Pillway is a Brand of Simpill Health Group Inc.
Welcome to Simpill Health Group Inc. dba Pillway Pharmacy (“Pillway”, “we”, “us”, “our”) provides virtual pharmacy services. Outside of Quebec, Pillway provides both Fulfillment Services (which means fulfillment and delivery of prescriptions) and pharmacy services through our website, www.pillway.com (the “Website”) and through our proprietary platform (the “Platform”, together with the Fulfillment Services, the “Services”). Our Services provide patients convenient access to medications through our Platform. We fill prescriptions from our central fill locations in either Ontario or British Columbia, as applicable. We are committed to protecting your personal information and complying with applicable data protection and privacy laws, and this Privacy Policy tells you how we do so. Simpill complies with Canadian Federal and Provincial privacy laws and regulations, including the Personal Health Information Protection Act (PHIPA ON), the Personal Information Protection and Electronic Documents Act (PIPEDA), and the Personal Information Protection Act (PIPA BC). In Quebec, Pillway is an independent provider that offers the secure Lumino Health platform (Secure Platform). This Secure Platform allows you to interact with healthcare professionals such as pharmacists associated with Pharmacie Abd-El-Monem Osman, Inc. and receive independent professional services such as prescription fulfillment and other pharmacy services.
This Privacy Policy describes the types of personal information we collect, how we use it, and how we protect your personal information when providing you with the Service or when you access our website, www.pillway.com (the “Website”). Simpill reserves the right to change, add, remove, or modify sections of this Privacy Policy or the Website at any time. Changes will be effective immediately on the date that appears on the revised policy. Any notices regarding any changes to this Privacy Policy will be indicated on our website. If any changes to this Privacy Policy are significant, we will provide you with more prominent notice (including email notifications).
What information do we collect?
We collect personal information such as name, age, gender, phone number, email address, shipping address, provincial health card details (or image of card), credit card details (or image of card), insurance details (or image of card), prescription information and any other necessary information required to deliver medication through either the Platform or the Secure Platform. We also collect optional medical and health-related information to serve you better and share with the pharmacist and healthcare team that you may provide at your sole discretion. Further, we collect non-personally identifiable information, including but not limited to medication, adherence statistics and location data when you use our Platform or the Secure Platform. We may also collect additional information such as IP address, device identifiers, online identifiers, unique identifiers, access dates and times, crash logs, device event information, cookie data, or other similar identifiers, geo-location data if enabled on your device, usage information, inferences drawn from compiled data and customer profiles, payment transaction information, and cookies.
Access and disclosure:
We only allow access and disclosure of personal information as permitted by applicable laws and regulations.
Other types of information we collect:
We also collect identifiers such as IP address, device identifiers, online identifiers, unique identifiers, access dates and times, crash logs, device event information, cookie data, or other similar identifiers, geo-location data if enabled on your device, usage information, inferences drawn from compiled data and customer profiles, payment transaction information, and cookies when you use the Services or the Secure Platform. We use cookies to track your interests and recognize you as a returning visitor. Please note that disabling cookies may affect certain features of our website. We may also record your IP address, which contains no personally identifiable information.
How we use your personal information:
We use your personal information to comply with legal or regulatory obligations, ensure the security of a service, or prevent fraud. In compliance with applicable privacy legislation across Canada, including provincial health information laws and the Personal Information Protection and Electronic Documents Act (PIPEDA), we may aggregate and anonymize Personal Health Information (PHI) and other data stored on our system. Aggregated and anonymized PHI may be used by us or our strategic partners to improve our services, conduct research, or provide insights into healthcare trends. This data will not identify any individual and will be handled in accordance with all applicable laws and regulations.
How we share personal information:
We may disclose personally identifiable information to various third parties under the following circumstances: to parties who we engage on your behalf to provide you the Services or the Secure Platform including but not limited to credit card processing, messaging and push notifications, insurance plan and delivery services, and if you book an appointment on the platform, you authorize Pillway to share the necessary personal health information to book the appointment with our virtual care partners. Users can sign up and log in to the Platform or the Secure Platform by linking third-party social accounts, Gmail, Facebook and Apple, and we may use certain personal information provided to us from linked services to create your personal Pillway account (name, email, date of birth etc.). In addition, to use for the provision of the Services or the Secure Platform, Pillway may use aggregated, non-personally identifiable demographic information for the purposes of providing insight into the trends about the general use of our services and demographics of Canadian healthcare consumers. Pillway may share this information with its strategic partners, which are required to maintain the confidentiality, security, and integrity of the information they receive. We will ensure that these parties are bound by confidentiality obligations as necessary and are prohibited from using or disclosing your personal information for any purpose other than as needed to perform their services on our behalf or to comply with legal requirements.
Pillway will not allow third parties to access your personal information without consent except to provide you with the Services or the Secure Platform. Pillway will never sell the personal information of its users. Pillway will not allow access to the personal health information of any of its users to any third party without getting the users’ express consent, except where required by law or regulatory requirements. We will ensure that any third parties to whom we disclose personal information are bound by confidentiality obligations and are prohibited from using or disclosing your personal information for any purpose other than as needed to perform their services on our behalf, to comply with legal requirements or for additional purposes where your express consent is provided.
Consent to use personal information:
By using the Pillway app, website, pharmacy services, and/or the Secure Platform you consent to the collection and use of your personal information by Pillway in accordance with this Privacy Policy. We only collect the information you voluntarily provide us, except where otherwise permitted or required by law or regulatory requirements.
Your control and rights over personal information and withdrawing consent:
■ You have the right to withdraw your consent. Users can withdraw consent to provide personal information and may request the deletion of their data, by withdrawing consent users will no longer be eligible for pharmacy services, the Pillway team will support any medication requirements while the patient is transitioned to a new pharmacy provider. However, we will still have to retain records of services provided to you to comply with regulatory requirements. When you install the Pillway app for the first time, we will ask for your permission to access your phone camera and image gallery. We will use these services to share images of your prescription, insurance, or credit card information with the pharmacists and authorized third-party service providers.
■ We will seek additional consent from you if we collect, use or disclose personal information about you for purposes not otherwise described in this Privacy Policy.
■ You have the right to delete your data and account. To exercise your right to delete your data and account, you can either go into your profile settings on the app and select 'Delete Account' or contact us via the chat function on the Platform. Alternatively, you can contact us via phone or email. We may take up to 48 hours to process your request. We may still retain personal information to the extent necessary to comply with legal and regulatory requirements (for example, medical history, tax and audit purposes). We may also retain personal information to the extent necessary to protect against and prosecute malicious, illegal, and fraudulent activity.
■ You have the right to request access to your data or make corrections to your data. To request access to your data or to make corrections to your data, please email privacy@pillway.com; a request to modify your data may take up to 30 days to complete
Children’s privacy:
The Services are intended for adults, and we do not knowingly collect personal information from anyone under the age of 18. A legal parent/guardian of a child can request the child’s health records from Pillway and has the authority to update health records. If we discover that anyone under the age of 18 has provided us with their personal information, we will take all necessary steps to delete this information immediately.
How we protect your privacy:
Your privacy and security are of utmost importance to us, and we take measures to protect your personal information. We follow industry-standard security measures to encrypt your data, both when it is in motion and at rest. Your personal information may be stored on your device and transferred to our servers. While we take all necessary precautions to ensure the safety of your data, it is important to note that no method of transmission or storage is 100% secure. Microsoft Azure Canadian Datacenter, an enterprise-grade cloud computing platform, hosts our servers. You can read more about Microsoft Azure’s security standards here: https://www.microsoft.com/en-us/trustcenter/Security/AzureSecurity.
Pillway will notify you to the extent required by law of any breach that has resulted in the unauthorized access to, collection, use or disclosure of your personal information.
Password use:
Your Pillway account and personal information are protected by a password. Choose a robust and unique password and keep it confidential. Do not share your password with anyone; no Pillway nor Pharmacie Abd-El-Momen Inc. employee will ask for your password. If you believe your password has been compromised, reset it immediately.
How we will use your email:
We will contact you via email for notification purposes and to inform you of promotional offers that may interest you. Personal health information (PHI) and financial information will not be communicated via email. We will not share your personal information for marketing or advertising purposes without your consent, this may include consent provided to our healthcare partners. However, we may market or advertise from time to time. You can opt out of receiving marketing and promotional material at any time, and we will take all necessary steps to remove you from the mailing list. We have implemented this set of practices to comply with Canada’s Anti-Spam Legislation (CASL).
How long do we store your data
Pillway will store your data as long as is necessary to provide you with Pillway services or to comply with applicable laws.
How to contact us:
Can contact the Chief Privacy Officer via email privacy@pillway.com or the address below if:
■ You have questions that relate to the collection, use and disclosure of your personal information.
■ You want to withdraw your consent to the collection, use or disclosure of your personal information.
■ You have need to report any privacy violations including but not limited to: any real or suspected unauthorized access, use, disclosure or loss of your personal information.
■ If you wish to make a complaint regarding the handling of your personal information or this Privacy Policy in general.
Chief Privacy Officer
Simpill Health Group Inc.
19-3 Brewster Rd.
Brampton ON, L6T 5G9
The Privacy Policy was last updated on January 29, 2025.
