Privacy Policy

1000884405 Ontario Inc. (“we,” “us,” or “our”) is a Canadian corporation based in Ontario. This Privacy Policy describes how we collect, use, and protect personal information when you visit northemr.com or interact with our services. We are committed to protecting your privacy in accordance with Canadian privacy legislation, including the Personal Health Information Protection Act (PHIPA) and the Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information We Collect

We collect information in two ways:

Information you provide:

• Contact information (name, email address, phone number, clinic name) when you submit a demo request or contact form
• Mobile phone numbers when you opt in to receive SMS communications
• Any other information you voluntarily share with us

Information collected automatically:

• IP address, browser type, device identifiers, and operating system
• Pages visited, time spent, and referring URLs
• Cookies and similar technologies used to remember your preferences

2. How We Use Your Information

We use the information we collect to:

• Respond to inquiries, demo requests, and support questions
• Send transactional messages such as appointment reminders (with your consent)
• Provide and improve our services
• Comply with legal and regulatory obligations
• Protect the security and integrity of our platform

3. SMS Communications

When you opt in to receive SMS messages from us (either directly or through a healthcare provider using our platform), the following terms apply:

• You will receive messages related to appointments, reminders, clinical follow-ups, and related transactional communications
• Message and data rates may apply from your mobile carrier
• Message frequency varies based on your appointments and preferences
• You can unsubscribe at any time by replying STOP to any message
• For help, reply HELP to any message or contact [email protected]

Mobile opt-in data and consent will not be shared with any third parties. The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

4. Canadian Data Residency

Your personal information and Personal Health Information is stored and processed in Canada. We work with vetted infrastructure providers under contractual privacy and security obligations to deliver our services.

5. PHIPA and Your Health Information

When we process Personal Health Information on behalf of a healthcare provider, we operate as an Electronic Service Provider under Ontario’s Personal Health Information Protection Act (PHIPA). We handle Personal Health Information only as necessary to provide our services and in accordance with PHIPA, PIPEDA, and applicable Canadian privacy legislation. Patients interacting with a healthcare provider that uses our platform should consult the provider’s own privacy policy regarding the collection and use of their Personal Health Information.

6. Sharing and Disclosure

We do not sell your personal information. We share information only in the following circumstances:

• With service providers who help us operate our platform (such as cloud infrastructure, email and SMS delivery), subject to confidentiality obligations
• When required by law, regulation, subpoena, or other legal process
• To protect the rights, property, or safety of our users or others
• With your explicit consent

7. Your Rights

Under applicable Canadian privacy law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw your consent at any time (subject to legal or contractual restrictions)
• Request deletion of your personal information, subject to legal retention requirements
• File a complaint with the Office of the Privacy Commissioner of Canada or the Information and Privacy Commissioner of Ontario

To exercise these rights, contact us at [email protected].

8. Security

We implement technical and organizational measures designed to protect personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is completely secure. We strive to use commercially reasonable safeguards but cannot guarantee absolute security.

9. Children’s Privacy

Our services are directed to licensed healthcare providers and adult patients. We do not knowingly collect personal information from children under the age of 13 without parental consent. If you believe we have collected information from a child without appropriate consent, please contact us so we can address it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent changes. Material changes will be communicated through our website or by other reasonable means. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For privacy inquiries, requests, or to exercise your rights under this policy, please contact us: