Privacy Policy

Personal information is any information that identifies you, or by which your identity could be deduced and includes any health-related information. Business information however (for example, your business title or business address and business telephone number) is not considered to be personal information according to privacy legislation. Generally speaking, if we do not collect and use your personal information, we cannot provide you with our services. By providing your personal information to us, you agree that we may use it and disclose it for these purposes specified in this policy. You may withdraw your consent to these uses by deactivating your Dynacare Plus account on the User Profile page, but if you do, we will not be able to continue providing the services.

We collect, use and disclose personal information as part of Dynacare Plus for the following purposes:

• to deliver quality medical laboratory services to our clients
• to identify and to ensure continuous high quality service
• to enable us to contact and maintain communication with you
• to confirm your identity when you register for or access Dynacare Plus
• to manage your account and provide you with customer support
• to determine your eligibility for Dynacare Plus services
• to perform analytics in an effort to understand and improve performance, usability of Dynacare Plus,
• to allow us to efficiently follow up for testing, treatment, care and billing
• for teaching and demonstrating purposes on an anonymous basis
• for research, health surveillance and statistical analysis of data purposes
• to comply with any other requirements mandated by a government authority, including reporting positive test results to Provincial Public Health units if required by law
• for administrative / management activities such as planning, resource allocation, reporting or evaluation
• to comply generally with the law
• for any other purpose that may be identified to you before or at the time the information is collected

We may also use information related to your usage of Dynacare Plus, on a de-identified basis for purposes such as measuring adoption and to improve your experience. Therefore, we may use personal information in order to de-identify it.

Your e-mail address will only be used to send important service messages such as user ID and password recovery, notifications about availability of your lab report, changes to your laboratory test results since you last viewed them, receipts and updates regarding tests ordered on Dynacare Plus, and information about new functionality or changes to services and policies.

We collect personal information directly from you and others in accordance with best practices and in compliance with our legal obligations (e.g., your healthcare provider). We will limit the collection of personal information to those purposes identified in this Policy. Similarly, your personal information will not be used or disclosed for purposes other than those for which the information is collected or as required or permitted, by law.

We will retain your personal information for the periods prescribed by applicable rules and guidelines. These vary depending on the type of tests that we perform for you or may be determined by legislative or other requirements. After the expiry of these periods we will destroy, erase or make anonymous your personal information stored in Dynacare Plus.

We destroy our records (which include electronic records and hardware) in a way that protects your privacy. With respect to electronic records, at a minimum, we ensure that all information is wiped clean prior to disposal of electronic data storage devices. Paper based records are destroyed using methods that include supervised incineration or shredding and/or bonded contractors who must adhere to contractual privacy obligations or shredding and/or bonded contractors who must adhere to contractual privacy obligations.

We will use our best efforts to ensure that your personal information is as accurate, complete and up-to-date as possible for the purposes that it is to be used.

If your information is not accurate, complete and/or up-to-date (e.g., current laboratory results are not available), please contact our Dynacare Plus Customer Care Team at 855.748.1115 for additional assistance.

We take all reasonable precautions to ensure that your personal information is protected from loss, theft, unauthorized access, modification, use, copying, disclosure or tampering.

Your information is protected whether recorded on paper or electronically. We have safeguards in place to protect all personal information retained in our facilities, and during their disposal and destruction. Our staff is also aware of the importance of maintaining the security and confidentiality of all personal information in our possession. We review and update our security measures on a regular basis.

We have appropriate safeguards (e.g., encryption) in place to protect personal information during transmission to and from third parties retained to support Dynacare Plus.

We will not use personal information if other information, namely de-identified and/or aggregate information, will serve the purpose, and shall not collect, use or disclose more personal information than is reasonably necessary to meet the purpose.

Should you have an access or correction request, or any questions about our information practices or complaints about our compliance with privacy legislation, please contact us.

Dynacare Plus Services & Functionality Supported by Third Parties:

You have the option to connect your accounts from other services and may allow these services to send information (including personal information) to Dynacare Plus. In all events, we do not collect information, unless you have "allowed" for its collection, use and disclosure. If you decline to allow information collection, we will not collect your information unless you manually enter it into Dynacare Plus.

If you opt into optional or value-added services provided within Dynacare Plus (e.g., Password Reset via SMS or Call), Dynacare Plus may send your information (including personal information) to, and have this information processed by, and stored with third-party service providers. The information transmitted to our service providers will be limited to the minimum necessary to accomplish the activity or transaction. In all events, we do not transmit or share your information to a service provider unless you have initiated the activity or transaction. You can opt out from optional or value-added services within Dynacare Plus at any time, and by doing so, your information will not be shared with, processed by and stored with our service providers.

We cannot guarantee that your information will be processed and stored in Canada. However, our third parties have implemented the appropriate information handling and privacy practices and effective safeguards to protect your information. If you do not wish for your information to be processed and stored outside of Canada, please do not enroll or opt into optional or value-added services.

For example, if you choose to opt into the account recovery feature via SMS or Call, Dynacare Plus sends your telephone number to a third-party to set up this account recovery feature. Subsequently, if you attempt to recover your account through the SMS or Call method, your telephone number will be sent to the third-party to help reset your password. In both instances, the third-party will need to process and store your telephone number, and no other personal information is shared with the third party. Please visit our Frequently Asked Questions (FAQ) - Security Concerns for more information about account recovery via SMS or Call.

Use of First- and Third-Party Cookies

First-party cookies on Dynacare Plus web app are delivered and set by Dynacare. We may also use third-party cookies (set by another website or service). First- and third-party cookies help us support the web app's services and functionality, as well as collect and analyze information about your activities and experiences on the web app.

Purpose:

We use the cookies for a variety of purposes on the Dynacare Plus web app. Below is a list of cookie categories and intended purposes for each:

• Essential cookies: enables Dynacare Plus core functionality and ensures your secure access and usable navigation to our service. These cookies provide you with the appropriate experiences and features. For example, the cookies are essential to manage your session and user movement on the Dynacare Plus. Both session and persistent cookies are stored on your device to support core Dynacare Plus functionality
• Functional cookies: collect and share information about your preferences on Dynacare Plus to customize and improve your experience on Dynacare Plus. To provide a consistent level of service, the functional cookies are persistent cookies that remembers your device over multiple visits to Dynacare Plus.
• Analytics cookies: collect information to understand how users are using Dynacare Plus, identify opportunities to improve usability and user experience and to measure user engagement and marketing. We use first- and third-party analytics cookies to generate insights. For example, Google Analytics services that are integrated with Dynacare Plus employ third-party cookies. Third party collect and transmit anonymized data to Google servers. Google may also transfer this data collected from Dynacare Plus to third parties as required by law, or where such third parties process the information on the behalf of Google. Information collected from the first-party cookies are stored, accessed and used by Dynacare, and will not be transmitted or disclosed to other parties.

Do Not Track Response:

Given that Dynacare Plus cookies are required to take full advantage of essential features. If you block or otherwise reject cookies, you will not be able to use Dynacare Plus services and features (e.g., view lab results, movement between pages, etc.). Thus, we do not respond to "do not track" signals at this time. If we do so in the future, we will modify this Cookie Policy accordingly.

Use of Similar Technology:

Application SDKs, third-party software development kits (e.g., code developed using the analytics library from Google's Firebase SDK), are embedded in the Dynacare Plus mobile app. These SDKs permit the collection of information about:

• The mobile app itself
• The activity in the mobile app (e.g., error messages, button clicked, screens the users viewed, etc.), and
• The device that is running the mobile app (e.g., device type, device OS).

For example, Google's Firebase services that are embedded in Dynacare Plus mobile app collect and transmit anonymized data to Google servers. Google may also transfer this data collected from Dynacare Plus to third parties as required by law, or where such third parties process the information on the behalf of Google.

Where Dynacare updates its services impacting the purposes for collecting, using or disclosing personal information, we will update this policy and post it on www.Dynacareplus.com.