MyHealthAccess Privacy

Updated: September 2, 2026

WELLSTAR ("us", "we", or "our") operates the www.myhealthaccess.ca website (hereinafter referred to as the "Website") and provides applications and solutions for healthcare providers (Services). We are committed to protecting your personal information and complying with applicable data protection and privacy laws. This “Privacy Policy” tells you how we do so.

Our privacy practices are based on British Columbia's Personal Information Protection Act (PIPA), and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and ten internationally recognized privacy principles.

By checking "I agree" to the Privacy Policy when registering for an account to use any of the Services, as defined below, either through the MyHealthAccess website or downloaded app (jointed referred to herein as "Application"), you acknowledge that you have read, understood and agree to comply with and be bound by the terms and conditions of this Policy for as long as you continue to use the Services. If you do not agree with the Policy, do not use this Application.

When we say "you", "member", "client" or "user" we are referring to the person using the Application. When we say "Healthcare Provider", we are referring to authorized healthcare professionals who have access to a connected provider account on the Application that has entered into a contract to utilize MyHealthAccess.

MyHealthAccess is a platform accessed via web browser or a downloaded app that (1) allows patients to book appointments with their Healthcare Provider and manage their schedule; (2) enables patients to receive appointment reminders via email and/or text message; (3) provides the opportunity for Healthcare Providers to conduct virtual medical appointment with patients via video feed, audio and chat functionalities; (4) permits upload of a user's own health information; and (5) collects demographic and health information for use in primary healthcare and business analytics

The Application is intended for persons thirteen (13) years or older. Persons under the age of thirteen (13) should not access, use and/or browse the Application or the Services.

We will update this Privacy Policy as necessary. Please check it regularly.

What information do we collect?
Personal Information

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Information"). Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Cookies and Usage Data

In order to book an appointment with a clinic, we may also collect your birth date and Personal Health Number. Within the portal, you can provide additional information in your "Patient Profile", however, additional details are up to you to decide to provide. As the Application will be securely connected to your Healthcare Provider's EMR, we may collect information from the EMR or send information you provide to the EMR. We will use this information to tailor your experience with the Services provided by the Application, connect you to your Healthcare Provider and their clinic, and allow for you to book appointments and upload health information to the platform.

Patient Information

Through the Services, MyHealthAccess collects Patient Information in three ways:

  • User Account: The information you provide in your user account and any additional information you decide to upload to your account, such as health monitoring information, will be visible to you and your Healthcare Provider. Your Personal Information and information related to your use of the Services may be become a part of your electronic patient record at your Healthcare Provider’s clinic.
  • Appointment Booking: Your appointment booking details, will be available to you and your Healthcare Provider.
  • Virtual Appointments: The video and audio feed from your virtual appointment will only be visible and available to you and your Healthcare Provider. Should you decide to engage in the Application’s Chat Function, which allows you and your Healthcare Provider to send instant messages during your virtual appointment, the chat will only be visible to you and your Healthcare Provider. As soon as your appointment session is closed, the video and audio are deleted and will not be maintained or stored.

All the Patient Information that we collect will be handled in accordance with this Privacy Policy.

Usage Data

We may collect information on how MyHealthAccess’s Services are accessed and used ("Usage Data"): this would include visitors to the MyHealthAccess Website, and healthcare provider users when accessing the Services. This Usage Data may include information such as the website visitor/ Service user’s computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that the user visits, the time and date of the visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking Cookies and Website Data

Unless you opt-out, the Website uses “Cookies” and other automatic data collection technologies with your consent to collect personal information whenever you visit or interact with the Website, including unique identifiers and preference information such as IP address, technical usage, browser type, time zone settings, language preferences, operating system, unique device identifiers, search history, page response times and length of visit, pages viewed, marketing preferences or navigation and clickstream behavior for online interactions.

These Cookies help us understand how you use the Website and interact with the content of the Website in order to make improvements. We also may use these Cookies to promote our services through marketing and advertising.

Some of the information mentioned above that are collected by Cookies can constitute personal information of the person visiting the website. You can opt out of Cookies or prevent third-party websites from accessing our Cookies through the privacy settings on your browser. However, opting out of our Cookies may disable some of the Website’s features, and may prevent us from providing you with the information and services you have requested.

Direct Marketing

If you sign up to receive direct marketing or promotional communications from WELLSTAR, we will collect your name, email and any other information you may provide to inform you about WELLSTAR products and services.

Why do we use personal information?
Patient Information collected and processed by the Services

Patient Information is used by the Services in the following ways:

  • To establish your user account.
  • To schedule your appointments and communicate them with you and your provider.
  • To host your virtual appointments with your provider.
Personal Information

WELLSTAR uses the collected Personal Information for various purposes:

  • To provide and maintain our Website and Services.
  • To notify you about changes to our Website and Services.
  • To allow you to participate in interactive features of our Services when you choose to do so.
  • To provide customer support.
Tracking Cookies and Website Data

WELLSTAR uses Tracking Cookies and Website Data:

  • To provide and maintain our Website.
  • To gather analysis or valuable information so that we can improve our Website.
  • To monitor the usage of our Website.
  • To detect, prevent and address technical issues.
Consent

MyHealthAccess takes a consent-based approach to the collection, use and disclosure of Personal Information. Before receiving an invitation to the Services, we collect your explicit consent and provide you with information about the Services and how we collect, use and disclose your Personal Information. Your consent is for your information being collected, used, disclosed and stored by us, only as described in this Privacy Policy. At any time and without penalty, you can withdraw your consent and close your MyHealthAccess account through the “Deactivate Account” tab located within your account profile and email privacy@well.company requesting destruction of your information.

Who do we share the personal information with?
Patient Information collected and processed by the Services

WELLSTAR may share Patient Information with entities that provide services to us where the entities are under contract to process on our behalf. Our service providers are permitted to use Patient Information only on our instruction. Our contracts ensure they comply and do not use your personal information for their own purposes. They are also required to take appropriate measures to protect the Patient Information.

WELLSTAR will not disclose Patient Information to anyone else, except with your Healthcare Provider’s (the health information custodian responsible for your patient record) authorization or as required or permitted by law. We will never sell or rent Patient Information.

Personal Information Tracking Cookies and Website Data

We only share your personal information with service providers that we rely on to operate the Website and the Services. This includes sharing information for fraud prevention, payment processing and notifications, providing requested services or information, operating the Website and Services, and customer service.

We only use service providers who ensure a comparable level of protection for your personal information. Our contracts with our service providers ensure they comply with that obligation and do not use your personal information for their own purposes.

We may be required to disclose your personal information to law enforcement agencies if they demonstrate the legal authority to request it.

How does MyHealthAccess use artificial intelligence?

MyHealthAccess does not incorporate any AI tools at this time.

How long do we keep personal information for?
Patient Information

WELLSTAR will retain Patient Information only for as long as necessary to fulfill the purposes for which it was collected, unless otherwise permitted or required by law.

At any time and without penalty, you can withdraw your consent and close your MyHealthAccess account through the "Deactivate Account" tab located within your account profile.

If you choose to close your account and withdraw from the Services, we will conduct the following:

  • Where Personal Information has been de-identified and aggregated, resulting datasets will be retained for business analytics purposes for the period of time needed for WELLSTAR to pursue legitimate business interests, conduct audits, comply with legal obligations, resolve disputes and enforce our agreements.
  • Where Personal Information exists, you will be required to email privacy@well.company requesting destruction of your information. To which, we will securely destroy your Personal Information in our possession and control within 30 days unless we are required to retain such Personal Information longer to fulfill our legal obligations, resolve disputes and enforce our agreements.
  • Where Personal Information is integrated into your electronic patient record at your Healthcare Provider's medical clinic:

    Data retention and destruction requirements will be performed in accordance with the clinic's privacy policies and procedures and legal obligations, and WELLSTAR does not retain any control or custody over the information that has been integrated into your electronic patient record.

How do we keep personal information accurate?

We take reasonable steps to ensure that personal information in our custody is accurate and up to date. However, we primarily rely on the healthcare practitioners to notify us of any changes to the information they have provided.

WELLSTAR relies on you to ensure that the Personal Information you provide to us while using the Services is as accurate, complete and up to date as necessary for the purposes for which it is to be used.

How do we protect your personal information?

WELLSTAR uses appropriate physical, administrative, and technical safeguards to protect Patient Information and Personal Information against loss, theft, and unauthorized access, disclosure, copying, use, disposal, and modification. These security measures include restricting access to Patient Information and Personal Information to authorized employees who need access in order to carry out their job functions, training our employees on their privacy obligations and requiring them to sign confidentiality agreements, and encrypting Patient Information and Personal Information while at rest and in transit.

Where do we store personal information?

In general, MyHealthAccess stores, accesses, and uses Personal Information from inside Canada.

Please note that Personal Information in the custody of these service providers may be subject to access by the law enforcement authorities of those jurisdictions in which the service providers are located.

If a service provider outside of Canada must be used to process Personal Information. Our Privacy Officer can provide further information about our policies and practices regarding service providers located outside of Canada and further information about how these service providers, collect, use, disclose or store personal information on WELLSTAR's behalf.

Openness

WELLSTAR makes clear and transparent notice of our privacy practices publicly available via this Privacy Policy. We will advise you at the first reasonable opportunity upon discovering or being advised of an incident where your Personal Information is lost, stolen, accessed, used, disclosed, copied, modified, or disposed of by unauthorized persons or in an unauthorized manner.

Individual Access

At any time, you can review, edit or request removal of information you have provided to WELLSTAR within the requirements as outlined in Disclosure and Retention of Information above. Upon written request, WELLSTAR will also provide you with a list of entities to whom we have disclosed your Personal information.

Children’s Privacy

WELLSTAR does not knowingly or intentionally collect Personal Information from users who are under the age of thirteen (13), to align with requirements set forth by the Office of the Privacy Commissioner of Canada, which requires consent to be obtained from parents or guardians for the collection, use and disclosure of the personal information of children under the age of 13.

Links to third-party sites

Our Website may direct you to third-party websites, including those that advertise other products or services. Those organizations are separate and distinct from WELLSTAR and have their own separate privacy policies. We are not responsible for how any third party collects, uses, or discloses your personal information. Therefore, it is essential to familiarize yourself with the privacy policies of these websites before providing your personal information to them.

Direct marketing

You may sign up to receive marketing or promotional communications from WELLSTAR. Where you have expressly consented, we may use your personal information to inform you about us and our products and our services, including promotional offers and events.

If you no longer wish to receive marketing or promotional communications from us, you can opt out at any time by:

  • using the unsubscribe feature found in our emails and other electronic communications, or
  • contacting us via email at privacy@well.company.

We will stop sending you marketing e-mails within seven (7) days of receiving your unsubscribe request.

Changes to this Privacy Policy

We may update this Policy to reflect changes to our information practices, but we will not reduce your rights under this Privacy Policy without your explicit consent. We'll post any changes to this page and, if the changes are significant, we will provide a more prominent notice (including email notification of Privacy Policy changes for certain Services). We will also keep prior versions of this Privacy Policy in an archive for your review.

We encourage you to periodically review our Privacy Policy for the latest information on our privacy practices and to contact us if you have any questions or concerns.

Contacting us

Any questions about your healthcare practitioner’s use of WELLSTAR’s product or services need to be directed to your healthcare provider.

Accountability with respect to your personal information is important to WELLSTAR. If you have any questions (including how WELLSTAR manages personal information), complaints or concerns about this Privacy Policy, or if you have reason to believe that we may have failed to adhere to it, please contact us by sending an email to privacy@well.company.

Questions regarding your rights and responsibilities under this Privacy Policy can be directed to our privacy officer at privacy@well.company.

If, after contacting us, you remain unsatisfied, you have the right to file a complaint with your local data protection authority.