1. Who We Are
HemaPro Mobile Lab Inc. ("HemaPro", "we", "our") is a mobile diagnostic laboratory operating in Montréal, Laval, and the West Island, Québec, Canada. We are the data controller for personal information collected through our website and booking platform.
2. Information We Collect
We collect the following categories of personal information:
- Identity data: Full name, date of birth
- Contact data: Email address, phone number, home address
- Health data: Tests ordered, appointment history, laboratory results
- Financial data: Payment card data (processed via Stripe — we do not store card numbers)
- Technical data: IP address, browser type, access logs
3. How We Use Your Information
We use your personal information to:
- Book and dispatch a phlebotomist to your address
- Process payment for services rendered
- Deliver laboratory results to your secure patient portal
- Comply with applicable health regulations and record-keeping requirements
- Respond to your support inquiries
- Send appointment reminders (you may opt out at any time)
We do not sell your personal information. We do not use your health data for advertising purposes.
4. How We Protect Your Information
All data in transit is encrypted using TLS 1.2 or higher. Health records are stored on servers with AES-256 encryption at rest. Access to patient data is restricted to authorized personnel on a need-to-know basis. We conduct annual security reviews.
5. Sharing Your Information
We share your information only with:
- Certified partner laboratories — to process your blood tests
- Stripe Inc. — to process payment (their privacy policy applies)
- Regulators or courts — when required by law
We do not share your information with any third parties for marketing.
6. Your PIPEDA Rights
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:
- Know what personal information we hold about you
- Access your personal information and request corrections
- Withdraw consent (subject to legal and contractual restrictions)
- File a complaint with the Office of the Privacy Commissioner of Canada
To exercise any of these rights, contact our Privacy Officer at privacy@hemapro.ca.
7. Retention Periods
We retain personal information for the following periods:
- Health & laboratory records: 10 years from date of service (per Québec health regulations)
- Billing & payment records: 7 years (CRA requirement)
- Contact & account data: 2 years after last activity
- Server access logs: 90 days
8. Cookies
Our website uses only essential cookies required for session management and security. We do not use tracking or advertising cookies. You may disable cookies in your browser settings, but this may impair booking functionality.
9. Contact Our Privacy Officer
For questions, access requests, or complaints regarding your personal information, contact:
HemaPro Mobile Lab Privacy Officer
privacy@hemapro.ca
514-555-0199
Serving Montréal, Laval & West Island, Québec