This Privacy Notice ("Notice") complements and forms an integral part of the ("Policy"). In the event of any conflict or inconsistency between this Notice and the Policy, and subject to compliance with legal requirements relating to the protection of Personal Health Information, the Policy shall prevail. Terms used in this Notice have the same meaning as in the Policy unless the context clearly indicates otherwise.
This Notice should be read in conjunction with any other privacy notices or statements made available to Customers of pharmaceutical establishments (the "Pharmaceutical Establishments") in the Metro Inc. pharmacy division network (the "Pharmacy Division") where pharmacy services are offered.
With this Notice, the Pharmacy Division provides Customers of the Pharmaceutical Establishments with additional details on how their Personal Health Information is collected, used, disclosed, retained and protected in connection with the services that are offered by the Pharmaceutical Establishments or, as the case may be, by the Pharmacy Division, including when Customers consult or use the Sites developed by the Pharmacy Division (including the MaSanté and Health Record applications, which are services offered to Customers by owner-pharmacist affiliated with the Pharmacy Division and in Metro Ontario Pharmacies Limited's pharmacies operating in Ontario).
This Notice applies to the network of Pharmaceutical Establishments affiliated with the Pharmacy Division located in Quebec, Ontario and New Brunswick.
This Notice applies to Pharmaceutical Establishments affiliated with the Pharmacy Division located in Quebec, Ontario and New Brunswick:
In Quebec, Pharmaceutical Establishments are operated by owner-pharmacists affiliated with the Pharmacy Division.
Each affiliated owner-pharmacist collects Personal Health Information of Customers in the course of the practice of his or her profession when Customers request pharmaceutical services or health care. This information is collected, orally or in writing, directly from Customers, health professionals or by consulting various registers under the responsibility of the Health and Social Services network, such as the vaccination register. The Personal Health Information collected is only that required to provide pharmaceutical and health care services to Customers.
Each affiliated owner-pharmacist must establish a policy for the protection of Personal Information. They may, however, adopt the Policy of which this Notice forms a part. In that case, this Notice will apply, with the necessary adaptations, to Personal Health Information collected by owner-pharmacists affiliated with the Pharmacy Division.
This Notice is governed by the laws to the protection of Personal Information applicable in the provinces of Quebec, Ontario and New Brunswick:
: the Act respecting the protection of personal information in the private sector and its regulations, and the Act respecting health and social services information and amending various legislative provisions and its regulations.
: Personal Information Protection and Electronic Documents Act (PIPEDA) and regulations and Personal Health Information Protection Act (for personal health information).
: Personal Information Protection and Electronic Documents Act (PIPEDA) and Personal Health Information Privacy and Access Act.
When a Customer uses the pharmaceutical or health care services offered by a Pharmaceutical Establishment affiliated with the Pharmacy Division, the following Personal Information about the Customer may be collected, used, disclosed, retained and protected, in accordance with applicable laws, by the Pharmaceutical Establishment and by various stakeholders, including the Pharmacy Division, through the Pharmaceutical Establishment's laboratory computer system:
All Personal Information collected in this way shall be included in the definition of Personal Health Information as defined in the Policy.
Customers' Personal Health Information is collected for the following purposes:
The Personal Health Information collected may also be used for statistical or research purposes in accordance with the law. This information will then be de-identified (the Customer's name or other identifying information will be removed so that it will no longer be possible to identify or associate the information with the Customer) and aggregated (this information will be combined with a set of de-identified information from other Customers).
In the course of the activities of the Pharmaceutical Establishments and those of the Pharmacy Division, Personal Information concerning a Customer may be disclosed and communicated to Third Parties, to certain service providers and partners and to employees and officers of the Pharmaceutical Establishments, where permitted by law.
Only Personal Information related to the Customer's health that is necessary to provide these services will be disclosed.
In addition, employees and officers of a Pharmaceutical Establishment may access, use or disclose a Customer's Personal Health Information when necessary to render pharmaceutical or health care services to the Customer.
For example, Information may be disclosed, when necessary, with the following parties:
All such parties are committed or bound by legal or contractual requirements to protect the confidentiality and security of Customer Personal Health Information and receive only the information necessary to perform these services. They may not store, analyze or use Customer Personal Health Information for any other purpose.
Access to Customer Personal Health Information is restricted to a limited group of employees and officers of the Pharmaceutical Establishments and Pharmacy Division who will use and disclose such information only for the purposes set forth in this Notice. It is strictly forbidden for any employee or officer of a Pharmaceutical Establishment or the Pharmacy Division to access, use or disclose Customer Personal Health Information without authorization or as otherwise permitted by law. All employees and officers of the Pharmaceutical Establishments and the Pharmacy Division are required to maintain the confidentiality of Customers' Personal Information at all times.
The Pharmacy Division and the Pharmaceutical Establishments retain Personal Information only as long as necessary for the achievement of the purposes for which it was collected or as required by law to ensure compliance with their legal and regulatory obligations.
For more information on this subject, please consult the " Personal Information Retention" section of the Policy.
In certain circumstances, the law allows the Customer to restrict or refuse access to all or part of their Personal Information. In such cases, please notify the Privacy Officer of the Pharmaceutical Establishment concerned to obtain the necessary information and the implications of this decision.
For all comments, questions, concerns or complaints regarding your Personal Health Information, including requests for access to information collected through the MaSanté and Health Record application, please contact the privacy officer of the Pharmaceutical Establishment concerned.
If you have any questions about this Notice or the Policy, please or contact the Chief Privacy Officer of the Pharmacy Division at:
Metro Inc. (Pharmacy Division)
Attention: Chief Privacy Officer
245 Jean Coutu Street
by e-mail: email@example.com
Metro Ontario Pharmacies Limited
Attention: Chief Privacy Officer
5559 Dundas Street West
by e-mail: firstname.lastname@example.org
: September 22, 2023