Privacy Policy

Table of Contents

    Introduction

    Virani NP Services (“ViraniNPS”, “we”, “us”) offers two kinds of services: Healthcare Services and optional Wellness Services. When you register with ViraniNPS as a User, you become eligible to use our Healthcare Services. You also become eligible to sign up separately for one or more of our Wellness Services, should you wish to.

    Please read this Privacy Policy carefully. It describes how ViraniNPS will collect, use, store, disclose and protect your information in relation to our Healthcare Services and our Wellness Services.

    Definitions

    The following provides the meaning of certain terms used in this Policy. If not defined below, the capitalized words and phrases in this Policy have the same meaning as in ViraniNPS’s Terms of Use.

    “Virani NP Services” or “ViraniNPS” means, collectively, the hardware, software, applications, websites, Content, products and services owned and/or operated by us to enable the provision of remote Healthcare Services to Users, among other purposes.

    “Information” means, collectively, “Personal Information” (information about an identifiable User as further defined in Applicable Law) and “Personal Health Information” or “PHI” (information about an identifiable User’s health or healthcare as further defined in Applicable Law).

    A “User” is an individual registered to use the ViraniNPS Platform, including, unless otherwise specified, as part of a customized program provided by a third party. Unless we make a distinction, “Users” means all Users.

    Health professionals (“Authorized Providers”) are, collectively, “Authorized Physicians” (physicians registered to practice medicine in a province or territory of Canada) and “Authorized Non-Physician Providers” (regulated health professionals other than physicians registered to practice in a province or territory of Canada) who are registered to use the ViraniNPS Platform to provide “Healthcare Services” within their scope of practice to Users. An Authorized Provider provides Healthcare Services through a “Consultation,” which includes a review by the Authorized Provider to determine if the Healthcare Services requested by the Users are ones that can be provided on the ViraniNPS Platform.

    “Applicable Law,” in relation to ViraniNPS, Authorized Providers, or Users, means the laws and regulations, including privacy laws and regulations, to which each is subject.

    “Content” means general information about health-related topics posted on the ViraniNPS Platform, access to which is not the delivery of Healthcare Services and does not replace and cannot be relied upon as Healthcare Services.

    Your Agreement with ViraniNPS

    If you are an Authorized Provider, your arrangement with ViraniNPS – your rights and obligations and those of ViraniNPS - is set out in the agreement between you and ViraniNPS or, if you are providing Healthcare Services on behalf of a third party organization that has contracted with ViraniNPS, in the agreement between you and the third party organization with which you are associated.

    If you are a User, the arrangement between you and ViraniNPS – your rights and obligations and those of ViraniNPS – is set out in the Terms of Use and, where applicable, supplementary Terms.

    Application of this Policy

    This Policy describes ViraniNPS’s management of Information, including the purposes for which we collect, use and disclose Information and the safeguards we use to protect Information. This Policy does not apply to the collection, use, retention, disposal, destruction, or protection of Information by Authorized Providers through the ViraniNPS Platform. The Authorized Providers who provide care to Users through the ViraniNPS Platform are responsible at law for the Information that they collect, use, disclose, and store via the ViraniNPS Platform. Please direct any questions you may have about how an Authorized Provider will treat your Information to the Authorized Provider.

    The ViraniNPS Platform and How ViraniNPS Collects and Uses Information

    The following is an overview of how the ViraniNPS Platform generally functions and how ViraniNPS collects and uses Information. The details of how the ViraniNPS Platform functions may vary by Consultation and Authorized Provider.

    Healthcare Services

    Authorized Providers collect Information about you (or any Registered Dependent, as defined below) that you provide before or during a Consultation. They may collect this Information in different ways, including through discussions with you during the Consultation, via text messages with you before the Consultation, or when you enter or upload Information to the ViraniNPS Platform before the Consultation. Authorized Providers also have access to other Information about you through the ViraniNPS Platform. This includes Information that you provide in your consultation request; Information you’ve entered or uploaded to profiles and medical records; Information created during your earlier interactions through the ViraniNPS Platform with other Authorized Providers; the name, email address, phone number, gender identity, date of birth and province/territory that you provided when you registered with ViraniNPS; and your emergency contact’s name and contact information (if you have chosen to add an emergency contact to your account). Authorized Providers use this Information to provide you with Healthcare Services. As noted above, they must comply with the privacy legislation and medical record-keeping obligations to which they are subject. Authorized Providers may create Information in the ViraniNPS Platform, such as prescriptions, sick notes and notes about your Consultation. They may export or print copies of your Information.

    Authorized Providers may, but are not required to, email or text your emergency contact if they believe that you are presenting with a healthcare emergency. You are responsible for advising your emergency contact that you are providing their name and contact information to ViraniNPS and Authorized Providers, and for obtaining any necessary consent from your emergency contact for the provision and use of that information in connection with the ViraniNPS Platform.

    Wellness Services

    You have the option to sign up to receive Wellness Services from ViraniNPS, such as our Recommendations service, which sends you preventative health recommendations based on your health profile. If you sign up to receive one or more of our Wellness Services, you will be invited to provide Information about yourself (or any Registered Dependent) as part of your ViraniNPS Health Profile. This may include, for example, Information about your health and wellness interests, your demographic data, and your health history. ViraniNPS will collect this Information and use it to provide you with any Wellness Services for which you sign up. The data created through your use of our Wellness Services is used to further enhance and tailor your experience by suggesting similar Wellness Services to you that you may be interested in. For example, if a User who chooses to receive a Wellness Service related to dermatology, we may recommend other dermatology-related Wellness Services to them.

    Other Services

    ViraniNPS provides services that support the provision of Healthcare Services. These services may include receiving, reviewing, and scanning or otherwise uploading laboratory test results to the ViraniNPS Platform; faxing prescriptions to pharmacies; obtaining referrals for consultations with specialists; and collecting Information required for scheduled appointments (such as health card numbers or information from referral letters). ViraniNPS provides some of these services to Authorized Providers (for example, the receipt and preliminary review of laboratory results) and some to Users (for example, faxing prescriptions and arranging referral to specialists). These services require the use of Information.

    ViraniNPS may also provide services through the ViraniNPS Platform that are healthcare-related but not Healthcare Services (such as navigational services to assist you to access Healthcare Services on the ViraniNPS Platform). Unless otherwise advised, ViraniNPS Personnel will deliver these services. ViraniNPS Personnel receive privacy and security training and commit to complying with ViraniNPS’s obligations in connection with Information, as described below in the section on Safeguarding Information.

    Other Collections and Uses of Information

    ViraniNPS uses Information to the extent necessary to develop, evaluate, improve, provide, and support the ViraniNPS Platform and its various services. We may also use Information for loss prevention, to prevent fraud, and to comply with legal requirements. We do not collect or use Information if non-identifying information will suffice. We do not record the audio or video portions of Consultations.

    For more information about how ViraniNPS collects and Uses Information when you create your ViraniNPS account, use our Healthcare Services, and use our Wellness Services, please see the respective section of this policy.

    Third party service providers

    ViraniNPS uses third-party software and service providers for a variety of services, such technical, operational, and marketing services. For example, our live User support chat (through which Users may get troubleshooting and related technical assistance) is provided through a third party service provider. We require our third party service providers to limit their use of Information to what is necessary for their services. We also require them to have security measures in place that are appropriate for the protection of Information. Some of our service providers operate from outside of Canada, which means that Information they use to provide their services to us will be subject to the laws of other jurisdictions and may be available to foreign government authorities under lawful orders and laws applicable in those jurisdictions.

    Third party payers

    As described in the ViraniNPS Platform Terms of Use, by authorizing someone else (a “Third Party Payer”) to pay the Fees and/or Membership Fees for your Healthcare Services or Wellness Services, you are representing to ViraniNPS, and ViraniNPS will rely on your representation, that you consent to ViraniNPS:

    1. Using the email address provided to us by the Third Party Payer to communicate with you regarding the ViraniNPS Platform and Healthcare Services or Wellness Services;

    2. Disclosing to the Third Party Payer that you have requested Healthcare Services or Wellness Services, to permit ViraniNPS to process payment for the Healthcare Services or Wellness Services; and

    3. Notifying the Third Party Payer of any changes to or termination of your access to the ViraniNPS Platform.

    If you have questions about the Information shared between us and Third Party Payers, please contact us as indicated below.

    ViraniNPS‘s dislosure of information

    Emergency contacts. We may disclose Information to emergency contacts as described above.

    Third parties, on consent. We may disclose Information to third parties with User consent. For instance, we may disclose Information to the extent needed to an insurer or other Third Party Payer for the purpose of facilitating payments and benefits plans.

    Compliance, Fraud Prevention. We disclose Information to the extent required to comply with Applicable Law, including to respond to a subpoena, order, or similar obligation to produce information; and to establish or exercise ViraniNPS’ legal rights, including to defend against legal claims and to detect, investigate, suppress, prevent or take action regarding illegal or prohibited activities, such as suspected fraud and threats to the reputation or safety of any person.

    Business transactions. We may disclose Information for the purposes of conducting required due diligence or the completion of a business transaction such as a merger, acquisition or asset sale. We will comply with any applicable legal requirements, including agreements and notice requirements that apply to the disclosure of Information for such transactions.

    ViraniNPS‘s retention/deletion of information

    Unless we notify you otherwise, we will retain your Information on the ViraniNPS Platform until you (or ViraniNPS) close your Account. On termination, for a limited time, you will be able to print or copy your Information held in the ViraniNPS Platform, except for any private notes of Authorized Providers. Any request for access to an Authorized Provider’s notes should be made directly to the Authorized Provider outside of the ViraniNPS Platform. If you are having trouble finding the provider you consulted with, our Customer Support team may be able to help. Please contact us directly at info@viraninps.ca.

    After the time period during which you may print or copy your Information has ended, we will securely delete the Information associated with your Account, except for any Information that ViraniNPS is required to retain under Applicable Law or Information required by an Authorized Provider in connection with Healthcare Services. ViraniNPS will delete the latter once the Authorized Provider makes a copy of the Information or terminates their account with ViraniNPS. When Information is deleted, it is removed from our active database. Any Information that remains in our backup is securely stored and isolated from any further processing until deletion is possible.

    Accessing and correcting information

    You can access your Information or that of your Registered Dependents by logging in to your Account at https://viraninps.juvonno.com/plogin.php.

    You may update or otherwise correct your Information at any time, except Information that an Authorized Provider has viewed or created. Any request to update or correct Information that an Authorized Provider has viewed or created should be made directly to the Authorized Provider outside of the ViraniNPS Platform.

    Privacy Settings

    The ViraniNPS Platform enables you to make choices to enhance the protection of your privacy. For example:

    • You may enable two-factor authentication on your Account to help prevent unauthorized access. If you enable two-factor authentication, then to log into your Account, in addition to entering your password, you will have to enter a code that we send separately to your mobile number. This added security means that a third party would need both your login information and your mobile phone to access your Account.

    • You have the option of using audio, chat, or video for your Consultations.

    • When requesting a Consultation, you may choose to withhold Information, for example Information contained in your healthcare records, from the Authorized Provider. Please be aware that Authorized Providers may be unable to provide you with Healthcare Services as a result. They will advise you of the implications of your choice.

    • You may choose whether to receive communications from ViraniNPS by email or SMS.

    • You can check your login history when you access the ViraniNPS Platform.

    Please contact us directly at info@viraninps.ca if you require assistance with these options or more generally have questions about how to use the ViraniNPS Platform. To protect your privacy, we may request information to verify your identity when you contact us.

    Safeguarding Information

    We permit ViraniNPS personnel (“Personnel,” which includes our employees, contractors and subcontractors) to access Information only to the extent necessary to perform their designated functions. We require Personnel to complete privacy and security training and to commit to protecting Information by complying with our policies, procedures and Applicable Law.

    We store your information in electronic format within Canada, using computer systems with restricted access and that are housed in facilities using physical security measures.

    More generally, we have in place appropriate physical, technological, and organizational safeguards, including access controls, to protect Information against loss, theft, and unauthorized access, use and disclosure. Notwithstanding the safeguards we employ and our commitment to protecting Information, we cannot guarantee the security or error-free transmission or storage of Information. There are risks inherent in the use of electronic means to transmit and hold information in electronic format. These risks can be minimized but not eliminated by the use of appropriate security measures, such as the measures ViraniNPS employs. These risks include interception, loss, corruption, unauthorized access to, use and disclosure of Information, and delay in the availability of Information.

    You play an important role in protecting and the privacy of your Information. We ask you to do the following.

    • Create a strong and unique password for your Account using ViraniNPS’s password strength estimator and update your password periodically.

    • Do not share your Account or password with anyone. We will never ask you for your password, including in any unsolicited communication such as letters, phone calls or email messages, so please do not provide it and contact us if you receive such a request.

    • Log out of your Account as soon as you finish using it, especially if you share the device you use to access the ViraniNPS Platform with anyone else.

    • Password-protect your device with a strong and unique password.

    • Choose a quiet, private location from which to receive Healthcare Services.

    ViraniNPS‘s collection and use of non-Identifiable Data

    ViraniNPS obtains the authorization of Authorized Providers to collect and use non-identifiable data about their use of the ViraniNPS Platform (“Data”). This may include, for example, non-identifiable information about the number of consults carried out by Authorized Providers on the ViraniNPS Platform or the symptoms most commonly treated by Authorized Providers using the ViraniNPS Platform. ViraniNPS may use Data to monitor the compliance of Users and Authorized Providers with the ViraniNPS Platform terms of use, to make the use of the ViraniNPS Platform more accessible and enhance the ViraniNPS Platform experience for Users and Authorized Providers, and to design optional surveys for Users. We may also use or disclose Data for internal product development purposes or for duly approved research projects. We will not use Data to re-identify Users or for any other purpose prohibited by Applicable Law.

    Cookies and similar technologies

    The ViraniNPS Platform and ViraniNPS’s email messages and marketing materials use “cookies” and other technologies such as pixel tags and web beacons. We use these technologies to better understand the use of the ViraniNPS Platform, analyze trends, and administer, personalize and improve the ViraniNPS Platform user experience for Users and Authorized Providers.

    Links to third party websites

    The ViraniNPS Platform may contain links to websites that we do not own or operate. The provision of these links is not an endorsement of or referral to the linked websites. We provide the links solely for your convenience. We strongly encourage you to review the privacy policies and terms of use applicable to any website you visit. This Policy does not apply to linked sites or pages and we are not responsible for the content or privacy practices applicable to them or used by their operators.

    Amendments to this Policy

    ViraniNPS last updated this Privacy Policy (“Policy”) on March 20th, 2024. We post the current version of the Policy at www.viraninps.ca/privacy. We reserve the right to amend the Policy at any time to account for changes in Applicable Law, our practices and the ViraniNPS Platform. Please check to see if we have amended the Policy since you last used the ViraniNPS Platform to ensure you are aware of (and agree to) our current privacy practices.

    More information on how we collect and use your information

    The following text gives you more information on how and for what purposes ViraniNPS collects and uses Information when Users create their ViraniNPS accounts, use ViraniNPS’s Healthcare Services, or use ViraniNPS’s Wellness Services.

    When you create your ViraniNPS Account:

    First and Last Name

    ViraniNPS will collect, use, and store your first and last name to create your ViraniNPS account, personalize your experience within the ViraniNPS Platform, contact you via email, and provide you with personalized customer support. ViraniNPS may also provide your first and last name to a Third Party Payer if applicable (see below).

    Email Address

    ViraniNPS will collect, use, and store your email address to create your ViraniNPS account and authenticate you during future visits.

    We use your email address to send you service announcements, including information about our latest products and updates to our policies, Terms of Use and software (“Essential Communications”).

    We use your email address to send you newsletters or information about upcoming events that we believe may be of interest or apply to you (“Non-Essential Communications”). You may opt-out of receiving Non-Essential Communications at any time by logging into your User Account and updating your preferences.

    We use your email address to contact you via email and provide you with personalized customer support. We may also provide your email address to a Third Party Payer if applicable (see below).

    Date of Birth

    ViraniNPS will collect, use, and store your date of birth to confirm your eligibility to use the ViraniNPS Platform.

    Province of Residence

    ViraniNPS will collect, use, and store your province or territory of residence to confirm your eligibility to use the ViraniNPS Platform.

    Phone Number

    ViraniNPS will collect, use, and store your phone number to create your ViraniNPS account and contact you via SMS.

    Technical Information, such as:

    • IP address

    • Device information

    • Browser information

    • Click IDs

    ViraniNPS will collect, use, and store technical information for security purposes, such as monitoring for malicious activity, displaying recent login activity in your account settings, improving the ViraniNPS Platform, and understanding and enhancing the user experience on the ViraniNPS Platform.

    Healthcare Services:

    Sex Assigned at Birth

    ViraniNPS will collect and store your sex assigned at birth on behalf of your Authorized Providers, who require this Information to provide you with Healthcare Services.

    Gender Identity

    If you choose to provide your gender identity, ViraniNPS will collect and store this information on behalf of your Authorized Providers, who will use this Information to provide you with Healthcare Services.

    Provincial Health Number

    If you receive Healthcare Services that are insured by your provincial health plan, ViraniNPS will collect and store your provincial health number on behalf of your Authorized Providers, and disclose the number to your provincial health plan for the purpose of billing for insured services on behalf of your Authorized Providers.

    Health Profile

    If you choose to fill out your ViraniNPS Profile, you will provide, and ViraniNPS will collect and store on behalf of your Authorized Providers, Information such as your height, weight, allergies, or medical records (these could be records that you create or that are created by your Authorized Providers). Your Authorized Providers will use this information to provide you with Healthcare Services.

    Requests for Healthcare Services, which will include:

    • The reason for the request, such as your symptoms, or your need for a prescription renewal or sick note

    • Your age, sex assigned at birth, and gender identity (if you have added your gender identity to your ViraniNPS account)

    and may include:

    • Your name

    • The name, age, sex assigned at birth, and gender of your Registered Dependent

    When you submit a request for Healthcare Services, we pass along some of the Information you provide in your request to your Authorized Provider, to enable them to determine whether your request is for Healthcare Services that they can deliver through the ViraniNPS Platform. The Information we pass along may include the reason for your request for Healthcare Services (such as your symptoms, or your need for a prescription renewal or sick note), your age, your gender identity (should you choose to provide it), and, in some cases, your name).

    If the Authorized Provider confirms that your request is eligible, we identify the Authorized Provider to you and send the Authorized Provider the Information in your request, your name, and, where applicable, the name of your Registered Dependent. Unless you have elected to withhold access to Information held in the ViraniNPS Platform about you (or your Registered Dependent), the Authorized Provider will also be able to view that Information, such as clinical records created during your previous Consultations and medical records you create.

    If, based on the Information provided, the reviewing Authorized Provider believes that you need emergency services, ViraniNPS reserves the right to use any of the contact information you have provided to contact you or your emergency contact, to inform you that an Authorized Provider has viewed and declined your request for a Consultation because your symptoms suggest you are experiencing a healthcare emergency.

    Medical Records Created by Authorized Providers

    If you receive Healthcare Services, we will store the records created during your Consultation so you and your Authorized Providers can access them in the future as needed.

    At your request, we will use this information to support your Healthcare Services, such as by faxing a prescription to a pharmacy. Depending on your request, this may require ViraniNPS to disclose the medical records to a third-party.

    Personal information of Registered Dependents, such as:

    • First and last name

    • Date of birth

    • Sex assigned at birth

    • Relationship to you

    If you choose to have a Registered Dependent on your ViraniNPS account, ViraniNPS will collect and store the Information of your Registered Dependents to confirm your eligibility to obtain Healthcare Services for your Registered Dependents, and their eligibility to receive Healthcare Services.

    Authorized Providers will also use this Information for the purpose of providing the Registered Dependent with Healthcare Services.

    Location Data Collected Through GPS technology

    ViraniNPS may collect and use location data collected through GPS technology to identify the province or territory in which you are located, to ensure that we connect you to an Authorized Provider that is licensed or authorized to provide services in your province or territory and, if applicable, to connect you to a pharmacy near you.

    Wellness Services

    In addition to receiving ViraniNPS’s Healthcare Services, you have the option to sign up to receive Wellness Services from ViraniNPS, such as our Recommendations service, which sends you preventative health recommendations based on your health profile. If you sign up for a Wellness Service, your Information will be used as described below. If you do not sign up for any Wellness Services, this chart does not apply to you.

    Health Profile

    If you sign up for our Wellness Services, ViraniNPS will use the Information you provided when you created your account, such as your age, and sex assigned at birth and any Information that you enter into your Health Profile, such as height, weight, allergies, and medication, to provide you with your Wellness Services.

    Information Created from Your Use of Healthcare Services

    If you sign up for any of our Wellness Services and choose to include Information from your use of Healthcare Services, such as your diagnosis and treatment details, in your Health Profile, ViraniNPS will use this Information to provide you with suggestions for similar Wellness Services that may be of interest to you.