Privacy & terms

Privacy Policy

Last updated: July 2026

CanAlt Health Laboratories (“CanAlt,” “we,” “us,” or “our”) is a diagnostic laboratory based in Mississauga, Ontario. We are committed to protecting the privacy of the personal information and personal health information entrusted to us. This policy describes how we collect, use, disclose, safeguard, and retain that information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario health-privacy legislation.

Information we collect

Depending on how you interact with us, we may collect:

• Practitioner account information — name, clinic or practice details, professional credentials and licensing/college registration, contact information, and billing details.
• Patient and sample information — the biological samples submitted for testing and any identifying or demographic information a practitioner provides with an order (for example, a patient name or an anonymous patient reference, and where relevant, age or date of birth). Many practitioners choose to submit anonymized patient references.
• Test results and reports — laboratory findings generated from processing a sample.
• Technical information — limited data collected when you use our website or portal, such as log data needed to operate and secure the service.

Why we collect it (purposes)

We collect and use personal and health information to:

• Process laboratory tests and produce reports for the ordering practitioner;
• Ship test kits, deliver results, and provide related support;
• Verify practitioner credentials and administer practitioner accounts;
• Invoice for services and maintain business records;
• Maintain the quality, accuracy, and traceability of testing consistent with our accreditation obligations; and
• Meet legal, regulatory, and professional requirements.

Consent

We collect, use, and disclose personal information with consent, except where the law permits or requires otherwise. The ordering practitioner is responsible for obtaining the patient’s consent to testing and to the disclosure of the patient’s sample and related information to CanAlt for processing. You may withdraw consent, subject to legal or contractual restrictions and reasonable notice, by contacting our Privacy Officer; withdrawing consent may limit our ability to provide certain services.

How we use and disclose information

Test results are returned to the ordering practitioner and stored against that practitioner’s account. We do not sell personal information. We disclose information only as needed to fulfill the purposes above — for example, to service providers who process information on our behalf under confidentiality and privacy obligations, or where disclosure is required or permitted by law. Reports are intended for use by licensed practitioners and are not a diagnosis; results should be interpreted within the full clinical picture.

Safeguards

We maintain administrative, technical, and physical safeguards designed to protect information against loss, theft, and unauthorized access, use, or disclosure. CanAlt operates under an ISO 15189 quality framework. Our technical controls include role-based access control, multi-factor authentication for user accounts, encryption of information in transit (TLS) and encryption of backups at rest, audit logging of access to personal health information, and encrypted, access-controlled storage of laboratory data. Access to personal and health information is limited to personnel who require it to perform their duties.

Retention

We retain personal and health information only as long as necessary to fulfill the purposes for which it was collected and to meet our legal, regulatory, professional, and accreditation obligations, after which it is securely destroyed or de-identified. Laboratory records are retained in accordance with applicable Ontario laboratory and health-records requirements and our internal retention policy; biological samples are retained only for the period needed to complete and, where necessary, re-verify testing.

Cross-border and third-party processing

Some of the service providers we use to operate our services (for example, hosting, communications, or payment processing) may store or process information outside of Canada, including in the United States. Where that occurs, information may be subject to the laws of the jurisdiction in which it is processed, and we take reasonable steps to require that it is protected by comparable safeguards.

Your access and correction rights

Subject to certain legal exceptions, you have the right to access the personal information we hold about you and to request correction of inaccuracies. Requests relating to a patient’s health information are generally directed through the ordering practitioner, who holds the clinical relationship with the patient. To make a request, contact our Privacy Officer using the details below; we may need to verify your identity before responding.

Contacting our Privacy Officer & how to complain

Questions, access or correction requests, and privacy concerns can be directed to our Privacy Officer:

Privacy Officer, CanAlt Health Laboratories
Email: inquire@canaltlabs.com
Phone: 1-877-900-8008

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca. For personal health information, the Information and Privacy Commissioner of Ontario (IPC) may also have jurisdiction and can be reached at ipc.on.ca.

Terms of Service

Last updated: [effective date to be set]

Governing law is expected to be the Province of Ontario and the federal laws of Canada applicable therein. This note is a placeholder pending the final Terms of Service.

Contact us

Questions about privacy or terms? Email inquire@canaltlabs.com or call 1-877-900-8008.