1Who we are

Healos™ Canada ("Healos™," "we," "us") operates noheartattack.com from Ottawa, Ontario. This policy explains how we handle personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Quebec's Law 25.

Our Privacy Officer, Way Liu, is responsible for how we protect personal information. Contact details are in Section 12.

2What we collect

• Contact details: name, email, phone number and shipping address.
• Health information you choose to give us: your condition, procedure history, medications, symptoms, survey answers, H-Index™ scores and any blood-test results you upload.
• Purchase details: program, order and billing history. Card details are handled by Stripe; we never see or store your full card number.
• Communications: emails, text and WhatsApp messages, call notes and check-in responses.
• Website use: pages visited, device and browser type, collected through cookies only if you accept them (Section 7).
• Professional partners: name, role, organisation and contact details submitted through our partner forms.

The free tools on our website, such as the medication checker and risk self-check, run in your browser. Your answers are not saved or sent unless you choose to email yourself a result.

3How we use it

• To deliver your program: intake, pharmacist medication review, kit fulfilment, reports, reviews and check-ins.
• To process payments, refunds and guarantees.
• To answer your questions and send service messages about your order.
• To send recovery tips and offers by email, only with your consent. Every email has an unsubscribe link, as required by Canada's Anti-Spam Legislation (CASL).
• To improve our services, using anonymised, aggregated data that cannot identify you.
• To meet legal, tax and regulatory obligations.

4Your consent

We ask for your express consent before collecting health information. You may withdraw consent at any time, subject to legal or contractual limits; this may mean we can no longer provide some services.

If you order for a family member, you confirm that they have agreed to share their information with us. They can contact us directly at any time.

5Who we share it with

We never sell personal information and never use health information for advertising. We share information only with service providers who help us run the program, under contracts that require them to protect it:

We may also disclose information where required by law, or with your permission, for example to share a report with your doctor.

6Storage outside Canada

Some of our providers store information outside Canada, mainly in the United States. While stored there, it may be accessible to authorities under local law. We choose providers with strong security and contractual privacy protections.

7Cookies and analytics

• Essential cookies keep the website working and remember your cookie choice. They are always on.
• Analytics and advertising cookies (Google Analytics and Google Ads) help us understand how the site is used and measure our advertising. They are switched off until you click "Accept" on our cookie notice.

We do not use session-recording tools. We do not send the conditions or medications you select on our website to analytics or advertising services.

You can change your choice at any time: Cookie settings. You can also block cookies in your browser settings.

8How long we keep it

We keep personal information only as long as needed for the purposes above. Health information is kept for up to 24 months after your last service, then deleted or anonymised, unless you ask us to delete it sooner or the law requires us to keep it longer. Financial records are kept as long as tax law requires.

9Security

We protect information with encrypted connections (HTTPS), access limited to staff who need it, and providers that meet recognised security standards. No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify you and the Privacy Commissioner of Canada as the law requires.

10Your rights

You can ask us to:

• See the personal information we hold about you.
• Correct anything that is inaccurate.
• Delete your information, where we are not legally required to keep it.
• Stop marketing messages (use the unsubscribe link, or reply STOP to texts).
• Receive your information in a commonly used format (Quebec residents).

Email your request to [email protected]. We reply within 30 days. If you are not satisfied, you may contact the Office of the Privacy Commissioner of Canada, or in Quebec, the Commission d'accès à l'information.

11Children

Our services are for adults 18 and over. We do not knowingly collect information from children.

12Changes and contact

We may update this policy and will post the new version here with its effective date. If changes are significant, we will email active clients.

Terms of Service · Home