The Health Aisle, Inc. ("Company," "we," "our," or "us") recognizes the importance of privacy and is committed to protecting the personal information of our users. This Privacy Notice describes how we collect, use, disclose, and protect personal information (as defined under PIPEDA) when you:
Visit our website at https://www.thehealthaisle.com/ (the "Website")
Use our services, including browsing, product selection, and educational content
Make purchases or complete transactions through our platform
Interact with our AI chatbot or book consultations
This Privacy Notice applies to all operations in Canada and is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
1. INFORMATION WE COLLECT
1.1 Information You Provide Directly
Account Information
When you create an account, we collect:
Name and contact information (email address, phone number)
Account credentials (username and password)
Date of birth for age verification purposes
Marketing preferences and consent
Transaction Information
When you make a purchase, we collect:
Billing information (name, billing address)
Shipping information (delivery address, phone number)
Payment card information (processed securely by third-party payment processors including Stripe; we do not store complete payment card numbers)
Order history and product preferences
Consultation Information
When you book or participate in pharmacist consultations:
Appointment details (date, time, reason for consultation)
Health-related questions or concerns (non-diagnostic)
Consultation notes (stored securely)
Important: Personal health information should not be communicated through TidyCal or Google Calendar booking systems. Please only provide health-related information during your scheduled consultation with our pharmacist through secure channels.
Communications
When you interact with us, we collect:
Newsletter subscriptions and email preferences
Customer service inquiries and feedback
Survey responses and testimonials
1.2 Information Collected Automatically
User Experience and Analytics Data
We use analytics tools and similar technologies to understand how users interact with our Website and services. This includes:
Pages visited, clicks, scrolling, and navigation paths;
Time spent on pages, products viewed, and features used (including chatbot interactions);
Device identifiers, browser type, operating system, and approximate location (based on IP address).
We use this information to:
Monitor site performance and troubleshoot issues;
Improve Website design, user experience, and content;
Understand which products, content, and features are most useful; and
Develop new services and features.
Cookies and Similar Technologies
We use cookies, web beacons, pixels, and similar technologies (“cookies”) to:
Remember your preferences and settings;
Keep you signed in to your account;
Analyze traffic and understand how users interact with our Website, including which pages are visited and how features such as our AI chatbot are used; and
Personalize content and product recommendations.
You can manage cookies through your browser settings and, where available, through our cookie banner or preference tools. If you disable certain cookies, some features of the Website, including the chatbot, may not function properly.
We are committed to implementing a cookie banner to provide you with choices about cookie usage.
1.3 AI Chatbot InteractionsWhen you interact with our AI chatbot on the Website, we collect:
The content of your messages and conversation history with the chatbot;
Product interests, preferences, and general health-related questions you choose to submit;
Technical information about your device, browser, IP address, and the pages or products you view before and after using the chatbot; and
Usage patterns (such as time spent interacting with the chatbot, features used, and clicks).
We use this information to:
Provide general educational information and help you navigate and select over-the-counter health products;
Improve the accuracy, safety, and usefulness of the chatbot and our services;
Monitor and analyze product interests and Website usage; and
Detect and prevent fraud, misuse, or abuse of the chatbot.
Our chatbot uses artificial intelligence and machine-learning technology provided by us and/or our service providers. We do not use the chatbot to make automated decisions that have legal or similarly significant effects on you. Our subscription prohibits use of your data for training purposes.
2. HOW WE USE YOUR INFORMATION
2.1 Primary Purposes
We use your personal information only for the purposes for which it was collected and for which you have provided consent, or as otherwise permitted or required by law, including to:
Process and fulfill your orders
Provide customer service and support
Manage your account and preferences
Schedule and conduct consultations
Verify age for age-restricted products
Communicate about your orders and services
2.2 Service Improvement
We use your personal information only for the purposes for which it was collected and for which you have provided consent (implied or explicit), or as otherwise permitted or required by law, including to:
Provide, operate, and improve our Website, online store, and AI chatbot and develop new features and services;
Analyze how users access and use our Website and services (including user experience and interaction data) so we can improve functionality, security, and performance;
Personalize your experience and product recommendations, including through the AI chatbot, where permitted by law and based on your preferences; and,
Train and improve our AI chatbot.
2.3 Marketing Communications
With your express opt-in consent obtained at the time of collection or subsequently, we may:
Send promotional emails about products and services
Share health and wellness educational content
Notify you about special offers and events
Send health-related content via text or email (with separate explicit consent for each communication method, which can be withdrawn at any time)
2.4 Legal and Compliance
We may use your information to:
Comply with legal obligations and regulations
Prevent fraud and unauthorized activities
Enforce our Terms of Use and policies
Report adverse events to Health Canada
3. INFORMATION SHARING AND DISCLOSURE
3.1 Service Providers
We share your personal information only as necessary with trusted third-party service providers who assist us in operating our business and who are contractually obligated to protect your information and use it only for the purposes for which it was disclosed:
Licensed pharmacy partners in Canada (for order fulfillment)
Payment processors (Stripe)
Shipping and delivery services
Cloud hosting providers (Vercel, Cloudflare)
Email marketing services (Klaviyo)
Appointment scheduling (TidyCal, Google Calendar)
AI chatbot services (confidential subscription-based services, including OpenAI)
Analytics and user experience tools that help us understand how the Website and AI chatbot are used and how to improve them; and
AI chatbot and technology providers that enable us to provide automated assistance and product recommendations.
Note: These service providers may change or be added to as necessary for fulfillment and Health Aisle services. We will update this Privacy Notice to reflect material changes in our service providers and notify you of such changes where required by law.
3.2 Legal Requirements
We may disclose information when required by law or to:
Comply with legal process or government requests
Protect our rights, property, or safety
Prevent fraud or security issues
Report to regulatory authorities as required
3.3 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the successor entity, subject to the successor entity providing comparable protection and continuing to use your information in accordance with this Privacy Notice. We will provide you with notice of any such transfer and, where required by law, obtain your consent.
3.4 Consent
We will not sell, rent, or share your personal information with third parties for their marketing purposes without your explicit consent.
4. THIRD-PARTY WEBSITES AND SERVICES
Our Website contains links to third-party websites and services, including:
Social media platforms (Facebook, Instagram)
Payment processors
Newsletter services (Klaviyo
Important: When you leave our Website to visit third-party sites, you are subject to their privacy policies and terms of use. The Health Aisle is not responsible for the privacy practices or content of third-party websites.
5. DATA SECURITY
We implement appropriate technical and organizational measures to protect your information, including:
Secure encrypted connections (SSL/TLS)
Access controls and authentication
Regular security assessments
Secure cloud infrastructure, including use of Cloudflare
Employee training on data protection
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but are committed to maintaining security safeguards appropriate to the sensitivity of the information, in accordance with PIPEDA requirements. In the event of a data breach involving personal information, we will notify affected individuals and the Privacy Commissioner of Canada as required by law.
6. DATA RETENTION
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected and as outlined in this Privacy Notice, or as required or permitted by law. After the retention period expires, we will securely destroy, erase, or anonymize your personal information. Specific retention periods include:
Order records: 7 years for tax and legal compliance
Account information: Until account closure plus 1 year
Inactive accounts: Deactivated after 1 year of inactivity
Consultation notes: 10 years or as required by professional standards
Chat transcripts: 1 year
Marketing consent records: As long as consent is active
7. YOUR PRIVACY RIGHTS
Under PIPEDA, you have the right to:
Access your personal information we hold
Request correction of inaccurate information
Withdraw consent for certain uses of your information
Request deletion of your information (subject to legal requirements)
Opt-out of marketing communications
Lodge a complaint with the Privacy Commissioner of Canada
To exercise these rights, please contact us using the information provided in Section 11 below. We will respond to your request within 30 days of receipt, or notify you if we require an extension. We will require reasonable verification of your identity before processing requests to protect your personal information from unauthorized access.
8. MARKETING AND CONSENT
8.1 Opt-In Consent
We only send marketing communications with your explicit opt-in consent. You can provide consent through:
Account registration checkboxes
Newsletter sign-up forms
Email preference centers
8.2 Health-Related Content
For health-related content sent via text or email, we obtain explicit consent separate from general marketing consent.
8.3 Unsubscribe Options
You can opt-out of marketing communications at any time by:
Clicking "unsubscribe" in any marketing email
Updating your account preferences
Contacting customer service
9. CHILDREN'S PRIVACY
Our Website and services are not intended for individuals under the age of majority or age of capacity in their province or territory of residence (which may vary between 16 up to 19 years of age). We do not knowingly collect personal information from minors without parental or guardian consent. If we learn we have collected information from a minor without appropriate consent, we will delete that information promptly, and where the minor appears to not have capacity, and subject to jurisdictional limitations on sharing minors’ medical information, we may notify the parent or guardian where possible.
10. INTERNATIONAL DATA TRANSFERS
Your personal information is primarily stored and processed in Canada. However, some of our service providers may store or process information in other countries, including the United States. When we transfer personal information outside of Canada, we ensure that appropriate safeguards are in place, such as contractual protections requiring a comparable level of protection. By using our services, you acknowledge that your information may be transferred to countries outside Canada, which may have different data protection rules. You have the right to obtain information about our policies and practices regarding service providers outside Canada and to withdraw consent for such transfers, subject to legal and contractual restrictions.
11. CHANGES TO THIS PRIVACY NOTICE
We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will provide notice by:
Posting the updated notice on our Website
Updating the "Effective Date" at the top
Sending email notification to registered users for significant changes that materially affect their rights
12. CONTACT US AND YOUR RIGHTS
For questions about this Privacy Notice or to exercise your privacy rights under PIPEDA (including rights to access, correct, or request deletion of your personal information), please contact us at:
Privacy Officer
The Health Aisle, Inc.
304 Wellesley St E
Toronto, Ontario
Canada
Email: privacy@thehealthaisle.com
Website: https://www.thehealthaisle.com/contact/
If you are not satisfied with our response to your privacy concern, you have the right to file a complaint with the Privacy Commissioner of Canada:
Website: www.priv.gc.ca
Phone: 1-800-282-1376
APPENDIX: DATA COLLECTION SUMMARY
Data Type
Purpose
Retention
Account Information
Service delivery, authentication
Account life + 1 year
Order History
Fulfillment, legal compliance
7 years
Chat Transcripts
Service improvement, personalization
1 year
Consultation Notes
Professional service delivery
10 years