Privacy Policy

01

Overview

Rufus Health Corp., operating the advantageMEN virtual care platform, is committed to protecting the privacy and confidentiality of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, services, or communicate with our medical team.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please do not use our services.

02

Applicable Legislation

The collection, use, and disclosure of your personal and health information is governed by the following Alberta legislation:

• Personal Information Protection Act (PIPA, RSA 2003, c P-6.5) — governs the collection, use, and disclosure of personal information by private sector organizations in Alberta.
• Health Information Act (HIA, RSA 2000, c H-5) — governs the collection, use, and disclosure of health information by custodians and affiliates in Alberta.
• Electronic Health Information Regulations — governs the security of health information transmitted electronically.

We are committed to full compliance with all applicable provincial legislation. Where federal law such as the Personal Information Protection and Electronic Documents Act (PIPEDA) applies, we comply with those requirements as well.

03

Information We Collect

We collect information that is necessary to provide you with safe, appropriate virtual medical care. This includes:

Personal Information:

• Full legal name, date of birth, and Alberta residential address
• Contact information including email address and phone number
• Alberta Health Care Insurance Plan (AHCIP) number, where applicable
• Payment information (processed securely through a third-party payment processor)

Health Information:

• Medical history, current medications, and reported symptoms
• Laboratory and bloodwork results
• Clinical assessment notes and treatment plans
• Prescription records and dispensing history
• Communications with our medical team

Technical Information:

• IP address, browser type, and device information
• Website usage data collected via cookies and analytics tools

We collect only the minimum information required to provide our services and fulfill our legal obligations.

04

How We Use Your Information

Your personal and health information is used only for purposes consistent with the reason it was collected, including:

• Delivering virtual medical consultations and clinical assessments
• Developing and managing individualized treatment plans
• Communicating test results, prescriptions, and care instructions
• Coordinating prescription fulfillment with our licensed pharmacy partner
• Processing payments for services rendered
• Maintaining accurate and complete medical records
• Complying with legal, regulatory, and professional obligations
• Improving our platform and services (using de-identified data only)

We do not use your health information for marketing purposes without your separate, explicit consent.

05

Disclosure of Information

We do not sell, rent, or trade your personal or health information. We may share your information only in the following limited circumstances:

• Our Medical Team: Licensed practitioners directly involved in your care
• Pharmacy Partners: Licensed pharmacies for the purpose of filling prescriptions ordered by your care provider
• Laboratory Services: Accredited labs for the processing of ordered bloodwork
• Technology Service Providers: Secure third-party platforms used to operate our services (subject to confidentiality agreements and equivalent privacy standards)
• Legal Requirements: Where required or permitted by Alberta law, including pursuant to a court order, subpoena, or mandatory reporting obligation
• Safety: Where necessary to prevent serious harm to you or another individual, as permitted under the HIA

06

How We Protect Your Information

We take the security of your information seriously and implement administrative, physical, and technical safeguards appropriate to the sensitivity of the information, including:

• Encrypted transmission of all health information (TLS/SSL)
• Secure, access-controlled storage of health records
• Role-based access controls limiting information access to authorized personnel only
• Regular security assessments and staff privacy training
• Incident response protocols in the event of a privacy breach

In the event of a privacy breach involving your health information, we will notify you and the Office of the Information and Privacy Commissioner of Alberta (OIPC) as required under applicable law.

07

Retention of Information

We retain your health information for a minimum of ten (10) years from the date of your last interaction with our medical team, or as otherwise required by the Health Information Act and applicable standards of professional practice in Alberta.

Non-health personal information is retained only as long as necessary to fulfill the purposes for which it was collected, after which it is securely destroyed or de-identified.

08

Your Rights

Under Alberta's PIPA and the HIA, you have the right to:

• Access your personal and health information held by us
• Request corrections to inaccurate or incomplete information
• Withdraw consent for non-essential uses of your information (subject to legal and safety limitations)
• Request an accounting of disclosures of your health information
• Lodge a complaint with the Office of the Information and Privacy Commissioner of Alberta (OIPC) if you believe your privacy rights have been violated

To exercise any of these rights, please contact us using the information below. We will respond to all requests within 30 days, as required by law.

09

Consent & Withdrawal

By using our services and submitting your health information, you provide informed consent for its collection, use, and disclosure as described in this policy. Where required, we will obtain express consent separately.

You may withdraw consent for non-essential uses of your information at any time by contacting us. Please note that withdrawal of consent for the collection of health information necessary to provide medical care may result in our inability to continue providing services to you.

Consent to the collection of health information for the purpose of direct medical care cannot be fully withdrawn while an active care relationship exists, as we are required by law and professional standards to maintain your health records.

10

Virtual Care & Technology

advantageMEN delivers care through virtual channels including secure online consultations and electronic communications. By using our platform, you acknowledge and accept the inherent limitations and risks associated with virtual care, including:

• The possibility of technical interruptions or failures
• Limitations on physical examination that may affect clinical assessment
• Risks associated with electronic transmission of health information, despite our security measures

Our website uses cookies and analytics tools to improve user experience and platform performance. You may adjust cookie settings through your browser. Disabling cookies may affect your ability to use certain features of the platform.

11

Minors

Our services are intended for adults aged 18 years and older. We do not knowingly collect personal or health information from individuals under the age of 18. If we become aware that information has been collected from a minor without appropriate consent, we will take steps to delete that information promptly.

12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify active patients directly.

Your continued use of our services following any update constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

13

Contact Us

If you have questions, concerns, or requests regarding your privacy or this policy, please contact us: