Last updated: January 2026.
Data controller: drugs-canada.com
Contact: contact form
At drugs-canada.com we are committed to protecting the personal information of everyone who visits and uses our site. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and what your rights are — in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for residents of Québec, the Act respecting the protection of personal information in the private sector (Law 25 / Bill 64).
1. Who We Are
Organization: drugs-canada.com
Contact: Via the contact form available on our website
Website: https://drugs-canada.com
We are accountable for the personal information in our custody or control, including information transferred to third parties for processing. We have designated our management team as responsible for our organization's compliance with this policy and applicable privacy law.
2. Personal Information We Collect
We collect only the personal information that is necessary to fulfill the identified purposes. We do not collect information indiscriminately.
| Category | Specific information | How collected |
|---|---|---|
| Identity | Full name | Order form |
| Contact | Email address | Order form |
| Delivery | Full postal address (street, unit, city, province/state, postal/zip code, country) | Order form |
| Transaction | Order amount, date and reference number. We do not store full card numbers — payment data is processed by certified PCI-DSS gateways | Order system |
| Technical browsing data | IP address, browser type, pages visited, date and time of access | Automatically by web server |
What we do NOT collect: No phone number (not required). No full credit or debit card numbers. No health records or medical history. While order history includes the products purchased, we do not use this information to build health profiles or share it with insurers, employers or any other third parties.
Sensitivity of medication purchase information: We recognize that the medications you order may be considered sensitive personal health information. We treat all order data with the highest level of confidentiality. Your purchase history is never shared with insurance companies, government health agencies, employers or any marketing databases.
3. Why We Collect Your Information — Purposes
| Purpose | Legal basis (PIPEDA) |
|---|---|
| Processing and fulfilling your order | Implied consent — necessary to complete the transaction you have requested |
| Delivering your package | Implied consent — necessary to perform the service |
| Sending order confirmations and tracking information | Implied consent — part of the service you requested |
| Invoicing and meeting legal/tax obligations | Legal obligation under Canadian tax law |
| Customer service and resolving complaints | Implied consent — part of the service |
| Fraud prevention and website security | Legitimate business purpose |
We do not use your personal information for direct marketing without your express consent. We do not build profiles, engage in automated decision-making that affects you, or use your data for any purpose beyond those listed above.
4. How Long We Keep Your Information
- Order and billing records (name, address, amount, date): retained for 7 years from the order date, in accordance with Canadian tax law requirements under the Income Tax Act
- Email address for order communications: retained for the duration of the business relationship and until any outstanding issue is resolved
- Technical server logs (IP address, access logs): retained for a maximum of 12 months
- Once retention periods expire, personal information is securely deleted or irreversibly anonymised
5. Who We Share Your Information With
We share personal information only with third parties who need it to help us fulfill your order:
- Payment processors: certified PCI-DSS compliant gateways that process your payment. They receive only what is needed to process the transaction — they do not receive your order history or medication details
- Courier and postal services: receive your name and delivery address to complete the shipment. They do not receive information about the contents of your package beyond what appears on the shipping label
- Legal and regulatory authorities: we may disclose information when required by Canadian law, court order or lawful government request
We never sell, rent or trade your personal information to any third party for commercial or marketing purposes — ever.
6. Cross-Border Data Transfers
As an online business serving customers globally, some personal information may be processed or stored outside of Canada — for example, by payment processors or server infrastructure providers. Under PIPEDA Principle 4.1.3, we remain accountable for the protection of personal information transferred to third parties and require that such parties provide comparable levels of protection.
Where personal information is transferred outside Canada, it may be subject to the laws of the country in which it is held. If you have questions about our data transfer practices, contact us through the contact page.
7. Your Rights Under PIPEDA
Under PIPEDA, you have the right to:
Right of access
Request access to the personal information we hold about you, understand how it is being used, and obtain a copy.
Right of correction
Request that we correct any inaccurate or incomplete personal information we hold about you.
Withdrawal of consent
Withdraw consent to certain uses of your personal information, subject to legal or contractual restrictions. Note: withdrawal may affect our ability to serve you.
Right to deletion
Request deletion of personal information that is no longer necessary, subject to our legal retention obligations (e.g. tax records must be kept for 7 years).
Right to complain
Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe we have not handled your personal information appropriately.
Québec residents — Law 25
Residents of Québec have additional rights under Law 25, including the right to data portability and the right to be informed of automated decision-making.
How to exercise your rights: Contact us through the contact page and describe your request clearly. We will respond within 30 days. There is no fee for most requests; we may charge a reasonable fee for requests that are manifestly unfounded or excessive.
8. Office of the Privacy Commissioner of Canada
If you believe we have not handled a privacy matter appropriately, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC):
- Website: www.priv.gc.ca
- Toll-free: 1-800-282-1376
- Mailing address: 30 Victoria Street, Gatineau, QC K1A 1H3
Québec residents may also contact the Commission d'accès à l'information du Québec (CAI) at www.cai.gouv.qc.ca regarding complaints under provincial Law 25.
We encourage you to contact us first through the contact form so we can attempt to resolve your concern before you approach a regulatory authority.
9. Security of Your Information
We have implemented technical and organizational safeguards appropriate to the sensitivity of the personal information we hold:
- 256-bit SSL/TLS encryption on all connections between your browser and our website
- No storage of full card numbers — all card payments are processed through PCI-DSS Level 1 certified gateways
- Access controls — only personnel who need access to personal information to perform their function are authorized to do so
- Regular backups in secure, access-controlled environments
- Breach notification — in the event of a breach that poses a real risk of significant harm, we will notify affected individuals and the OPC as required under PIPEDA's mandatory breach reporting rules
10. Cookies
drugs-canada.com uses technically necessary cookies required for the shopping cart, session management and basic site navigation. We do not use third-party advertising or tracking cookies without your consent. For more information about the cookies we use, see our Cookie Policy.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, our practices or the services we provide. When we make material changes, we will notify users prominently on the website at least 30 days before the changes take effect. The date of the most recent update is always shown at the top of this document.
12. Contact Us About Privacy
For any questions about this Privacy Policy, to access your personal information, or to exercise any of your rights, please contact us through the contact page. Please identify your inquiry as "Privacy" in your message for faster handling. We respond within 30 days.
See also our Terms and Conditions for information on the terms of use of this website.
