LEGAL

Drug Access Canada
Privacy Policy

Last modified: October 26, 2026

Introduction

Sentrex Health Solutions Inc. (“Sentrex,” “we,” “us” or “our”) operates the website located at https://drugaccess.ca/ under the name Drug Access Canada (the “Website”). Drug Access Canada is a trade name of Sentrex Health Solutions Inc. We respect your privacy and are committed to protecting it by complying with this policy and with applicable Canadian privacy law.

This policy describes:

  • The personal information we collect from and about the healthcare professionals and other users who visit the Website, register for an account, use the Enrollment Form Hub or the training modules, or contact us (“you”).
  • How we collect, use, disclose, protect and retain that information.
  • The choices you have, and how to access, correct or withdraw consent to the use of your information.

We will only use your personal information in accordance with this policy unless otherwise required by applicable law. We take steps to ensure that the personal information we collect about you is adequate, relevant, not excessive and used for limited purposes.

Privacy laws in Canada generally define “personal information” as any information about an identifiable individual. On this Website, that includes the professional details you give us when you register, such as your name, work email address, workplace and role. We treat that information as personal information and protect it under this policy.

This policy applies to information we collect, use or disclose about you:

  • On this Website, including through your account, the Enrollment Form Hub and the training modules.
  • In email and other electronic messages between you and us about the Website.

This policy applies only to the Website. It does not apply to information collected by Sentrex through its patient support programs, pharmacy services or other businesses, which is governed by the Sentrex Health Solutions Inc. Privacy Policy available at https://sentrex.com/privacy-policy/. It also does not apply to information you provide to a manufacturer or to the operator of a patient support program when you complete and submit an enrollment form. That information is governed by the privacy practices of the manufacturer or program operator.

The Website links to third-party websites, including manufacturer, payer, government and patient organization websites, and to enrollment forms issued by manufacturers. Those third parties have their own privacy policies, and we are not responsible for their practices. We encourage you to read the privacy policy of every website you visit.

The Website is not for patient information. The Website is intended for healthcare professionals and others who support patient access to medication. Please do not submit personal health information about any patient through the Website, including through the contact form.

By accessing or using the Website, you acknowledge that you have read and understood this policy. Where we rely on your consent, we explain how you give it and how you can withdraw it. This policy may change from time to time (see Changes to Our Privacy Policy).

Information we collect about you

We collect and use the following types of information:

  • Registration and account information: your first and last name, work email address, workplace or organization, role and province or territory, together with your username and password, which we store in encrypted form.
  • Contact information: your name, email address, telephone number (if you choose to provide it) and the content of any message you send us through the contact form or by email.
  • Training records: your enrollment in each training module, your progress, the sections and materials you view or download, and your completion status.
  • Website activity: the areas of the Website you visit and the enrollment forms and resources you view, search for or download while logged in.
  • Technical information: your internet protocol (IP) address, browser type and version, device and operating system, time zone setting, login dates and times, and the pages you visit, the time spent on them and the website you came from.
  • Aggregated information: statistical information that does not identify any individual, such as the number of users who downloaded a particular form or completed a particular module. We may derive aggregated information from personal information.

We do not ask for, and you should not provide, personal health information about any patient, your social insurance number or any payment information.

How we collect information about you

We collect information:

  • Directly from you, when you register, update your user profile, use the training modules, or contact us.
  • Automatically, as you navigate the Website, through server logs, cookies and similar technologies, as described below.

Information We Collect Through Cookies and Similar Technologies

A cookie is a small file placed on your device by a website. We use the following:

  • Strictly necessary cookies. These keep you logged in, remember your cookie preferences and protect the Website. They are required for the Website to function and cannot be switched off in our Cookie Settings.
  • Analytics cookies. We use Google Analytics to understand how the Website is used, such as which pages are visited and how users move through the Website, so we can improve it. Analytics cookies are set only if you accept them, and you can change your choice at any time using the Cookie Settings link in the Website footer. Google's own privacy practices are described at https://policies.google.com/privacy.
  • Security verification. Our registration and contact forms use Google reCAPTCHA to protect the Website against spam and automated abuse. reCAPTCHA collects hardware and software information, such as your IP address and device and browser data, and sends it to Google for analysis. Use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

We do not use advertising cookies, and we do not use cookies to track your activity across other websites for advertising purposes. You can also set your browser to refuse or delete cookies, although some parts of the Website, including the registered areas, may then not function properly.

How we use your information

We use your personal information to:

  • Create and administer your account, and confirm that you are eligible to register.
  • Give you access to the Enrollment Form Hub, the training modules and other registered areas of the Website.
  • Record your training progress and completion, and make it available to you.
  • Respond to your questions, requests and feedback.
  • Send you service messages about your account, such as password resets, security notices and changes to the Website, our Terms of Use or this policy.
  • Maintain the security of the Website, prevent misuse and enforce our Terms of Use.
  • Understand how the Website is used and improve its content, features and performance, using aggregated or de-identified information wherever possible.
  • Meet our legal and regulatory obligations.
  • Any other purpose we describe when we collect the information, or for which you give your consent.

We will only send you commercial electronic messages, such as information about Haven by Sentrex or other Sentrex services, if you have consented to receive them. Every such message will include a working unsubscribe mechanism, and you may withdraw your consent at any time. Withdrawing consent to marketing messages does not affect the service messages we need to send you about your account.

Disclosure of your information

We do not sell your personal information. We do not disclose your personal information to pharmaceutical manufacturers or other third parties for their own marketing purposes, and we do not share your training records with your employer or any other third party unless you ask us to.

We may disclose personal information:

  • To our service providers, such as our website hosting, analytics, security and email providers, who process it on our behalf and only for the purposes described in this policy. We require them by contract to keep it confidential, protect it with appropriate safeguards and use it only to provide services to us.
  • Within Sentrex and its affiliates, where needed to operate and support the Website, on the same terms as this policy.
  • If you report an adverse event, side effect or product complaint to us, to the relevant manufacturer and to Health Canada, where we are required to do so by law or by our agreements with manufacturers.
  • In accordance with applicable law, to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization or other sale or transfer of all or part of our business or assets, provided the recipient agrees to protect it in accordance with this policy.
  • To comply with a court order, law or legal process, including to respond to a government or regulatory request, in accordance with applicable law.
  • To enforce our Terms of Use, or where we believe disclosure is necessary to protect the rights, property or safety of Sentrex, our users or others.
  • With your consent.

We may disclose aggregated information that does not identify any individual, for example the number of times a particular enrollment form was downloaded, without restriction.

Where your information is stored and transferred

The Website and the personal information described in this policy are hosted on servers located in Canada.

Some of our service providers process information outside Canada. In particular, Google Analytics and Google reCAPTCHA are provided by Google, and information they collect may be processed and stored in the United States and other countries. When your information is held outside Canada, it is subject to the laws of that country and may be accessible to its governments, courts, law enforcement and regulatory agencies. We require our service providers to protect your information with safeguards comparable to those required under Canadian privacy law.

You may contact our Privacy Officer for more information about our use of service providers outside Canada. See Contact Information and Challenging Compliance.

Choices about how we use and disclose your information

  • Cookies. You can accept or refuse analytics cookies, and change your choice at any time, using the Cookie Settings link in the Website footer. You can also set your browser to refuse cookies.
  • Commercial messages. You can unsubscribe from commercial electronic messages at any time using the unsubscribe link in any such message, or by emailing privacy@sentrex.com.
  • Your account. You can review and update your registration information at any time in your user profile, and you can close your account by contacting us.

Data security

We use physical, electronic and administrative measures designed to protect your personal information from accidental loss and from unauthorized access, use, alteration and disclosure. Information you send to the Website is encrypted in transit, passwords are stored in encrypted form, and access to personal information is limited to Sentrex personnel and service providers who need it to operate the Website.

The safety and security of your information also depends on you. You are responsible for keeping your password confidential, and we ask you not to share it with anyone.

No transmission of information over the internet is completely secure. Although we take reasonable steps to protect your personal information, we cannot guarantee the security of information you transmit to the Website, and any transmission is at your own risk.

If a breach of security safeguards involving your personal information creates a real risk of significant harm to you, we will notify you and the appropriate regulators as required by applicable law.

Data retention

We keep personal information only for as long as necessary to fulfil the purposes for which we collected it, including to satisfy legal, accounting and reporting requirements. In particular:

  • Account information and training records are kept while your account is active and for [24 months] after your account is closed or becomes inactive.
  • Contact form messages and related correspondence are kept for [24 months] after we respond.
  • Analytics data is kept in identifiable form for no longer than [14 months].
  • Information relating to an adverse event or product complaint is kept for the periods required by law and by our agreements with manufacturers.

When personal information is no longer needed, we securely destroy it or anonymize it so that it can no longer be associated with you. We may use anonymized information for any legitimate business purpose.

Minors

The Website is intended for professionals and is not directed to minors. We do not knowingly collect personal information from anyone under the age of majority in their province or territory of residence. If we learn that we have collected personal information from a minor, we will delete it. If you believe we hold information about a minor, please contact us at privacy@sentrex.com.

Accessing and correcting your personal information

It is important that the personal information we hold about you is accurate and current. You can review and update your registration information at any time by logging into the Website and visiting your user profile.

You also have the right to request access to, and correction of, the personal information we hold about you. To make a request, email our Privacy Officer at privacy@sentrex.com. We may ask you for information to confirm your identity before we respond. We will respond within the time required by applicable law, and we will not charge you a fee without telling you in advance.

Applicable law may allow or require us to refuse access to some information, for example information protected by solicitor-client privilege, information that would reveal personal information about another individual or confidential commercial information, or information that is part of a formal dispute resolution process. If we refuse a request, we will tell you why, subject to any legal or regulatory restrictions.

Withdrawing your consent

You may withdraw your consent to our collection, use or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice, by contacting our Privacy Officer at privacy@sentrex.com. If you withdraw consent to information we need to operate your account, we may not be able to continue to provide you with access to the registered areas of the Website. We will explain the consequences to you when you make your request.

Changes to our privacy policy

We will post any changes to this policy on this page and update the “Last modified” date at the top. If we make a material change to how we handle personal information, we will also notify registered users by email to the address in their user profile, and where the change requires your consent, we will ask for it before applying the change to your information.

Contact information and challenging compliance

We welcome your questions, comments and requests regarding this policy and our privacy practices. Please contact our Privacy Officer at:

Chief Privacy Officer
Sentrex Health Solutions Inc.
120 Valleywood Drive
Markham, ON L3R 6A7
Email: privacy@sentrex.com

We have procedures to receive and respond to complaints and inquiries about our handling of personal information and our compliance with this policy and applicable privacy laws. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca/). If you are a resident of Quebec, you may also contact the Commission d'accès à l'information du Québec (https://www.cai.gouv.qc.ca/).