Last Updated: September 18, 2026

‍
At Endor Health, we are committed to protecting your privacy and ensuring the confidentiality of your personal and health information. This Privacy Policy explains how Endor Health Inc. ("Endor Health," "we," "us," "our") collects, uses, discloses, and protects your personal information when you use our website, mobile app, and related services (together, the "Service") in Canada.

This Policy is drafted to align with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial health privacy legislation, including Ontario's Personal Health Information Protection Act (PHIPA), British Columbia's Personal Information Protection Act (PIPA BC), and Alberta's Personal Information Protection Act (PIPA AB) and Health Information Act (HIA).

‍

1. Definitions

• Authorized Healthcare Prescriber: A licensed healthcare professional (including a nurse practitioner, physician, or pharmacist) authorized to prescribe or provide care within their scope of practice.
• Care Provider / Prescriber Consult: A clinical interaction — synchronous or asynchronous — offered through the Service by a licensed nurse practitioner or other authorized healthcare professional, which may be provided free of charge or for a fee.
• Partner Pharmacy: An independently licensed pharmacy in British Columbia, Ontario, or Alberta that dispenses medications and provides pharmacy services to you. Endor Health is not a pharmacy and does not dispense medications.
• Personal Health Information (PHI): Information about your health, healthcare services, or payment for services that can identify you.
• Personal Information (PI): Information about you that can identify you, including PHI.

2. Application
This Policy applies to all users of the Endor Health website and app and to our pharmacy coordination, care provider consult, and payment services in British Columbia, Ontario, and Alberta.

Our role. Endor Health operates a technology platform that connects you with independently licensed Partner Pharmacies and Authorized Healthcare Prescribers. When you receive pharmacy services or a clinical consult:

• The Partner Pharmacy or the treating Authorized Healthcare Prescriber is the health information custodian (or equivalent) responsible for the PHI created in the course of your care, under the health privacy law of the province where care is delivered.
• Endor Health acts, for that clinical PHI, as an information manager / service provider / agent processing information on the custodian's behalf and under contract, and is independently responsible as an organization for the personal information it collects for its own purposes (such as account, billing, and platform data).

We contract with our Partner Pharmacies and prescribers to ensure PHI is handled in accordance with applicable health privacy law.

3. Information We Collect
We collect the minimum information necessary to:

• Create and manage your account and verify your identity.
• Coordinate pharmacy services with a Partner Pharmacy, including transmitting prescriptions and related information.
• Facilitate care provider and prescriber consults, and route them to an appropriate licensed provider.
• Process payments, including consult fees (where applicable) and deferred-payment / buy-now-pay-later ("BNPL") transactions.
• Contact you regarding your medications, consults, orders, and services.
• Improve, secure, and maintain our Service.

Depending on how you use the Service, the information we collect may include:

• Identity and contact data: name, date of birth, address, email, phone number, and (where required for pharmacy or clinical services) provincial health card or insurance details.
• Health information: information you provide during intake or a consult, prescription information, and information from your Partner Pharmacy or prescriber relevant to your care.
• Consult records: information generated during a care provider or prescriber consult. We do not record audio or video of consultations.
• Payment and transaction data: billing details, order history, insurance/adjudication information, and, for BNPL transactions, the limited information our payment and BNPL service providers require to process your instalments (see Section 6).
• Technical and usage data: device, log, cookie, and analytics data (see Section 13).

4. Consent
We collect, use, and disclose your information only with your consent, which may be express or implied depending on the sensitivity of the information and the circumstances. For health information used to provide care, we generally rely on your knowledgeable consent within your circle of care.

You may withdraw your consent at any time, subject to legal and contractual obligations and to limits on withdrawing consent where we or a Partner Pharmacy must retain information to meet regulatory recordkeeping duties.

5. Use and Disclosure of Information
We use and disclose your information to:

• Coordinate and provide pharmacy services through a Partner Pharmacy in your province.
• Facilitate care provider and prescriber consults with Authorized Healthcare Prescribers, including sharing intake information with the provider delivering your consult.
• Process payments and, where you choose it, deferred-payment / BNPL transactions.
• Communicate with your authorized healthcare providers and within your circle of care.
• Comply with legal, regulatory, professional, and pharmacy recordkeeping requirements.
• Conduct quality assurance and improve the Service.

Consult fees and independence of clinical judgment. Where a consult is offered for a fee, that fee is for the professional service and does not depend on whether any product is purchased or any prescription is issued or filled. We do not share consult fees with, or pay or receive referral or per-prescription inducements from, Partner Pharmacies in a manner prohibited by applicable pharmacy or health-professional regulation. Clinical decisions are made by the treating provider based on your care, not on any purchase.

Service providers. We may disclose information to third-party service providers (e.g., IT and cloud hosting, communications, analytics, payment processors, and BNPL providers) who assist us in delivering the Service and who are bound by contract to protect your information and use it only for the purposes we specify.

Cross-border processing. Some service providers may be located outside Canada (including the United States). Where that is the case, your information may be subject to the laws of, and accessible to authorities in, those jurisdictions. We use contractual, technical, and organizational measures to protect your information wherever it is processed, and we identify our use of foreign-based providers as required by BC PIPA and other applicable law.

We do not sell your personal information.

6. Buy-Now-Pay-Later (Deferred Payment)
If you choose a deferred-payment / BNPL option at checkout, we collect and process the information needed to offer and administer that option, and we share the limited information required with our payment and BNPL service provider(s) to set up and collect your instalments. The applicable payment terms, schedule, and any fees are disclosed to you at checkout and in the separate deferred-payment terms that apply to that transaction. Your use of a BNPL option is also subject to the privacy practices of the relevant payment/BNPL provider.

7. Retention and Deletion
We retain PHI for at least 10 years from the date of last service, or longer where required by applicable provincial health privacy or pharmacy legislation (retention periods and custodianship for clinical records may rest with the Partner Pharmacy or prescriber). For records relating to a minor, retention periods may run from the age of majority as required by law.

Non-health personal information (including account and transaction data) is retained only as long as necessary for the purposes described, or as required by tax, consumer-protection, and other applicable law. When no longer required, your information is securely destroyed or anonymized.

8. Minors
Our Service is intended for individuals capable of providing valid consent for healthcare and for entering into a transaction in their province of residence. Where a minor uses our Service, we may require parental or guardian consent, unless the minor is capable of consenting under applicable provincial law. Deferred-payment / BNPL options are available only to users who have reached the age of majority in their province or territory.

9. Safeguards
We implement physical, technical, and organizational safeguards to protect your information against unauthorized access, use, disclosure, or loss, appropriate to the sensitivity of the information.

10. Breach Notification
If a breach of security safeguards occurs that poses a real risk of significant harm to you, we will notify you and the relevant privacy commissioner(s) as required by applicable law, and will support any notification obligations of a Partner Pharmacy or prescriber acting as custodian.

11. Your Rights
Subject to applicable law, you have the right to:

• Access and request correction of your personal information.
• Withdraw consent (subject to legal, regulatory, and contractual limits).
• Ask questions or make a complaint about our handling of your information.

Where PHI is held by a Partner Pharmacy or prescriber as custodian, we will help direct access or correction requests to the right party. You may also file a complaint with the federal Office of the Privacy Commissioner of Canada or the Information and Privacy Commissioner in Ontario, British Columbia, or Alberta.

12. Automated Decision-Making
We do not use automated decision-making or profiling that has a significant effect on you without your knowledge. Clinical decisions are made by licensed providers. If such tools are introduced in the future, we will inform you and allow you to request human review as required by law.

13. Cookies, Analytics, and Third-Party Advertising
We use cookies and similar technologies for functionality, analytics, and limited marketing purposes. We may use third-party analytics and advertising partners who may collect de-identified or aggregated information. You can opt out of non-essential cookies and tracking through your browser settings or the opt-out links we provide. We do not use health information you provide for advertising.

14. Changes to This Policy
We may update this Policy from time to time to reflect legal or operational changes. Updates will be posted on our website or app with a revised effective date. Material changes will be communicated as required by applicable law.

15. Contact Us
If you have any questions, concerns, or complaints about this Policy or our practices, please contact our Privacy Officer:
📧 Email: support@endorhealth.com
📬 Mail: Endor Health Privacy Officer, 1A Fenwick Ave., Toronto ON M4K 3H2

Endor Health does not manufacture drugs or operate as a pharmacy. Pharmacy services are provided by independently licensed Partner Pharmacies in British Columbia, Ontario, and Alberta.

‍