Privacy Policy

MilliKare is committed to protecting your privacy in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s Anti-Spam Legislation (CASL), and applicable provincial privacy laws including Ontario’s Health Information Protection Act (PHIPA) where applicable. This Policy applies to all users of the MilliKare Platform.

1.  Scope and Application

This Privacy Policy applies to all personal information collected by MilliBolt HealthTech Inc. in connection with the operation of the MilliKare platform, including information collected from Buyers, Sellers, and visitors. It does not apply to the privacy practices of independent Sellers, third-party payment processors, or linked websites, which have their own privacy policies.

2.  Information We Collect

2.1  Account Information

• Full name, email address, phone number, username, and encrypted password;
• For Sellers: business name, business registration number, GST/HST registration number, and banking information for payment disbursement.

2.2  Personal and Transactional Information

• Billing and shipping address;
• Date of birth (where required for age verification or compliance purposes);
• Purchase history, order details, return and refund records;
• Payment method details (processed and stored by our third-party payment processor; MilliKare does not store full card numbers).

2.3  Seller Compliance Information

• Business registration details, regulatory licences (NPN, DIN-HM, CNF), certificates of analysis, and other compliance documentation;
• Product listings, descriptions, images, and pricing information.

2.4  Device and Usage Data

• IP address, browser type, device identifiers, and operating system;
• Platform usage data including pages visited, session duration, search queries, and clickstream data;
• Cookie and tracking data (see Section 5).

2.5  Communications

• Messages between Buyers and Sellers through the Platform messaging system;
• Customer support inquiries, feedback, and dispute correspondence;
• Email and marketing communications (with consent as required by CASL).

3.  How We Use Your Information

We use personal information for the following purposes, as permitted by PIPEDA:

• To create, manage, and operate user accounts;
• To process orders, payments, refunds, and returns;
• To verify Seller compliance with Health Canada regulatory requirements;
• To facilitate communication between Buyers and Sellers regarding orders and disputes;
• To enforce platform policies, detect fraud, and prevent illegal activity;
• To provide customer support and resolve disputes;
• To personalize the Platform experience and improve our services;
• To send transactional communications (order confirmations, shipping updates) – consent not required;
• To send marketing and promotional communications – requires express or implied consent under CASL;
• To comply with legal and regulatory obligations, including tax reporting and government requests;
• To protect the rights, property, and safety of MilliKare, its users, and the public.

4.  How We Share Your Information

4.1  With Sellers

Buyer shipping and contact information is shared with the applicable Seller solely for the purpose of order fulfilment. Sellers are contractually required to handle Buyer information confidentially and in compliance with applicable privacy law.

4.2  With Service Providers

We share information with trusted third-party service providers who assist in operating the Platform, including payment processors, shipping carriers, hosting providers, analytics tools, and customer support platforms. All service providers are contractually bound to use information only for the specified purpose and to maintain appropriate security standards.

4.3  For Legal Compliance

We may disclose personal information to government authorities, regulatory bodies, or law enforcement agencies where required by applicable law, court order, or regulatory process, or where we believe disclosure is necessary to protect the rights, property, or safety of MilliKare, its users, or the public.

4.4  Business Transfers

In the event of a merger, acquisition, sale of assets, or other business restructuring, personal information held by MilliKare may be transferred to the acquiring entity, subject to equivalent privacy protections.

4.5  No Sale of Personal Information

MilliKare does not sell, rent, or trade personal information to unrelated third parties for their own commercial purposes. This is a firm and unconditional commitment

5.  Cookies and Tracking Technologies

MilliKare uses cookies, web beacons, pixels, and similar tracking technologies to:

• Maintain user sessions and authentication;
• Remember user preferences and settings;
• Analyze platform usage and improve performance;
• Support targeted advertising and retargeting (with consent).

Users may manage cookie preferences through their browser settings. Disabling certain cookies may affect Platform functionality. Where required by applicable law, consent will be obtained before placing non-essential cookies.

6.  Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal and regulatory obligations, including:

• Transaction records: 7 years (for tax and accounting purposes);
• Compliance documentation: duration of the Seller’s active relationship with MilliKare plus 5 years;
• Account information: duration of the account plus 2 years after closure;
• Dispute and legal records: until final resolution plus applicable limitation period.

After the applicable retention period, personal information is securely deleted or anonymized.

7.  Your Privacy Rights

Subject to applicable law and verification of identity, users may exercise the following rights:

• Right of access: request a copy of personal information we hold about you;
• Right to correction: request correction of inaccurate or incomplete personal information;
• Right to withdraw consent: withdraw consent for marketing communications at any time (subject to legal minimum retention requirements);
• Right to complaint: file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

To exercise any privacy right, contact MilliKare at: privacy@millikare.ca. We will respond within 7 days.

8.  Data Security

MilliKare implements industry-standard technical and organizational security measures to protect personal information against unauthorized access, disclosure, alteration, or destruction, including:

• TLS/SSL encryption for all data in transit;
• Encrypted storage of sensitive data at rest;
• Role-based access controls limiting access to personal information to authorized personnel only;
• Regular security audits and vulnerability assessments;
• Incident response procedures for data breaches.

In the event of a privacy breach that poses a real risk of significant harm, MilliKare will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

No electronic system is 100% secure. Users acknowledge the inherent risks of transmitting information over the internet and agree that MilliKare’s liability for security breaches is limited to the extent expressly set out in these Terms.

9.  Children’s Privacy

MilliKare does not knowingly collect personal information from individuals under the age of 18. If we become aware that personal information has been collected from a minor without parental consent, we will delete it promptly. Parents or guardians who believe their child’s information has been collected should contact privacy@millikare.ca. 

10.  International Data Transfers

Personal information may be stored and processed in Canada or in other countries where MilliKare or its service providers operate. By using the Platform, users consent to the transfer and processing of their personal information outside their country of residence. Where data is transferred outside Canada, MilliKare requires contractual protections equivalent to those under PIPEDA.

11.  Anti-Spam (CASL) Compliance

MilliKare complies with Canada’s Anti-Spam Legislation (CASL). Commercial electronic messages (“CEMs”) will only be sent with valid express or implied consent. Every CEM will clearly identify MilliKare as the sender, provide contact information, and include a functional unsubscribe mechanism. To unsubscribe, follow the link in any MilliKare email or contact info@millikare.ca.

12.  Changes to this Policy

MilliKare may update this Privacy Policy from time to time. The revised effective date will be displayed at the top of this document. For material changes, we will notify users by email or in-platform notice. Continued use of the Platform after the effective date of any change constitutes acceptance of the revised Policy.

_______________________________________

Acknowledgment:

By using Millikare, you acknowledge that you have read, understood, and agreed to this Privacy Policy.