1. Who we are

Miva Pharmacy ("Miva", "we", "us") operates joinmiva.ca and provides online pharmacy and clinical assessment services to people in Canada. Our pharmacy is located at 7063 Venture St, Unit 104, Delta, BC, V4G 1H8.

Miva is the organisation responsible for the personal information described in this policy. Our Privacy Officer is accountable for our compliance and can be reached using the contact details at the end of this page.

2. The law we follow

We handle personal information in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, substantially similar provincial laws including Quebec's Law 25 (the Act respecting the protection of personal information in the private sector), Alberta's PIPA, British Columbia's PIPA, and provincial health information legislation such as Ontario's PHIPA.

We also follow the privacy and confidentiality standards set by the provincial pharmacy regulatory colleges and the professional colleges governing our prescribers.

3. Information we collect

• Identity and contact details: name, date of birth, email address, phone number, billing and delivery address.
• Health information: the answers you give in a clinical assessment, your medical and medication history, allergies, height and weight, and any photographs you upload.
• Prescription and dispensing records: medicines prescribed and supplied to you, dosing, and clinician notes.
• Transaction information: order history and payment confirmations. Full card numbers are handled by our payment processor and are never stored by Miva.
• Marketing and waitlist information: the email address you submit to our signup form, and the page or campaign it came from.
• Technical information: IP address, device and browser type, and pages viewed, collected through cookies and similar technologies.

4. Why we use your information

• To carry out a clinical assessment and decide whether a treatment is safe and appropriate for you.
• To dispense, package and deliver prescription and non-prescription products, and to keep the dispensing records our regulators require.
• To provide aftercare, dose reviews, safety monitoring and customer support.
• To take payment and to prevent fraud and misuse of the service.
• To send you service messages about your order or your treatment.
• To send you marketing or waitlist updates where you have consented, which you can withdraw at any time.
• To meet legal, regulatory and pharmacovigilance obligations, including reporting adverse events to Health Canada.
• To improve our website and services using aggregated or de-identified information.

5. Consent

We collect, use and disclose personal information with your knowledge and consent, except where the law permits or requires otherwise. Because health information is sensitive, we rely on your express consent when you complete a clinical assessment or submit health details to us.

Marketing emails are sent only with your consent, in line with Canada's Anti-Spam Legislation (CASL). Every marketing email includes an unsubscribe link. Withdrawing marketing consent does not affect the care we provide.

You can withdraw consent to our use of your information at any time, subject to legal and contractual restrictions and reasonable notice. Withdrawing consent for clinical information may mean we can no longer supply treatment to you.

6. Who we share it with

We do not sell your personal information, and we do not share health information with advertisers.

• The Canadian-licensed prescribers and pharmacists who review your assessment and dispense your medicine.
• Delivery partners, who receive only the details needed to complete your delivery.
• Payment processors, who handle card details directly and under their own security standards.
• Technology suppliers who host our website, database and email systems under written agreements that limit their use of your information to providing services to us.
• Regulators, professional colleges, Health Canada and law enforcement where disclosure is required or permitted by law.
• Your own family physician or another health professional, where you ask us to or where it is necessary for your safe care.

7. Storage, transfers and security

Your information is stored on servers operated by our technology providers. Some of these providers process or back up data outside Canada, including in the United States and the European Union. Where information is held outside Canada it may be accessible to courts and law enforcement in that jurisdiction under local law.

We use contractual safeguards with all service providers so that your information receives a comparable level of protection to that required in Canada. Quebec residents receive a privacy impact assessment summary for such transfers on request.

We protect your information with encryption in transit, access controls limiting health information to authorised clinical staff, audit logging, and staff confidentiality training. No system can be guaranteed completely secure, but we maintain a breach response process and will notify you and the applicable regulator where a breach creates a real risk of significant harm.

8. How long we keep it

Prescription and clinical records are retained for the period required by the pharmacy regulator in the province where the medicine was dispensed. This is generally at least ten years from the last entry, and longer for records relating to patients who were minors at the time.

Marketing and waitlist records are kept until you unsubscribe, and are then removed from active mailing lists. Website analytics data is retained in aggregated form. When information is no longer needed for a legal or clinical purpose, it is securely destroyed or de-identified.

9. Your privacy rights

We respond to access and correction requests within 30 days. We may ask you to verify your identity before releasing information, and in limited cases the law allows us to withhold information — for example where releasing it would reveal information about another person.

• Access: request a copy of the personal and health information we hold about you.
• Correction: ask us to correct information that is inaccurate or incomplete.
• Withdrawal of consent: withdraw consent to marketing or, subject to limits, to other uses of your information.
• Portability: where provincial law provides for it, ask for computerised information to be provided in a structured, commonly used format.
• De-indexing: Quebec residents may ask us to stop disseminating information or to de-index it where dissemination causes serious injury to reputation or privacy.
• Complaint: raise a concern with our Privacy Officer and, if unresolved, with the Office of the Privacy Commissioner of Canada or your provincial commissioner.

10. Cookies and analytics

Our website uses cookies that are strictly necessary for it to function, plus analytics cookies that help us understand how pages are used. You can control non-essential cookies through your browser settings or our cookie controls. We do not use health information to target advertising.

11. Children

Our services are intended for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

12. Changes to this policy

We review this policy regularly and will post any changes on this page. Where a change materially affects how we use your information, we will tell you directly. Last updated: 1 March 2026.

13. Contact our Privacy Officer

Privacy Officer, Miva Pharmacy, 7063 Venture St, Unit 104, Delta, BC, V4G 1H8. You can also reach us through our contact page.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, or the privacy commissioner or ombudsman in your province.