1. Identity of the Organization
HemaPro Mobile Lab Inc. is the organization responsible for the personal information collected through our website at hemapro.ca and our online booking platform.
2. What We Collect & Why
The table below lists each piece of personal information collected during the booking process, the specific purpose for which it is collected, and the legal basis under PIPEDA.
| Information | Purpose | Retention |
|---|---|---|
| First & last name | Identify the patient; label the blood sample; address the report | 10 years (health record) |
| Date of birth | Confirm patient identity; required on laboratory requisition forms | 10 years (health record) |
| Email address | Deliver booking confirmation; provide secure portal access link; send appointment reminders | 2 years after last activity |
| Phone number | Allow phlebotomist to confirm arrival; contact in case of scheduling issues | 2 years after last activity |
| Home / service address | Dispatch the phlebotomist to the correct location; verify service area eligibility | 2 years after last activity |
| Tests selected | Prepare the correct requisition, tubes, and collection materials | 10 years (health record) |
| Date & time of appointment | Schedule dispatch; generate calendar confirmation | 10 years (health record) |
| Laboratory results | Deliver results to patient; maintain health record | 10 years (per Québec health regulations) |
| Payment data (last 4 digits only) | Payment confirmation reference; chargeback resolution. Full card data processed exclusively by Stripe. | 7 years (CRA) |
3. Consent
By checking the consent box on our booking form, you provide express, informed consent to the collection, use, and disclosure of your personal information as described in this notice and in our full Privacy Policy.
You may withdraw your consent at any time, subject to legal and contractual restrictions, by contacting our Privacy Officer. Note that withdrawal may prevent us from delivering test results or completing a booked service.
4. Disclosure
We share your information only with:
- Partner CLIA-certified laboratories — to process your blood samples. They are bound by confidentiality agreements and applicable health privacy legislation.
- Stripe Inc. — to process payment. Stripe is PCI DSS Level 1 certified. Stripe's privacy policy applies to payment data.
- Regulators or law enforcement — only when required by a court order or applicable law.
We do not sell personal information to any third party.
5. Your Rights Under PIPEDA
You have the right to:
- Be informed of the existence, use, and disclosure of your personal information
- Request access to your personal information held by HemaPro
- Challenge the accuracy and completeness of your information and have it amended
- Withdraw consent at any time (subject to the restrictions described above)
- File a complaint with the Office of the Privacy Commissioner of Canada
6. Privacy Officer Contact
To exercise any of the rights above, or if you have questions about how we handle your personal information, contact our designated Privacy Officer:
HemaPro Mobile Lab Inc. — Privacy Officer
privacy@hemapro.ca
514-555-0199
Serving Montréal, Laval & West Island, Québec, Canada