Privacy policy

What we collect and why

• Orders: your name, email, phone, shipping address and the items ordered, to fulfil and support the order. Payment happens on Moneris' systems; we receive a confirmation and the last digits of the card, never the full card number.
• Epinephrine requests: the patient details, prescriber information and any prescription image you attach, used only to have the request reviewed and dispensed. Health information in a request is treated as sensitive and shared only with the pharmacy (see sharing, below).
• Card registration: the name shown on the emergency page, where the medication is kept, an optional short medical note you choose to write, your email, and up to two emergency contacts with their opt-in status. You control every word shown on the card's page.
• Taps and alerts: when a card's emergency page is opened we log the time; when a helper presses the alert button and agrees to share their location, we log that location and text it to your confirmed contacts. This is the documented history the Tap service exists to provide.
• Text messages: contact mobile numbers, the one-time opt-in invitation, YES and STOP replies, and delivery status, to run the alert program described at /sms.
• Subscriptions: your email and billing status for the Tap service. Recurring charges run through Moneris.
• This website: the cart is stored in your own browser. We do not run advertising trackers and we do not sell personal information.

Who we share it with

Only what each provider needs to do its job: Clearpoint Pharmacy for medication requests; Moneris for payments; Twilio for text messages; Resend for email; Vercel and Neon, which host the site and database. Emergency page content is shown to whoever taps your card; that is its purpose. We disclose information if the law requires it. We never sell personal information, and mobile numbers and opt-in status are never shared with third parties or affiliates for marketing or promotional purposes.

Where it lives and how long

Our hosting and database providers store data in North American regions and may process it in the United States under contractual safeguards. We keep order and payment records for the periods Canadian tax law requires, card profiles and tap history while the card is registered, request records while needed to complete and document the request, and SMS opt-in records while the number is listed as a contact. Ask us to delete a card profile or request record and we will, unless a legal retention duty applies.

Your choices and rights

• Edit or delete your card profile any time with the edit link from your registration email, or by writing to us.
• Contacts can opt out of texts permanently by replying STOP to any message.
• You can ask what we hold about you, ask us to correct it, or ask us to delete it: info@westernallergy.com or 1 866 335 5294. We answer within 30 days.
• Cancel the Tap service any time; section 6 of the terms explains how.

Cookies

This site sets no advertising or tracking cookies, which is why you see no cookie banner. Your cart lives in your own browser's storage and never leaves it, the payment step runs on Moneris' systems under their policies, and our traffic measurement (Vercel Web Analytics) is cookieless and collects no personal identifiers.

Security

Traffic is encrypted in transit, database access is restricted and credentialed, card payment data never touches our servers, and emergency profiles show only what you typed into them. No system is perfect; if a breach creates a real risk of significant harm we will notify you and the Privacy Commissioner as PIPEDA requires.

Children

Cards are often registered for children by a parent or guardian, and that is who we deal with: we do not knowingly collect information directly from children under 13. A guardian can review or delete a child's profile at any time.

Changes and contact

If this policy changes, the effective date above changes with it, and material changes are flagged on this page. Privacy questions or complaints: info@westernallergy.com, 1 866 335 5294, Western Allergy Services Ltd., Victoria BC, Hamilton ON, St. John's NL. If we cannot resolve a concern you can contact the Office of the Privacy Commissioner of Canada.