The policy was formulated and implemented according to the following legal requirements in the field of processing and providing the security of personal data:
- Canadian legal laws;
- Federal law on keeping personal data.
Personal data – any information relating to a directly or indirectly definite or definable individual. Such information may include:
- date of and place of birth;
- mailing address;
- email address;
- phone number;
- information about the family;
- property status;
- information about education;
- income state;
- health information as well as other information.
Processing of personal data
Any action with personal data, performed with the use of automation tools or without the use of such tools. Such actions may include: collecting, receiving, recording, organizing, accumulating, storing, updating, changing, retrieving, using, transferring (distributing, providing, access), depersonalization, blocking, deleting.
User – an individual who gains access to the functionality of the Site.
Site Administration / Company – My Canadian Pharmacy. Our address is 27800 Medical Center Rd, Mission Viejo, CA 92691.
The processing of personal data of Site users is carried out in accordance with the following principles:
- restrictions on the processing of personal data to the achievement of specific, predetermined and legitimate goals;
- prevent the processing of personal data that is incompatible with the purposes of collecting personal data;
- prevent the merging of databases containing personal data that are processed for purposes that are incompatible with each other.
During the processing of users’ personal data, the Site Administration takes necessary and sufficient legal, organizational and technical measures to protect personal data from unauthorized or accidental access to them, destruction, modification, blocking, copying, submitting, disseminating personal data, as well as other misconduct regarding personal data.
When processing personal data of users, technical means and technological solutions are used. They are aimed at depersonalizing personal data when accessing information about persons directly involved in their processing.
User personal data is stored on the Company’s own servers in full compliance with the legal, regulatory and technical requirements established by the current legislation of Canada.
The Site Administration does not process biometric and special categories of personal user data.
When changing their personal data, the user agrees that such a change occurs under the same conditions as the initial provision of their personal data to them. It does not require additional consent. The modified personal data are processed in the same manner as the initially submitted personal data.
The Administration of the Site guarantees and ensures the complete confidentiality of the personal data processed when granting access to the functionality of the Site, except as expressly provided for in this Policy or the current legislation of Canada.
The Site Administration processes only personal data that is necessary for the delivery of goods to the user, the provision of services to the user, as well as for the proper execution of contracts concluded with users.
The implementation of information, news and advertising mailings to the user’s address are made by the Site Administration only if the user consents to receive such newsletters. The user can at any time decline any mailings for which he has been subscribed or otherwise gave his consent.
The Site Administration has the right to transfer personal data of users to third parties in the following cases:
- the user clearly expressed his consent to such actions.
- the transfer is necessary for the execution of the agreement concluded with the user.