Privacy Policy
Please read the Elaris Health PrivacyNotice carefully to understand what information is collected through ElarisHealth, how this information is used, and when it may be disclosed.
In this Privacy Notice, “Elaris Health”refers to our website, our application, and the products and services offeredthrough our website and application. References to “we”, “us” or “our” meansElaris Health. References to “personal information” includes “personal health information”.
By visiting our website and using ElarisHealth services, you provide your consent and agree to the collection ofpersonal data in a lawful and fair manner. We ensure that the collection andprocessing of personal data adhere to applicable privacy laws and regulations.If you have any questions or concerns about the data we collect and how it isused, please contact Elaris Health directly using the contact informationprovided in this privacy policy. Even if you do not read the entire ElarisHealth Privacy Notice.
Data Controller and Data Processor
Elaris Health serves as the data processorfor most information entered into the Elaris Health application, website, andsupporting systems, acting on behalf of its business customers who serve as thedata controllers. However, Elaris Health also collects certain informationdirectly from users for security, logging, and application performancepurposes, where it acts as the data controller and processor. Elaris Health mayengage third-party sub-processors (as detailed below) to support itsoperations. If you have any inquiries about the processing of your personaldata, please contact us using the contact information provided in this privacynotice.
Types of Data Collected
Elaris Health strictly limits thecollection of personal data to only the information that is necessary toperform and provide services or fulfill a direct business need. We adhere tothe principle of data minimization, ensuring that only the minimum amount ofpersonal data required is collected and processed.
When collecting personal data, we strive tobe transparent about the purposes for which the data is being collected and howit will be used.
The Elaris Health application and supporting applications collect the following types of personal data: cookies,usage data, email address, phone number, first name, last name, proTvince,state, country, ZIP/Postal code, city, address, and company name.
Certain data may be mandatory for the useof the Elaris Health application, while other data may be optional. When datais mandatory, it is clearly indicated throughout the website and application.Users are free to choose not to provide optional data without any impact on theavailability or functionality of the service. If you have any questions aboutwhich personal data is mandatory, please contact us using the contactinformation provided in this privacy notice.
Elaris Health applications may collectpersonal data that users provide voluntarily or collect usage data while usingthe website, web application, and supporting applications.
Furthermore, the Elaris Health website andits supporting applications may use cookies and other tracking technologies toenhance the user experience and provide specific functionalities. Please referto the Cookie Policy below for more information.
Safeguards
At Elaris Health, we take the security ofyour personal data seriously. We implement robust technical and organizationalmeasures to protect your data from unauthorized access, disclosure, alteration,or destruction.We follow industry best practices andstandards to ensure the confidentiality, integrity, and availability of yourdata. Our security measures include but are not limited to:
Encryption: We employ encryption techniquesto safeguard your data during transmission and storage.
Access Control: We restrict access topersonal data to authorized personnel only, ensuring that it is accessible on aneed-to-know basis.
Regular Audits: We conduct regular securityaudits and assessments to identify and address any vulnerabilities or risks.
Employee Training: Our employees undergocomprehensive data protection training to ensure they understand the importanceof data security and privacy.
We are committed to continuously enhancingour security practices and staying up to date with the latest industrystandards to provide a secure environment for your personal data.While we strive to protect your personaldata, no method of transmission or storage is 100% secure. Therefore, we cannotguarantee absolute security. If you have any concerns about the security ofyour data, please contact us using the contact information provided in thisprivacy notice.
Mode, Place, and Methods of Processing the Data
Personal data is processed using computersand technology-enabled tools in accordance with organizational policies andprocedures related to the stated purposes. In certain cases, personal data maybe accessible to Elaris Health employees involved in the operation of theElaris Health website, application, and supporting applications. Externalparties, such as third-party technical service providers, hosting providers,and IT companies, may also have access to personal data as data processors orsub-processors appointed by Elaris Health.
Legal Basis of Processing
Elaris Health may process personal datawhen one of the following legal bases applies:Consent: Processing is based on the user’sconsent for one or more specific purposes.
Performance of a Contract: Processing isnecessary for the performance of a contract between Elaris Health and the user.
Legal Obligation: Processing is necessaryto comply with a legal obligation.
Legitimate Interests: Processing isnecessary for the legitimate interests pursued by Elaris Health or a thirdparty.
The specific legal basis for processingpersonal data will be provided upon request, including whether the provision ofpersonal data is a statutory or contractual requirement, or a requirementnecessary to enter into a contract.
Place
Data is primarily processed at ElarisHealth’s operating offices and hosting facilities, located in Canada. However,some data may be stored and processed in the United States or the EuropeanUnion through third-party sub-processors. Data transfers may involvetransmitting user data to a country outside its own jurisdiction.
Retention Time
Personal data is retained for as long asnecessary to fulfill the purposes for which it was collected unless a longerretention period is required or permitted by law.The retention periods are as follows:Personal data collected for the performanceof a contract between Elaris Health and a business customer is retained untilthe contract is fully executed, or until the business customer requestsdeletion of the data.Personal data collected for Elaris Health’slegitimate interests is retained as long as necessary to fulfill thosepurposes. For specific information about Elaris Healths legitimate interests,please refer to the relevant sections of this document or contact us using thecontact information provided in this privacy notice.Personal data processed based on userconsent may be retained until such consent is withdrawn, provided that it isnot otherwise required or permitted by law.Personal data may be retained for a longerperiod when necessary to comply with a legal obligation or a lawful order froman authority.Once the retention period expires, personaldata will be securely deleted or anonymized.
The Purposes of Processing
Elaris Health collects and processespersonal data for the following purposes:Providing Services: Personal data iscollected to enable Elaris Health to provide its services.
Analytics: Personal data is used formonitoring and analyzing web traffic and user behavior on the Elaris Healthwebsite and application.
User Database Management: Personal data ismanaged to create user profiles, track user activities, and improve theapplication.
Managing Contacts and Sending Messages:Personal data is used to manage contact lists and send communications to users.
Handling Payments: Personal data isprocessed to facilitate payment transactions and related communications.
Displaying Content from External Platforms:Personal data is used to display external content and enable interaction withit.
Hosting and Back-End Infrastructure:Personal data is processed and stored on hosting and back-end infrastructure tosupport the operation of the Elaris Health application.
Interaction with Live Chat Platforms:Personal data is used to facilitate communication with users through live chatplatforms.
Spam Protection: Personal data is analyzedto filter spam traffic and protect against spam.
Contacting the User: Personal data isprocessed to respond to user requests and inquiries.
Remarketing and Behavioral Targeting:Personal data is used for remarketing and behavioral targeting purposes todisplay targeted advertisements.
Selling Goods and Services Online: Personaldata is processed for the provision of services or goods, including paymentprocessing and delivery.
Processing and Sharing of Personal Data
Elaris Health engages various services andthird-party processors to support its operations. The following providesdetailed information on the processing of personal data, the involved services,and the third-party processors:Analytics:HubSpot Analytics (HubSpot, Inc.)Google Analytics (Google Inc.)FullStoryTwitter Ads Conversion Tracking (Twitter,Inc.)Google Ads Conversion Tracking (GoogleInc.)Google Tag Manager (Google Inc.)Contacting the User:Mailing List or Newsletter (The ElarisHealthWeb Application)Phone Contact (The Elaris Health WebApplication)Contact Form (The Elaris Health WebApplication)Displaying Content from External Platforms:Google Fonts (Google Inc.)YouTube Video Widget (Google Inc.)Handling Payments:Stripe (Stripe Inc)PayPal (PayPal Inc.) Xero (Xero Limited)Hosting and Back-End Infrastructure:Amazon Web Services (AWS) (Amazon)Managing Contacts and Sending Messages:HubSpot Email (HubSpot, Inc.)Remarketing and Behavioral Targeting:Twitter Remarketing (Twitter, Inc.)Twitter Tailored Audiences (Twitter, Inc.)AdWords Remarketing (Google Inc.)Remarketing with Google Analytics (GoogleInc.)User Database Management:HubSpot CRM (HubSpot, Inc.)HubSpot Lead Management (HubSpot, Inc.)Selling Goods and Services Online:E-commerce PlatformFor detailed information about each serviceand third-party processor, please refer to the corresponding sections of thisprivacy notice.
Cookie Policy
The Elaris Health website and webapplication use cookies to enhance the user experience and provide specificfunctionalities.
The Rights of Users
Users have the following rights regardingtheir personal data processed by Elaris Health:
Right to Withdraw Consent: Users have theright to withdraw their consent to the processing of their personal data at anytime.
Right to Object: Users can object to theprocessing of their personal data based on legitimate interests or for directmarketing purposes.
Right of Access: Users can request accessto their personal data and obtain information about the processing activities.
Right to Rectification: Users can requestthe correction or update of inaccurate or incomplete personal data.
Right to Restrict Processing: Users havethe right to restrict the processing of their personal data under certaincircumstances.
Right to Erasure: Users can request theerasure of their personal data, subject to legal obligations or overridinglegitimate grounds.
Right to Data Portability: Users canrequest to receive their personal data in a structured, commonly used, andmachine-readable format, and transmit it to another data controller.
Right to Lodge a Complaint: Users have theright to lodge a complaint with a data protection authority regarding theprocessing of their personal data.
To exercise these rights or obtain furtherinformation, users can contact Elaris Health using the contact details providedin this document.
Changes to This Privacy Notice
Elaris Health reserves the right to modifyor update this privacy notice at any time. Changes will be communicated throughthe Elaris Health website, application, or other appropriate means. It isrecommended to regularly review this privacy notice for the latest information.
Contact Us
If you have any questions, concerns, orrequests regarding this Privacy Notice, data deletion, accuracy, or any otherprivacy practices, please contact us at:
ELARIS HEALTH INC.
2464 Howard Ave Suite 201, Windsor ON
ds@elarishealth.com
Last updated: 2025-07-18