Privacy Policy

Last Updated: September 2026

2379157 Ontario Limited, doing business as Diabetes Depot (“Diabetes Depot,” “we,” “us,” or “our”), is committed to protecting the privacy, confidentiality, and security of the personal information and personal health information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store, retain, and protect personal information when you visit our website, purchase products, communicate with us, or use our products and services.

Our privacy practices are designed to comply with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Ontario’s Personal Health Information Protection Act, 2004 (PHIPA).

1. Accountability

Diabetes Depot is responsible for personal information and personal health information under its custody or control, as applicable. We have designated responsibility for overseeing our privacy practices and compliance with applicable privacy legislation.

Employees, contractors, agents, and service providers who have access to personal information or personal health information are required to handle that information appropriately and in accordance with applicable privacy and confidentiality requirements.

Questions, requests, or complaints about our privacy practices may be directed to info@diabetesdepot.ca.

2. Information We Collect

The information we collect depends on how you interact with Diabetes Depot and the products or services you request.

Personal Information

We may collect personal information such as:

• Name

• Billing and shipping address

• Email address and telephone number

• Account and login information

• Order and purchase history

• Payment and transaction information

• Customer service inquiries and communications

• Marketing and communication preferences

• Website usage information, including IP address, device and browser information

• Information collected through cookies and similar technologies

• Other information you choose to provide to us

Payment card information may be collected and processed by our payment processing providers. Diabetes Depot does not necessarily receive or retain complete payment card information when transactions are processed by third-party payment providers.

Personal Health Information

Due to the nature of the diabetes products and services we provide, some information we collect or receive may constitute personal health information under PHIPA.

Depending on the products or services requested, this may include:

• Information about diabetes or other health conditions

• Information about insulin pump, continuous glucose monitoring, blood glucose monitoring, or other diabetes therapy

• Prescription or medication-related information

• Information about medical devices and supplies used by an individual

• Information relating to a health-care provider, pharmacy, prescription, or treatment

• Information necessary to coordinate product training, support, pharmacy services, or other health-related services

• Other identifying information relating to an individual’s health or the provision of health care

We limit the collection of personal information and personal health information to information that is reasonably necessary for the purposes identified in this Policy or otherwise communicated to you.

3. How We Collect Information

We may collect information:

• Directly from you when you create an account, place an order, complete a form, contact us, or request a product or service

• Through our website and e-commerce platform

• From an authorized representative acting on your behalf

• From a pharmacy, health-care professional, clinic, manufacturer, insurer, or other organization where you have provided consent or where collection is otherwise permitted by law

• Automatically through cookies and similar technologies when you use our website

• From service providers assisting us in providing our products and services

Where required by law, we obtain consent before collecting personal information or personal health information from another person or organization.

4. How We Use Information

We may collect and use personal information to:

• Create and administer customer accounts

• Process, fulfill, deliver, and manage orders

• Process payments, refunds, and returns

• Provide customer service and respond to inquiries

• Verify customer and order information

• Maintain transaction and business records

• Manage product warranties, recalls, complaints, and safety notifications

• Prevent fraud and protect the security of our website and services

• Improve our website, products, services, and customer experience

• Conduct internal business, quality assurance, and operational activities

• Comply with applicable legal, regulatory, tax, professional, and accreditation requirements

• Send promotional or marketing communications where permitted by law and in accordance with your communication preferences

Where personal health information is involved, we may collect and use that information as reasonably necessary to:

• Fulfill orders for diabetes-related products, medical devices, or supplies

• Provide or facilitate pharmacy or health-care services

• Process or verify prescriptions where applicable

• Coordinate services with pharmacists, health-care professionals, clinics, manufacturers, or others involved in providing services to you, where permitted by law

• Provide product training, education, technical support, or follow-up services

• Maintain required pharmacy, health-care, medical device, or regulatory records

• Manage medical device complaints, adverse events, recalls, warranties, or other product safety matters

• Comply with applicable legal and professional obligations

We will not use personal information or personal health information for a materially different purpose without obtaining additional consent unless the use is otherwise permitted or required by law.

5. Consent

We obtain consent for the collection, use, and disclosure of personal information and personal health information where required by law.

The appropriate form of consent depends on the circumstances, including the sensitivity of the information and the reasonable expectations of the individual. Express consent may be obtained where appropriate, particularly when sensitive personal information or personal health information is involved.

In some circumstances, consent may be implied, or applicable law may permit or require information to be collected, used, or disclosed without consent.

You may withdraw your consent at any time, subject to legal, regulatory, contractual, or other restrictions. Withdrawal of consent may affect our ability to provide certain products or services.

Consent to receive marketing communications is not a condition of purchasing our products or receiving pharmacy or health-related services. You may unsubscribe from marketing communications at any time.

6. When We Share Information

We do not sell personal information or personal health information.

We may disclose personal information to third parties where reasonably necessary to operate our business and provide requested products or services, including:

• E-commerce and website service providers

• Payment processors and financial institutions

• Shipping, courier, and fulfillment providers

• Information technology, hosting, security, and data storage providers

• Customer service and communication providers

• Professional advisers, auditors, and consultants

• Regulatory, governmental, law enforcement, or other authorities where required or permitted by law

Where personal health information is involved, information may also be disclosed, where authorized, permitted, or required by law, to pharmacists, health-care professionals, clinics, medical device manufacturers or suppliers, or other persons or organizations involved in providing or facilitating products, services, support, or health care.

We require service providers handling information on our behalf to use appropriate privacy and security protections and to access information only as necessary to perform their services.

7. Storage and Service Providers

Diabetes Depot uses third-party technology and service providers to operate its website and business, which may include e-commerce platforms, payment processors, cloud and data hosting providers, communication platforms, analytics providers, and other technology services.

Some service providers may process or store personal information outside Ontario or Canada. Information processed in another jurisdiction may therefore be subject to the laws of that jurisdiction and may be accessible to courts, law enforcement, or government authorities in accordance with applicable law.

We use contractual or other appropriate measures to require service providers handling personal information on our behalf to provide an appropriate level of protection.

Additional information regarding our use of service providers may be requested by contacting info@diabetesdepot.ca.

8. Cookies and Website Technologies

Our website may use cookies and similar technologies to:

• Operate essential website functions

• Maintain shopping carts and account sessions

• Remember customer preferences

• Understand website traffic and usage

• Detect and prevent fraud or security threats

• Measure website and marketing performance

• Support advertising and marketing activities where permitted by law

You may be able to manage optional cookies through available website consent tools or your browser settings.

We do not intentionally use personal health information for targeted advertising purposes unless permitted by law and appropriate consent has been obtained.

9. How We Protect Your Information

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information in our custody or control.

These safeguards may include:

• Access controls and authentication

• Limiting access to individuals who require information to perform their duties

• Secure technology and network controls

• Encryption and other security protections where appropriate

• Confidentiality obligations

• Privacy and security training

• Service-provider privacy and security requirements

• Policies and procedures governing the handling of personal information and personal health information

• Secure destruction or de-identification of information when it is no longer required

No electronic transmission or storage system can be guaranteed to be completely secure. We review our safeguards and update them where appropriate.

10. Privacy and Security Incidents

We maintain procedures for responding to suspected or confirmed privacy and security incidents involving personal information or personal health information.

Where an incident gives rise to a legal obligation to notify affected individuals, regulators, health information custodians, or other organizations, we will provide notification in accordance with applicable law.

We maintain records of privacy breaches where required by applicable legislation.

11. Retention and Destruction

We retain personal information and personal health information only for as long as reasonably necessary to fulfill the purposes for which it was collected and to satisfy applicable legal, regulatory, tax, pharmacy, medical device, professional, contractual, or record-keeping requirements.

Different categories of information may be subject to different retention periods.

When information is no longer required, it is securely destroyed, deleted, or de-identified in accordance with our retention practices and applicable law.

12. Accuracy, Access and Correction

We take reasonable steps to ensure that personal information and personal health information is accurate, complete, and up to date as necessary for the purposes for which it is used.

Subject to applicable legal exceptions, you may request:

• Confirmation of whether we hold personal information or personal health information about you

• Access to information we hold about you

• Correction of inaccurate or incomplete information

• Information regarding how your information has been used or disclosed where required by law

We may need to verify your identity before responding to a request.

Certain information may be withheld where permitted or required by law. If the information you request is held by another health information custodian, your request may need to be directed to that organization.

Requests for access or correction may be submitted to info@diabetesdepot.ca.

13. Children’s Information

Where information relates to a child or another individual who is unable to provide the required consent, consent will be obtained from a parent, guardian, substitute decision-maker, or other legally authorized representative where required by law.

14. Questions and Complaints

If you have a question, concern, or complaint regarding our privacy practices or our handling of your personal information or personal health information, please contact us at:

Privacy Inquiries
2379157 Ontario Limited dba Diabetes Depot
Email: info@diabetesdepot.ca

We will review and respond to privacy inquiries and complaints in accordance with applicable privacy legislation.

You may also have the right to contact the Office of the Privacy Commissioner of Canada regarding matters governed by PIPEDA or the Information and Privacy Commissioner of Ontario regarding matters governed by PHIPA.

15. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, products and services, or legal and regulatory requirements.

The current version will be posted on our website with the date it was last updated. Where changes materially affect how we collect, use, or disclose information, we will take additional steps to provide notice or obtain consent where required by law.

16. Contact Us

For questions about this Privacy Policy, privacy-related requests or complaints, or additional information about our privacy practices, please contact:

2379157 Ontario Limited dba Diabetes Depot
Email: info@diabetesdepot.ca