REVIVE CAFE is currently available only to business entities located in Canada outside the Province of Quebec. Quebec is not supported at this time; this Privacy Policy does not address Quebec Law 25 obligations. REVIVE intends to extend REVIVE CAFE to Quebec in a future release on Quebec-specific terms.
This Privacy Policy describes how REVIVE Healthcare Group Inc.("REVIVE", "we", "us") collects, uses,discloses, retains, and protects personal information through REVIVECAFE, our B2B e-commerce site at revivehealthcaregroup.com. Itapplies to individuals acting in their professional capacity asemployees, contractors, or representatives of a Customer. It isintended to comply with the federal Personal Information Protectionand Electronic Documents Act ("PIPEDA") and the comparableprovincial laws of Alberta and British Columbia. REVIVE CAFE does notknowingly collect patient health information.
We use personal information to operate the Site, verify Accounts,fulfil and ship Orders, process payments and credit, deliver customersupport, comply with legal and regulatory obligations (includingHealth Canada recall requirements and tax legislation), preventfraud, conduct analytics on aggregated and de-identified data, and —with the consent required by CASL — send marketing communications.
We share personal information only with: (a) service providers whoprocess it on our behalf under contractual safeguards (hosting,payments, fraud prevention, analytics, marketing tools, shipping,identity verification, credit reporting); (b) the Customerorganization that the individual represents; (c) manufacturers, GPOs,and supply-chain partners as needed to fulfil Orders and executerecalls; (d) Resellers and their sub-customers, where relevant tofulfilment or recall; (e) public authorities where required by law;and (f) a successor in connection with any corporate transaction. Wedo not sell personal information.
We rely on consent to collect, use, and disclose personalinformation. Consent may be express or implied as permitted byPIPEDA. We obtain express opt-in consent for marketing electronicmessages under CASL. The Customer may withdraw consent at any time bycontacting our Privacy Officer, subject to legal or contractualrestrictions; withdrawal may limit our ability to provide services.
Personal information collected through REVIVE CAFE is stored inCanada on Amazon Web Services infrastructure in the ca-central-1(Montréal) region, with backup copies also kept in Canada. Certainservice providers may access personal information from outside Canadain the course of providing services to REVIVE; while in theircustody, the information may be subject to the laws of the relevantforeign jurisdiction. REVIVE imposes contractual safeguards on suchproviders consistent with PIPEDA.
REVIVE protects personal information through technical,organizational, and physical safeguards proportionate to itssensitivity, including TLS encryption in transit and AES-256encryption at rest, role-based access controls with multi-factorauthentication on administrative accounts, monitoring and logging,vulnerability scanning, personnel training, documentedincident-response procedures, and PCI-DSS-compliant outsourcing ofcard processing. No safeguards can guarantee absolute security; theCustomer should use strong, unique passwords.
We retain personal information only as long as necessary for thepurposes for which it was collected, to satisfy legal or accountingobligations, or to defend legal claims. Specific periods may varybased on legal hold or investigation.
When personal information is no longer needed, REVIVE securelydestroys, erases, or de-identifies it.
Subject to applicable law, an individual may request access to,correction of, or deletion of personal information REVIVE holds aboutthem, and may withdraw consent or file a complaint. Requests shouldbe sent to the Privacy Officer at the address in Section 10. We willrespond within thirty (30) days (or longer where permitted) and mayrequire verification of identity. We will explain in writing if weare unable to fulfil a request.
In the event of a breach of security safeguards involving personalinformation that creates a real risk of significant harm, REVIVEwill, as soon as feasible, report to the Office of the PrivacyCommissioner of Canada (and applicable provincial commissioners),notify affected individuals, and maintain records as required byPIPEDA's mandatory breach reporting framework.
REVIVE has designated a Privacy Officer accountable for compliance:
REVIVE HealthcareGroup Inc. — Attention: Privacy Officer —privacy@revivehealthcaregroup.com — +1 (888) 900-0698
If, after contactingour Privacy Officer, you remain dissatisfied, you may contact theOffice of the Privacy Commissioner of Canada (priv.gc.ca) or theprivacy commissioner of your province.
REVIVE CAFE is intended for individuals acting in a professionalcapacity. We do not knowingly collect personal information fromanyone under 18. If we become aware we have done so, we will deleteit promptly.
10.2 DISCLAIMER. EXCEPT AS EXPRESSLY STATED IN SECTION 10.1, AND TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SITE AND THE PRODUCTS ARE PROVIDED "AS IS", AND REVIVE DISCLAIMS ALL OTHER REPRESENTATIONS, WARRANTIES, AND CONDITIONS, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, MERCHANTABLE QUALITY, FITNESS FOR A PARTICULAR PURPOSE, DURABILITY, AND NON-INFRINGEMENT, AND ANY WARRANTIES UNDER PROVINCIAL SALE OF GOODS LEGISLATION.
10.3 Liability cap. TO THE MAXIMUM EXTENT PERMITTED BY LAW, REVIVE'S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS, THE SITE, OR ANY PRODUCT — WHETHER IN CONTRACT, TORT, OR OTHERWISE — SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNTS PAID BY THE CUSTOMER FOR THE PRODUCT(S) GIVING RISE TO THE CLAIM IN THE TWELVE (12) MONTHS BEFORE THE CLAIM, AND (B) CAD $1,000.
10.4 Excluded damages. IN NO EVENT IS REVIVE LIABLE FOR INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, BUSINESS, GOODWILL, OR DATA. Nothing in this Section limits liability that cannot be limited under applicable law (such as for fraud or for death or personal injury caused by REVIVE's negligence).
Information about our cookies is in the Cookie Policy. We may updatethis Privacy Policy from time to time; the "Effective Date"reflects the latest version, and material changes will becommunicated at least thirty (30) days in advance. REVIVE CAFE is aCanadian platform; this Policy is not directed to US residents andpersonal information processed on REVIVE CAFE is not Protected HealthInformation under HIPAA.
