DoctorDoctor.ca ("we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services. We operate in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
When you register and use DoctorDoctor.ca, we collect the following personal information:
- Name -- your first and last name, used to identify your account.
- Email address -- used for account verification, login, and service communications.
- Home address -- for patients, your home address is geocoded to latitude and longitude coordinates so we can match you with doctors whose catchment area covers your location. Your exact street address is never shared with doctors.
- Household members -- if you add household members to your subscription, we store their names to associate them with your account.
- Phone number -- optionally collected for account recovery and contact purposes.
- Professional information (doctors) -- medical licence number, specialties, languages spoken, office address, and catchment radius.
- Payment information -- processed securely through Stripe. We do not store credit card numbers on our servers.
How we use your information
We use the information we collect for the following purposes:
- Matching -- we calculate the distance between your home coordinates and each doctor's office to determine whether you fall within their catchment area.
- Communication -- we send account verification emails, subscription reminders, and service notifications. We do not send marketing emails unless you opt in.
- Improvement -- we analyse aggregated, anonymised usage data to improve the platform, fix issues, and develop new features.
Your health card number
We do not collect or store your health card number. The only health-system-related data we store is the province where your health card was issued, so that we can display province-relevant information. We never ask for or handle your actual health card number.
Data storage and security
Your personal information is stored on servers located in Canada. We implement appropriate technical and organisational security measures, including:
- Encrypted data transmission using TLS/SSL
- Secure password hashing (bcrypt)
- CSRF protection on all forms
- Prepared database statements to prevent SQL injection
- Regular security reviews and updates
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
Third-party sharing
We do not sell your personal information. We share data only with the following third parties, and only to the extent necessary to operate our services:
- Stripe -- processes subscription payments. Your payment details are handled directly by Stripe and never touch our servers. Stripe's privacy policy governs their handling of your data.
- Email service provider -- we use a transactional email service to send account verification, password reset, and subscription notification emails. Only your email address and name are shared.
- Hosting provider -- our servers are hosted in Canada. The hosting provider has access to data only as necessary for infrastructure maintenance and is bound by confidentiality agreements.
We will never share your personal information with advertisers, data brokers, or any unrelated third party. We may disclose information if required by law, court order, or to protect the safety of our users.
Your rights under PIPEDA
Under Canada's Personal Information Protection and Electronic Documents Act, you have the right to:
- Access -- request a copy of the personal information we hold about you.
- Correction -- request that we correct any inaccurate or incomplete information.
- Withdrawal of consent -- withdraw your consent for us to process your personal information at any time, though this may limit your ability to use our services.
- Complaints -- if you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.
To exercise any of these rights, contact us at hello@doctordoctor.ca. We will respond within 30 days.
Cookies
We use only cookies that are strictly necessary for the operation of our platform:
- Session cookies -- maintain your login session and security tokens. Deleted when you close your browser.
- Language preference -- a cookie stores your preferred language for a better experience.
We do not use third-party tracking cookies, advertising cookies, or analytics cookies that track you across other websites.
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
DoctorDoctor.ca
Email: hello@doctordoctor.ca
If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.