Home » Privacy Policy

Privacy Policy

1. Introduction and Scope

Purple Medical Clinic & Pharmacy (“Purple Health,” “we,” “us,” or “our”) operates the website purplehealth.co, our walk-in and family medical clinic, and Purple Pharmacy in Mission, British Columbia (Unit 2, 32618 Logan Ave, Mission, BC V2V 6G3). This Privacy Policy explains what personal information we collect, how we collect it, how we use and share it, and the choices and rights you have.

This Policy applies to:

Our website, purplehealth.co, including any forms, bookings, or purchases made through it;
Our clinic and pharmacy services in Mission, BC; and
Our online store for health and wellness products.

Our website also references Pharmasave – Prince Rupert, an affiliated pharmacy location. See “How We Share and Disclose Your Information” below for how information involving that location is handled.

By using our website or services, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use our website or services, or contact us using the details below before doing so.

2. Personal Information We Collect

The personal information we collect depends on how you interact with us. It may include:

Contact information — name, mailing address, email address, phone number.
Appointment and booking information — information you provide when requesting or booking an appointment, including through our third-party booking platforms, and information submitted through our online new patient intake form (such as date of birth, MSP/provincial health number, province, postal code, and insurance information).
Account information — if you create an account on our online store, your username, password (stored securely), order history, and saved addresses.
Order and payment information — billing and shipping address, items purchased, and payment details. Card details are processed directly by our third-party payment processor and are not stored on our own servers.
Health and prescription information — information related to your care, such as medical history, medications, allergies, diagnoses, treatment notes, prescription details, and pharmacy dispensing records, collected when you visit our clinic or pharmacy, book an appointment, or submit an intake or prescription transfer request.
Website usage information — information collected automatically when you browse our site, such as IP address, browser and device type, pages viewed, referring website, and approximate location. See “Cookies and Analytics” below.
Communications — records of your emails, phone calls, and messages to us, including through our contact form.

We collect only the personal information reasonably necessary for the purposes described in this Policy.

3. How We Collect Your Information

We collect personal information:

Directly from you, when you fill out a form on our website (contact, intake, or prescription transfer form), book an appointment, create an account, place an order, or contact us by phone or email;
From our third-party booking platforms (currently Cortico and MyHealthAccess), when you book an appointment through them;
Automatically, through cookies and similar technologies when you use our website; and
From your care providers or other health professionals involved in your care, where necessary and with your consent.

4. How We Use Your Information

We use personal information to:

Provide clinic and pharmacy care, including diagnosis, treatment, and prescription management;
Schedule, confirm, and manage appointments;
Process, fulfill, and ship online store orders, and handle payments and receipts;
Respond to inquiries submitted through our contact form or by phone or email;
Process prescription transfer requests;
Maintain accurate patient and business records as required by law and by our regulatory colleges;
Improve our website, services, and patient experience; and
Meet legal, regulatory, and professional obligations.

We do not use your health information for marketing purposes without your consent.

5. How We Share and Disclose Your Information

We do not sell your personal information. We may share personal information with:

Our physicians and pharmacists, and other clinic or pharmacy staff involved in your care, so they can provide treatment, dispense medication, and coordinate your care;
Pharmasave – Prince Rupert, an affiliated pharmacy location, when you submit a prescription transfer request involving that location, so your request can be completed. That location may maintain its own separate privacy practices;
Payment processors, to securely process online store payments;
Shipping and delivery providers, to fulfill and deliver online store orders;
Service providers, who perform functions on our behalf — such as our appointment booking platforms (Cortico and MyHealthAccess), website hosting, and IT support — under obligations to protect your information and use it only for the purposes we specify;
Other health care providers, such as a pharmacy you are transferring a prescription to or from, where necessary to provide care or fulfill your request; and
Legal and regulatory authorities, where required by law, by a regulatory college, or to protect the safety of you or others.

We require third parties who process personal information on our behalf to protect it in a manner consistent with this Policy and applicable law.

5A. Third-Party Service Providers

In addition to the general categories described above, two specific service providers receive information from our prescription transfer and new patient intake forms so it can be actioned by clinic and pharmacy staff:

Applied Robotics Inc. (ARI) – WinRx pharmacy system (pharmacydashboard.ca), our pharmacy’s own dispensing system. Prescription transfer and new patient intake submissions are sent to WinRx so pharmacy staff can action them, including your name, date of birth, contact details, and MSP/provincial health number. For intake forms, we also send your medications, allergies, and medical history, generated as a PDF and attached to your pharmacy record.
Resend (resend.com), our email delivery provider, which sends the notification emails that carry those same submission details to clinic and pharmacy staff so they know a request has come in. Resend is based in the United States, so this information is processed outside Canada — a cross-border transfer that BC’s Personal Information Protection Act (PIPA) requires us to disclose to you.

We have not confirmed that a signed data processing agreement is in place with either provider covering this information. We are reviewing this and will update this Policy as it progresses.

6. Safeguarding Your Health Information

Health information is sensitive, and we take extra care with it:

Access to health records is limited to clinic and pharmacy staff who need it to provide your care;
Health information is not used for marketing or shared with the online store side of our business;
We retain health records in accordance with the requirements of the applicable regulatory colleges (such as the College of Physicians and Surgeons of BC and the College of Pharmacists of BC); and
You may request access to, or correction of, your health record — see “Your Rights” below.

7. Cookies and Analytics

Our website uses cookies and similar technologies to:

Keep our website functioning correctly (essential cookies);
Understand how visitors use our website, such as which pages are viewed and how long visitors stay (analytics cookies); and
Support features like our online store cart.

You can control or disable cookies through your browser settings. Some parts of our website, such as the online store, may not function properly if you do.

8. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Policy, including to meet legal, accounting, or regulatory requirements. Health records are retained in accordance with applicable regulatory college and legal requirements. When information is no longer needed, we securely delete or destroy it.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect your personal information against loss, theft, and unauthorized access, use, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights Under PIPA and PIPEDA

As a British Columbia business, we handle personal information in accordance with the BC *Personal Information Protection Act* (PIPA) and, where applicable, the federal *Personal Information Protection and Electronic Documents Act* (PIPEDA). Subject to certain legal exceptions, you have the right to:

Access the personal information we hold about you;
Request correction of inaccurate or incomplete personal information;
Withdraw consent to our collection, use, or disclosure of your personal information, subject to legal or contractual restrictions and reasonable notice (withdrawing consent may affect our ability to provide certain care or services);
Ask questions about our privacy practices; and
Make a complaint about how we handle your personal information.

To exercise any of these rights, contact our Privacy Officer using the details in “Contact Us / Privacy Officer” below. If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia (OIPC BC) at oipc.bc.ca.

11. Third-Party Links

Our website may link to third-party websites and services, including our appointment booking platforms and Pharmasave – Prince Rupert’s website. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing personal information.

12. Children's Privacy

Our website is not directed to children, and we do not knowingly collect personal information online directly from children. Where our clinic or pharmacy provides care to a minor, the relevant information is provided, and consented to, by a parent or legal guardian.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page with a revised “Last updated” date. Continued use of our website or services after a change takes effect means you accept the updated Policy.

14. Contact Us / Privacy Officer

Questions, requests, or complaints about this Privacy Policy or our handling of your personal information can be directed to our Privacy Officer:

Purple Medical Clinic & Pharmacy
Unit 2, 32618 Logan Ave, Mission, BC V2V 6G3
Email: [email protected]
Clinic phone: +1 (604) 287-2999
Pharmacy phone: +1 (604) 287-2245