal Information with our service providers who are contracted to perform services or functions on our behalf where they require the information to assist us in serving you. We use contractual controls to protect this information and limit its use to what is necessary for the service provider to perform the service.

Access, Corrections, and Accuracy of your Personal Information

You can request access to or correction of your Personal Information by contacting us.

Correct Personal Information

We rely on you to keep your Personal Information up-to-date and accurate so that we can serve you.

Storage and Location of your Personal Information

We may transfer your personal data to countries outside of your country of residence, which may have different personal data protection laws. In doing so, we comply with applicable legal requirements pertaining to the transfer of personal data to other countries.

Any personal data collected by us in connection with the Biscuit Health App may be transferred to, processed, and stored within Canada or the United States.

Retention

We retain Personal Information only for as long as necessary to fulfil the purposes described in this Privacy Commitment or as required to meet legal or regulatory requirements. Personal Information that forms part of your Medical Record must be retained for a period of time mandated by law.