Privacy Policy

1. Introduction

This privacy policy (the “Privacy Policy”) describes the types of information collected by Medik8 Canada Limited d/b/a Medik8 (“Medik8,” “we,” “us,” or “our”) in connection with our website operated in Canada namely ca.medik8.com,and any related websites on sub-domains, extensions, and locales that we own, and any related online platforms, mobile apps, social media, applications and software systems that we operate (together, the “Site”). The Privacy Policy is applicable only to visitors, users, vendors, customers, merchants, and others, who currently reside in or select a shipping address in Canada  (“you” or “your”).

By accessing the Site on any computer, mobile phone, tablet, or other device (collectively, “Device”), making a purchase from us, expressly agreeing to the Privacy Policy, or otherwise interacting with us through the Site, you agree to the terms of the Privacy Policy. If you do not agree to the Privacy Policy, please do not use the Site.

We may modify the Privacy Policy at any time, and will post the current version on the Site from time to time. We encourage you to periodically review the Privacy Policy to stay informed about how we are using the information we collect.

2. Collection, Use, and Disclosure of Personal Information

The following table sets forth the categories of personal information we collect from you, the source of that personal information, and how we use and share such personal information.

Aggregated personal information does not personally identify you or any other user of the Site. We may use aggregated personal information such as statistical or demographic information for any purpose, including for statistical analysis and research.

3. Additional Purposes for Using Personal Information

In addition to the uses set forth in the “Collection, Use, and Disclosure of Personal Information” section above, we may use and share the categories of personal information identified above:

• To comply with applicable legal and regulatory requests and obligations (including investigations)

• To establish or defend legal claims and allegations

• For security or the prevention, detection, or investigation of fraud, suspected or actual illegal activity, violations of company policy or rules, or other misconduct

• To seek advice and consultation from lawyers, auditors, insurance companies, and other professional advisers

• With potential or actual purchasers of all or part of our business in connection with a business transaction

4. Cookies and Tracking Technologies 

As described in our "Collection, Use, and Disclosure" table, we and our third-party partners use cookies, pixels, and similar tools (like JavaScript tags) to collect information automatically.

Purposes for Collection: We use these technologies for the following specific purposes:

• Functionality: To recognize you, maintain your session, and allow you to use the Site without re-entering credentials

• Performance & Management: To monitor and manage Site usage and improve our products and services

• Enhanced Experience: To personalize your shopping journey and "remember" your preferences

• Incomplete Form Capture: We may collect information you enter into forms on the Sites before you click "submit" or a similar button to understand where users encounter difficulties

• Targeted Marketing: To provide you with interest-based ads and advertising emails. Note: We may use this technology to identify you and send advertising emails even when you are not logged into the Site

Consent and Your Choices:

• While strictly necessary cookies are deployed to make the site work and for security purposes, we rely on your express opt-in consent for performance, personalization, and marketing cookies (including those used for interest-based advertising and unlogged email targeting)

• You can provide, refuse, or withdraw your consent at any time via our cookie management service or preference page

• You may also set your browser to reject cookies. However, doing so may limit your access to certain features. Please note that browser-management tools are outside of our control.

We may combine cookie data with other information we have collected from you for the purposes outlined above. 

5. Interest-Based Advertising & Your Choices 

We work with third-party advertising partners (such as Google Ads) and social media platforms to display advertisements for our products on other websites and apps. These partners use tracking technologies (including cookies and pixels) to collect information about your activities on our Site and across the internet to serve you "personalized" or "interest-based" ads that are tailored to your inferred interests.

Cookie Consents:

• We won't deploy non-essential tracking technologies for interest-based advertising unless you have provided express opt-in consent via our cookie banner.

• By using our Site and not adjusting your cookie settings, you provide implied consent to the use of your information for interest-based advertising.

How to Opt-Out: If you prefer not to receive personalized advertisements, you can exercise your choice through the following Canadian and international industry programs:

• AdChoices Canada: Visit youradchoices.ca to opt-out of participating companies.

• DAA / NAI (US): You may also use the NAI Opt-Out Tool or the DAA WebChoices Tool.

• Site-Specific Settings: You can manage your preferences at any time by clicking the cookie preference link in our website footer.

Note on Non-Targeted Ads: If you opt-out, you will still see advertisements for our products. However, these ads will be "contextual" (based on the webpage you are currently viewing) rather than based on your past browsing history or interests.

6. Retention and Disposal of Personal Information 

We retain your personal information only for as long as is strictly necessary to fulfill the purposes for which it was collected or to comply with applicable legal, tax, or regulatory requirements.

• Retention Criteria: Our retention periods are determined based on the nature of the information, our legal obligations (such as consumer protection laws or tax requirements), and the necessity of the data for providing you with requested services.

• Anonymization and Destruction: Once the purpose for collection has been fulfilled and any legal retention periods have expired, we either securely destroy your personal information or permanently anonymize it. Anonymization in Canada means the data can no longer be linked to you, directly or indirectly, and we use it solely for legitimate purposes (such as internal business analytics).

• Best practice: We ensure that the destruction or anonymization process follows recognized security best practices to prevent any unauthorized recovery of the data.

7. Security of Your Personal Information 

We are committed to protecting your personal information and have implemented physical, organizational, and technological safeguards appropriate to the sensitivity of the information in our care.

• Access Controls: Within our organization, your personal information will only be accessible to personnel with a need to access the information in order to carry out their duties. Depending on the nature of personal information, this may include customer service, marketing, advertising, IT, security, and finance personnel.

• Our Responsibility: We ensure that our employees and third-party service providers only have access to the information they need to perform their duties. We use contractual agreements to ensure that any third parties processing your data outside of Canada provide a level of protection comparable to our own standards.

• Mandatory Breach Notification: In the event of a "confidentiality incident" or security breach that poses a real risk of significant harm to you (such as identity theft, financial loss, or humiliation), we notify you and the relevant privacy regulators (such as the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec) as soon as feasible, in accordance with applicable laws.

• Your Role: While we take extensive steps to protect your data, no method of transmission or storage is 100% secure. We encourage you to use strong passwords and protect your account credentials.

8. Children and Minors 

Our Site is intended for use by adults. We do not knowingly collect personal information from children under the age of 18 in Canada. 

• Consent Requirements: If you are under the age of 18 you must not provide any personal information to us. If we learn that we have collected personal information from a minor without verifiable parental or guardian consent, we delete that information immediately.

• Parental Rights: If you are a parent or legal guardian and believe your child has provided us with personal information, please contact our Privacy Officer (see "Contact Us" below). We take steps to investigate and permanently delete the information from our records.

9. Third-Party Links and Shared Platforms 

Our Site may contain links to third-party websites (such as Instagram, Facebook, and YouTube) or allow you to use third-party accounts (like "Sign in with Google") to purchase our products.

• Your Responsibility: These external sites have their own privacy policies. We encourage you to review them, as their practices are not governed by this policy.

• Our Accountability: When you use a third-party service to interact with our Site (e.g., using a social media account to create a profile), we may receive certain information from that third party. We treat all such information in accordance with this policy.

• Social Media & Tracking: If you are logged into a social media account while visiting our Site, that platform may collect information about your visit via integrated tools (such as "Like" buttons or pixels). These technologies are deactivated by default on our Site and will only be activated if you provide express opt-in consent via our cookie banner.

• Third-Party Marketplace Accounts: If you purchase our products through a third-party platform, that platform acts as an independent "controller" of your data. We are only responsible for the information shared with us to fulfill your order.

10. Changes to this Privacy Notice 

We may update this policy from time to time to reflect changes in our personal information practices or relevant privacy laws.

• Notification of Changes: For minor changes, your continued use of our Site following the posting of the revised policy constitutes your acceptance of those changes.

• Material Changes: If we make material changes to the way we collect, use, or disclose your personal information—particularly changes that significantly affect your privacy rights—we provide a more prominent notice (e.g., via email or a pop-up banner on our Site).

• Fresh Consent: If the changes involves using your personal information for a new purpose that was not previously disclosed, we obtain your express consent before using your data in that manner.

• We ensure that all material changes are communicated in a clear and simple manner, and we provide you with a summary of the significant changes to help you understand how your rights are impacted.

11. Your Privacy Rights

Depending on where you reside in Canada, you have specific rights regarding your personal information. These rights are subject to limitations and exclusions under applicable laws.

Your Rights May Include:

• Right to Access: You may have the right to request a copy of the personal information we hold about you and/or to receive an account of how that information is being used or to whom it has been disclosed.

• Right to Rectification: You have the right to challenge the accuracy and completeness of your personal information and have it amended as appropriate.

• Right to Withdraw Consent: You may withdraw your consent to the collection, use, or disclosure of your personal information at any time (e.g. opting out of marketing), subject to legal or contractual restrictions and reasonable notice. You may withdraw your consent to receive marketing communications at any time by using the "unsubscribe" link provided in our messages, or following the instructions set out in SMS messages.

• Right to Erasure: You may request that we erase your personal information as required by law. 

• Right to Data Portability: You may have the right to receive your computerized personal information in a structured, commonly used technological format or request that it be transferred to another organization.

• Right to Information on Automated Processing: If we use your personal information to make a decision based exclusively on automated processing, we inform you at or before the time of the decision and provide you with the opportunity to submit observations.

How to Exercise Your Rights: To submit a request, please contact our Privacy Officer at the address provided below. To protect your privacy, we may be required to take reasonable steps to verify your identity (such as requiring a login or verifying recent order details) before granting access or making corrections.

No Discrimination: We won’t discriminate against you for exercising any of your privacy rights. Exercising these rights will not result in a change in the price or quality of our goods or services.

12. Transfer of Information Outside of Canada 

We are an international company, and your personal information will be transferred to, stored, and processed outside of Canada, in the United States and potentially other countries where our service providers are located. If you are located in Quebec, please note your personal information may be communicated outside of Quebec.

• Foreign Legal Access: When your information is stored outside of Canada, it is subject to the laws of that jurisdiction. This means that your personal information may be accessible to government, national security, or law enforcement authorities of the United States (or other host countries) under lawful orders or applicable local laws.

• Our Commitment to Protection: We remain accountable for your personal information regardless of where it is stored. Before transferring data outside of Canada, we take steps to ensure that the recipient provides a level of protection comparable to that required under Canadian privacy laws. This includes using specialized contractual agreements with our service providers to mandate strict security and confidentiality. We take steps, including carrying out impact assessments where appropriate, to ensure that your information will receive adequate protection. By providing us with your personal information, you acknowledge that it will be transferred and stored outside of your province.

If you have any questions, or wish to receive further written information about our policies and practices with respect to our use of service providers or affiliates outside of Canada, please contact us our Privacy Officer at the information provided below.

13. Accountability and Responsibilities

Medik8 Canada Limited is responsible for the personal information under its control. We have appointed a Privacy Officer who is accountable for our compliance with Canadian privacy laws. This includes managing the day-to-day administration and implementation of our privacy program, such as developing and delivering privacy training to relevant personnel, establishing and publishing relevant policies and procedures, investigating and responding to complaints and potential violations of our privacy policies or relevant laws, responding to requests from individuals to exercise their rights under applicable privacy laws, and regularly reviewing and identifying opportunities to improve our privacy program.

Medik8’s Privacy Officer is responsible for managing our data security program, including preparing a written information security program, assisting with breach prevention, response and containment, and evaluating and implementing information security controls.

In addition, all personnel are responsible for: protecting the confidentiality and security of any personal information they handle in connection with their employment or engagement; following our security measures and policies and procedures for handling personal information; refraining from any unauthorized access, use or disclosure of personal information; facilitating data subject requests; and reporting security or confidentiality incidents.

14. Contact Us

If you have questions or concerns about the Privacy Policy or how we collect and use the information of our customers, you can contact us by:

• Emailing our Data Protection Officer at privacy (at) medik8.us,

• postal address at Medik8 Inc. d/b/a Medik8, 915 Broadway Suite 1005 New York, NY 10010; ATTN: Privacy Request.

If we need, or are required, to contact you concerning any event that involves your information, we may do so by email, telephone, or mail. If you make a purchase, we send you a confirmation email.