Your data.

What we collect, why we collect it, how long we keep it, and how to ask us to delete it. Aligned to Canada's PIPEDA framework.

This policy explains how DOSIS ([Legal business name, if registered]) collects, uses, retains, and discloses personal information of website visitors and customers. We aim to align with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy law in Canada.

1. Information we collect

We collect only what is needed to fulfill orders and respond to your requests.

Order inquiries and support messages — your name, email, and the message body, including any shipping address or payment-method preference you choose to send.
Account registration — your username, email, and password (passwords are stored hashed by WordPress core; we never see them in plaintext).
Practitioner access requests — name, email, practice or clinic name, credential reference, and notes you provide.
Server logs — IP address, browser user-agent, and request timestamps, retained briefly for security and abuse-detection.
Analytics — [Specify: e.g., aggregate, no-cookie analytics via Plausible / disabled / Jetpack Stats. Adjust to your actual setup.]

We do not collect, store, or process payment-card details. Crypto and Interac e-Transfer payments are handled outside this website.

2. How we use it

To respond to order inquiries and ship orders.
To operate your account and respond to support requests.
To review practitioner access requests.
To protect the site from abuse, fraud, and security incidents.
To comply with applicable Canadian law.

We do not sell personal information. We do not share it with third parties for marketing.

3. Cookies

This site uses essential cookies required for login and form submission. [If you add analytics or marketing cookies, name them here and link to a cookie consent tool like Complianz.]

4. Retention

Order inquiry emails: kept while the order is open and for a reasonable post-fulfillment window for support; then deleted.
Account records: kept while the account is active; deleted on request.
Server logs: rolling short-term retention (typically <30 days).

5. Disclosure

We may disclose personal information when required by valid Canadian legal process (e.g., a court order or subpoena) or to protect the rights and safety of DOSIS, its customers, or the public. We do not voluntarily share customer data with private third parties.

6. Your rights under PIPEDA

You have the right to:

Access the personal information we hold about you.
Request correction of inaccurate information.
Withdraw consent and request deletion, subject to retention obligations.
File a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, contact us via the contact page.

7. Security

The site is hosted on [host name] with TLS encryption in transit. Account passwords are hashed. Server-side access is restricted. We do not guarantee that any system is immune to all attack — no online service can — but we apply reasonable safeguards consistent with our scale.

8. Children

This site is not directed to anyone under the legal age of majority in their province (18 or 19 depending on jurisdiction). We do not knowingly collect information from minors.

9. Changes to this policy

We may update this policy. The "last updated" date below reflects the most recent revision. Material changes will be flagged on the site.

10. Contact

Privacy-related requests: [privacy@yourdomain.tld or your support email]. General contact: /contact/.

Last updated: [YYYY-MM-DD]