Privacy Policy


Your Privacy Matters to Us

Protecting the privacy and security of patient health information is our highest priority. This Privacy Policy explains how we collect, use, share, and protect personal health information (PHI) and personal data through our Scriberly Canada CPOE portal, specifically designed for Canadian healthcare users.


What is Personal Information?

Personal Information refers to any data that can identify an individual, either directly or indirectly. In the context of healthcare and our CPOE portal, this includes, but is not limited to:

Protecting Personal Information is essential to maintain trust and comply with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial health information statutes.


Information We Collect

We collect patient health information necessary to support prescription orders and clinical care, including patient identifiers, medication history, allergies, and other relevant clinical data obtained from information repositories and healthcare providers. We also collect user role information and technical data to ensure secure access.


Use of Information

The information is used to authenticate users, enable accurate prescription order management, facilitate communication between LTC or Retirement homes and pharmacies, maintain service functionality, and comply with legal and regulatory requirements.


Legal Compliance

Our application complies with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), Ontario’s Personal Health Information Protection Act (PHIPA), Alberta’s Health Information Act (HIA), and applicable provincial legislation. We enter into appropriate agreements with healthcare organizations to ensure compliance when handling PHI.


Sharing of Information

PHI is shared only with authorized healthcare providers, pharmacies, and third-party service vendors under strict confidentiality agreements. In cases of business reorganizations such as mergers or acquisitions, information may be transferred with proper authorization. Disclosure may also occur if required by law or legal process.


Security Measures

We implement physical, administrative, and technical safeguards including encryption (SSL/TLS), secure data centers, firewalls, multi-factor authentication, audit logging, and regular staff training to protect data against unauthorized access, alteration, or loss.


User Rights

Users may request access to or correction of PHI through their healthcare provider. Users can update personal account information directly via the portal. For residents of Europe, data processing may occur outside Europe, including Canada and the U.S.


Data Retention

Personal information and PHI are retained only as necessary to provide services, fulfill legal obligations, or resolve disputes. After retention periods expire, data is securely deleted or anonymized to prevent reconstruction.


Opt-Out and Consent

Users and visitors may opt out of marketing communications and restrict use of their information; however, some restrictions may impact service availability or functionality. We confirm any changes that may affect service access before proceeding.


Changes to This Policy

We may update this Privacy Policy to reflect changes in practices, legal requirements, or operational needs. Updated policies will be posted on the portal, and continued use signifies acceptance.


Contact Information

For questions, concerns, or requests regarding privacy, please contact:
Privacy Officer
Email: info@scriberlycanada.ca