This section applies to Canadian residents. Your rights are governed by PIPEDA (federal, applying in most provinces), Law 25 in Quebec, or PIPA in British Columbia and Alberta.
Access — request a copy of the personal information we hold about you.
Correction — request that we correct inaccurate or incomplete personal information.
Withdrawal of Consent — withdraw consent to our processing of your personal information at any time by contacting privacy@healthmatch.io. This may affect our ability to provide trial matching services.
Breach Notification — if we experience a breach of your personal information that creates a real risk of significant harm, we will notify you and the relevant supervisory authority as required by applicable law.
Portability — receive your personal information in a structured, machine-readable format and have it transmitted to another organisation where technically feasible.
Deindexation — request that we cease disseminating personal information about you where its dissemination causes you harm.
Automated Decision-Making — where a decision based solely on automated processing produces significant effects on you, you have the right to be informed and to request human review.
Separate Consent — we obtain your explicit consent separately for each purpose for which we process your personal information.
HealthMatch United States Inc. operates the Platform for Canadian users and stores your personal information, including health information, in the United States. HealthMatch Pty Ltd, a company in the same group, accesses it from Australia on HealthMatch United States Inc.'s behalf to operate and support the Platform, assess your eligibility for clinical trials and provide patient support. If you live in Quebec, this means your personal information is communicated outside Quebec.
Our service providers, such as providers of hosting, messaging, telephony (including call recording and transcription) and analytics, may also process your personal information in the United States or other countries on our behalf. We require them by contract to use it only to provide their services to us.
While your personal information is outside Canada, it is subject to the laws of the country where it is held, and courts, law enforcement and national security authorities in that country may be able to access it.
To ask about how we and our service providers handle your personal information outside Canada, contact privacy@healthmatch.io.
Our person in charge of the protection of personal information is Tate Stubbs, contactable at tate@healthmatch.io.
We protect personal information with the security measures described in the Data Security section of our Privacy Notice, and keep it only for the periods described in its Data Retention section. When we no longer need personal information, we destroy it or anonymise it.
Email privacy@healthmatch.io. We will verify your identity and respond within 30 days.
To make a complaint about how we handle your personal information, email privacy@healthmatch.io. We will review your complaint and respond in writing within 30 days. If you are not satisfied with our response, you can also contact the privacy regulator for your province:
Federal and most provinces: Office of the Privacy Commissioner of Canada
Quebec: Commission d'accès à l'information
British Columbia: OIPC BC
Alberta: OIPC Alberta