Privacy & Cookies Policy

Effective date: May 7, 2026

Last updated: May 7, 2026

1. Introduction

Haven Health ("Haven Health," "we," "us," or "our") is the brand name of 2747171 Alberta Ltd., a private medical practice located in Calgary, Alberta. We are committed to protecting the privacy and security of personal information collected through our website, www.haven-health.ca (the "Site").

This Privacy & Cookie Policy explains what information we collect through the Site, how we use and protect it, and the choices you have. This policy applies only to information collected through the Site. Personal health information collected during the course of clinical care is governed separately by Alberta's Health Information Act (HIA) and is managed within our secure clinical systems, not on this website.

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), and applicable Canadian Anti-Spam Legislation (CASL).

2. Information we collect

We collect personal information through the Site only when you choose to provide it, or automatically through standard web analytics.

2.1 Information you provide to us

When you submit a contact form, request a consultation, book an appointment through our online booking system, or join our mailing list, we may collect:

  • Your full name

  • Your email address

  • Your telephone number

  • Reason for your inquiry or service of interest

  • Any additional information you voluntarily include in a message or form field

Important: Please do not submit detailed personal health information, medical history, or sensitive clinical details through the Site's contact or booking forms. Detailed health information should only be shared during a clinical encounter, through our secure clinical systems, or as directed by a member of our care team.

2.2 Information collected automatically

When you visit the Site, we (and our analytics providers) may automatically collect certain technical information, including:

  • Your IP address (typically anonymized)

  • Browser type, version, and language

  • Device type and operating system

  • Pages visited, time spent on pages, and referring URLs

  • Approximate geographic location (city or region level)

  • Date and time of access

This information is collected through cookies and similar technologies. See Section 6 for details on how we use cookies.

3. How we use your information

We use the information you provide and information collected automatically for the following purposes:

  • To respond to inquiries and consultation requests

  • To schedule, confirm, and manage appointments

  • To send service-related communications and appointment reminders

  • To send marketing or educational communications, where you have consented to receive them

  • To improve our website's content, navigation, and user experience

  • To analyze website traffic and understand how visitors use the Site

  • To comply with applicable legal, regulatory, and professional obligations

  • To prevent fraud, abuse, or unauthorized access to the Site

We do not sell your personal information. We do not use your personal information for automated decision-making that produces legal or similarly significant effects.

4. Consent

By submitting personal information through the Site, you consent to the collection, use, and disclosure of that information as described in this policy. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. To withdraw consent, contact us using the details in Section 11.

Marketing communications: If you have opted in to receive marketing or educational emails, you can unsubscribe at any time using the unsubscribe link provided in every marketing email, or by contacting us directly. Withdrawing consent for marketing communications does not affect transactional or service-related messages (such as appointment confirmations or clinical correspondence).

5. How we share information

We do not sell, rent, or trade your personal information. We share information only in the following limited circumstances:

Service providers

We work with trusted third-party service providers who help us operate the Site and our practice, such as website hosting, online booking, email delivery, and web analytics. These providers are contractually required to protect your information and use it only for the purposes we specify.

Legal and regulatory requirements

We may disclose information when required by law, court order, or regulatory authority, or where necessary to protect our rights, the rights of our patients, or the safety of others.

Business transactions

If Haven Health is involved in a merger, acquisition, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will provide notice and obtain consent where required by applicable law.

Cross-border processing

Some of our service providers (including our web analytics provider) may store or process information outside of Canada, including in the United States. When information is transferred outside of Canada, it may be subject to the laws of that jurisdiction. We take reasonable steps to ensure that your information is protected by comparable safeguards.

6. Cookies and similar technologies

6.1 What are cookies

Cookies are small text files placed on your device when you visit a website. They help websites function correctly, remember your preferences, and provide insight into how the site is used.

6.2 Cookies we use

We use the following categories of cookies on the Site:

Strictly necessary cookies

These cookies are required for the Site to function. They enable core features such as page navigation, secure form submission, and access to our online booking system. The Site cannot function properly without these cookies, and they cannot be disabled through our consent banner.

Analytics cookies (Google Analytics)

We use Google Analytics, a web analytics service provided by Google LLC, to understand how visitors interact with our Site. Google Analytics uses cookies to collect information such as the pages you visit, time spent on the Site, the website that referred you, and general device and browser information.

We have configured Google Analytics to anonymize IP addresses where possible. The information generated about your use of the Site is generally transmitted to and stored by Google on servers that may be located outside of Canada, including in the United States. Google uses this information for the purposes of evaluating Site usage, compiling reports for us, and providing other services related to website activity.

You can opt out of Google Analytics by:

  • Declining analytics cookies in our cookie consent banner

  • Installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout

  • Adjusting your browser settings to block cookies

6.3 Managing cookies

When you first visit the Site, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You can change your preferences at any time by clearing your browser cookies and revisiting the Site, or by adjusting your browser settings to refuse cookies. Please note that disabling certain cookies may affect the functionality of the Site.

7. How long we keep information

We retain personal information only as long as reasonably necessary to fulfill the purposes for which it was collected, or as required by applicable law and our professional obligations.

  • Inquiry and contact form submissions: typically retained for up to 24 months unless a clinical relationship is established

  • Appointment booking information: retained according to applicable medical records retention requirements once a clinical relationship is established

  • Marketing email lists: retained until you unsubscribe or request deletion

  • Website analytics data: retained according to Google Analytics' default retention period (currently 14 months) unless adjusted by us

When personal information is no longer needed, we securely delete or anonymize it.

8. How we protect your information

We take reasonable physical, technical, and administrative measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (SSL/TLS), restricted access controls, secure hosting, and regular review of our security practices.

However, no method of transmitting or storing data over the internet is fully secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, you have the right to:

  • Access the personal information we hold about you

  • Request correction of inaccurate or incomplete information

  • Withdraw consent for the collection, use, or disclosure of your information

  • Request deletion of your information, subject to legal and professional retention obligations

  • Receive information about how your personal information has been used or disclosed

  • File a complaint with our practice or with a privacy regulator

To exercise any of these rights, please contact us using the details in Section 11. We will respond within 30 days, or notify you if additional time is required.

10. Children's privacy

The Site is intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under the age of 18 through the Site. If you believe a minor has submitted personal information through the Site, please contact us and we will take reasonable steps to delete it.

11. Contact and complaints

If you have questions about this policy, wish to exercise your privacy rights, or wish to make a complaint about how your information has been handled, please contact our Privacy Officer:

Privacy Officer Haven Health (2747171 Alberta Ltd.) 601 67 Ave SW Calgary, AB T2V 0M3 Email: lizzy@haven-health.ca

If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta (OIPC) at oipc.ab.ca, or the Office of the Privacy Commissioner of Canada at priv.gc.ca.

12. Changes to this policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this policy periodically. Material changes will be communicated through a notice on the Site.

This policy is provided for informational purposes and reflects current best practices for Canadian privacy compliance. Haven Health recommends review by legal counsel prior to publication, particularly to confirm alignment with any updates to PIPEDA, Alberta PIPA, HIA, or CASL.