Privacy Policy
This Privacy Policy explains how MedTech North collects, uses, discloses and protects personal information, and the choices and rights you have. It is written to align with Canada’s federal privacy law (PIPEDA) and applicable provincial privacy laws. If you submit a partner profile, please read this together with our Terms & Conditions.
1. Scope & the laws that apply
This policy applies to personal information that MedTech North (operated by MedTech North) collects through its website, its register-interest form, its ecosystem-partner application, and related communications. “Personal information” means information about an identifiable individual.
Depending on where you live, your personal information may be protected by:
- the federal Personal Information Protection and Electronic Documents Act (PIPEDA);
- provincial private-sector privacy laws where they apply, including Quebec’s Law 25 (the Act respecting the protection of personal information in the private sector), and Alberta’s and British Columbia’s Personal Information Protection Acts (PIPA); and
- Canada’s Anti-Spam Legislation (CASL), which governs the commercial electronic messages we may send you.
2. Accountability & our Privacy Officer
We are accountable for the personal information under our control. We have designated a Privacy Officer who is responsible for our compliance with this policy and with applicable privacy law. You can reach the Privacy Officer at privacy@medtechnorth.ca or by mail at Toronto, Ontario, Canada.
3. Personal information we collect
We collect only what we need for the purposes described below:
| When | What we collect |
|---|---|
| You register interest on our site | Your name, email address, the role/type you select, your organization, and any message you write, plus whether you consented to be contacted. |
| You apply to be listed as an ecosystem partner | The profile details you provide, including name, role/title, company or organization, services, location, biography and links, together with any images, videos, pitch decks or documents you upload. We also collect a private contact email for review and follow-up, and a record of the consents you gave. |
| You consent (proof of consent) | The version of the Terms you accepted, the date and time, the specific consents you gave (for example, to publication and to communications), and the IP address from which the consent was submitted, kept as evidence of consent. |
| You use the website | Limited technical data needed to deliver and secure the site (for example, IP address and basic request/log information handled by our hosting and infrastructure providers). |
We ask that you not submit sensitive personal information (such as health information about an identifiable individual) except the professional details needed for your Listing.
4. Why we collect it (purposes)
We identify our purposes at or before the time we collect. We use personal information to:
- review applications and curate the network;
- create, publish and maintain your public directory Listing (if approved);
- operate, secure, support and improve the website and its features;
- respond to enquiries and, where you consent, contact you about dinners, membership, events and related updates;
- broker introductions you request;
- keep records of consent; and
- comply with legal obligations and protect our legal rights and those of others.
If we ever want to use your personal information for a materially new purpose, we will identify it and, where required, seek your consent.
5. Consent & how you can withdraw it
We collect, use and disclose personal information with your consent, except where the law permits or requires otherwise. We seek consent that is meaningful, in a way that a reasonable person would understand what they are agreeing to.
- Publication of your Listing is done on the basis of your express, opt-in consent, because a Listing is public (see section 8).
- Commercial electronic messages (e.g., updates about dinners and events) are sent only where you give separate, express CASL consent. You can unsubscribe at any time using the link in any message or by contacting us.
- Adding you to our CRM (HubSpot) from the register-interest form happens only if you tick the consent box on that form.
You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us at privacy@medtechnorth.ca. Withdrawing consent may mean we can no longer publish your Listing or provide certain features. Withdrawal is not retroactive.
6. How we use & disclose information
We do not sell your personal information. We disclose it only as needed for the purposes above, including:
- Publicly, as part of your approved Listing (section 8);
- To service providers who process information on our behalf under contract (section 7);
- For introductions you ask us to make, with the relevant party;
- As required by law, or to establish, exercise or defend legal claims, or protect the rights, safety and security of MedTech North, our users or the public; and
- In a business transaction (such as a reorganization, financing or transfer of our business), subject to appropriate confidentiality protections.
7. Service providers & cross-border processing
We use trusted third-party service providers to run the platform. They are permitted to use personal information only to provide services to us and are bound by contractual confidentiality and security obligations. Some of these providers, or their infrastructure, are located outside Canada, including in the United States. As a result, your personal information may be stored or processed outside your province and outside Canada, and may be subject to the laws of those jurisdictions, including lawful access by their authorities.
| Provider | Purpose | Processing location |
|---|---|---|
| Supabase | Database, authentication and file/media storage for the platform. | May process and store data in the United States and other regions. |
| Resend | Sending transactional and notification email on our behalf. | May process data in the United States. |
| HubSpot | Customer-relationship management, for contacts who consent to be added. | May process and store data in the United States. |
| Vercel | Hosting and delivery of the website. | May process data in the United States and other regions. |
You may contact our Privacy Officer for more information about our practices for transferring personal information outside your province or Canada, and the safeguards we apply.
8. Public listings & search engines
A published Listing is public by design. The information and media in your Listing (other than fields we mark as private, such as your contact email) are visible to any visitor, appear in our public directory, and may be crawled and indexed by search engines such as Google and shown in search results. Please only include information you are comfortable making public. Even after we remove a Listing at your request, cached or archived copies held by search engines or third parties may persist and are outside our control; you may need to contact the search engine directly to request de-indexing.
9. Retention
We keep personal information only as long as necessary to fulfil the purposes for which it was collected, to maintain records of consent, or as required or permitted by law. When it is no longer needed, we take reasonable steps to securely delete or de-identify it. Consent and record-keeping information may be retained after a Listing is removed to evidence that consent was properly obtained.
10. Safeguards
We protect personal information with security safeguards appropriate to its sensitivity, including access controls, encryption in transit, restricted administrative access, and storage of private files in non-public buckets served only through short-lived, signed links. No method of transmission or storage is perfectly secure, but we work to protect your information and to address security incidents appropriately.
12. Your privacy rights
Subject to legal limits, you have the right to:
- Access the personal information we hold about you and be told how it has been used and to whom it has been disclosed;
- Correct information that is inaccurate or incomplete;
- Withdraw consent and ask us to stop using, or to remove, your information or Listing (see sections 5 and 8);
- Port or de-index: where provincial law provides, request a copy of certain information in a structured format, or that we cease disseminating information; and
- Complain to us and to a privacy regulator (see section 15).
To exercise any right, contact our Privacy Officer at privacy@medtechnorth.ca. We may need to verify your identity, and we will respond within the timeframes required by applicable law.
13. Children
The website and directory are intended for professionals and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps.
14. Changes to this policy
We may update this policy from time to time. The effective date and version at the top reflect the current version. Material changes will be communicated by appropriate means. Your continued use of the website after changes take effect constitutes acceptance of the updated policy.
15. Contact & how to complain
If you have a question, request or concern about your privacy, please contact our Privacy Officer first so we can try to resolve it:
MedTech North, Privacy Officer
Email: privacy@medtechnorth.ca
Toronto, Ontario, Canada
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the privacy regulator in your province, for example the Commission d’accès à l’information (Quebec), or the Office of the Information and Privacy Commissioner in Alberta or British Columbia, where they have jurisdiction.
Read the Terms & Conditions →