Privacy Policy

Information you provide directly:

• Account registration: name, email address, password
• Clinic registration: clinic name, address, phone number, email, website, hours of operation, and other clinic details
• Contact form submissions: name, email, and message content
• Reviews: ratings and written reviews you submit for clinics
• Profile information: any optional details you add to your account profile

Information collected automatically:

• Usage data: pages visited, search queries, time on site, and click-through data
• Device information: browser type, operating system, IP address, and device identifiers
• Cookies and similar technologies: see Section 5 for details

Information from third parties:

• If you sign in using a social provider (Google, Facebook, LinkedIn), we receive basic profile information such as your name and email address, as permitted by your settings on those platforms

We use the information we collect to:

• Provide, operate, and improve the Service
• Create and manage your account
• Process and display clinic listings
• Send transactional emails (account verification, password reset, status change notifications)
• Respond to your contact form submissions and support requests
• Display approved reviews on clinic profiles
• Send optional email alerts about clinic status changes (only if you opt in)
• Monitor for and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Analyse usage patterns to improve the Service (using aggregated, de-identified data where possible)

We do not sell your personal information to third parties.

We process your personal information on the following legal bases:

• Contract performance: to provide the services you've requested
• Legitimate interests: to improve the Service, prevent fraud, and maintain security
• Consent: for optional communications such as email alerts and marketing (which you may withdraw at any time)
• Legal obligation: where required by applicable law

We may share your information with:

• Service providers: third-party vendors who assist us in operating the Service (e.g., cloud hosting, email delivery, analytics). These providers are contractually obligated to keep your information confidential and use it only for the services they provide to us.
• Law enforcement and legal process: when required by law, court order, or government authority, or to protect the rights, property, or safety of Find a Doctor BC, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

Approved reviews are displayed publicly on clinic profile pages. If you do not wish your name to appear, you may submit reviews anonymously.

We use the following types of cookies and similar technologies:

• Essential cookies: necessary for the Service to function (e.g., authentication session cookies). You cannot opt out of these.
• Analytics cookies: help us understand how visitors use the Service (e.g., Vercel Analytics). This data is aggregated and does not identify individual users.
• Preference cookies: remember your settings and preferences across visits.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

We retain your personal information for as long as your account is active or as necessary to provide the Service. After account deletion:

• Your account data is deleted within 30 days
• Anonymised reviews may remain on clinic profiles
• Contact form submissions are retained for up to 2 years for customer service purposes
• We may retain data longer where required by law or for legitimate business purposes (e.g., tax records)

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, and destruction. These include:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted passwords (we never store plain-text passwords)
• Access controls and role-based permissions
• Regular security reviews

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Under applicable Canadian privacy law, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request that we correct inaccurate or incomplete information
• Deletion: request deletion of your personal information (subject to legal retention requirements)
• Withdrawal of consent: withdraw consent for optional processing (e.g., email notifications) at any time
• Complaint: lodge a complaint with the BC Office of the Information and Privacy Commissioner (OIPC)

To exercise these rights, contact us. We will respond within 30 days.

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

The Service may contain links to third-party websites (such as clinic websites). This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email and will update the "Last updated" date at the top of this page. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or your personal information, please contact us: