Privacy Notice

How Weight2Lose handles commerce and administration information, and how that differs from clinical records.

Applicability: Applies to information collected under this version.

Version PN-2026.10.03.1

Seller: Weight2Lose Management Inc.

1. Scope and accountability

Weight2Lose Management Inc. is responsible for personal information under its control in the storefront and program administration. Contact the Privacy Office at privacy@weight2lose.ca. This Notice separates commerce and administration information from clinical records.

2. Information the storefront may collect

Depending on the pathway enabled for you, only the categories needed to provide, secure, or document that pathway are collected.

Public submission forms do not request symptoms, diagnoses, medications, laboratory results, measurements, medical history, clinical notes, patient rosters, health-card numbers, or free-text health information. Clinical information is collected later through the approved secure external care environment.

• Name, email address, telephone number, preferred contact method, and general non-clinical message submitted through the public inquiry form.
• Minimum booking contact details, appointment information, calendar event identifiers, and evidence of the administrative and optional promotional choices presented with the inquiry or booking.
• Proposal, order, payment, refund, agreement-acceptance, consent, and support records held in Stripe or Weight2Lose’s administrative systems. Payments are processed directly by Stripe through Stripe-hosted checkout after you accept the applicable order and program documents; staff may also facilitate an accepted payment through Stripe. Before checkout, the Site collects your country, province or territory, and postal code to verify the applicable tax and payable total with Stripe. Stripe collects payment details; the public Site does not collect raw card data or CVV.
• Business and professional details submitted in partner-site and clinician applications, without patient data or credential-document uploads.
• Contact details and information you provide when asking for administrative help.
• Information supplied later through secure onboarding, including service location and scheduling preferences.
• Limited technical and security information needed for hosting and abuse prevention, such as device, browser, and network-event information.

3. Purposes

• Respond to general inquiries and arrange consultations using the required administrative contact permission.
• Prepare private proposals and, after acceptance, process payments through Stripe, applicable tax, receipts, agreement records, refunds, and consent choices.
• Coordinate booking and program administration by email or disclosed automated AI voice calls, with an email and human-contact alternative. Promotional communications use the separate optional choice.
• Review business and professional applications and arrange any subsequent protected verification.
• Respond to enquiries, requests, and complaints.
• Secure the Site, prevent abuse, and meet applicable legal and financial obligations.
• Send offers only with separate affirmative consent that may be withdrawn without affecting enrollment or care.

4. Clinical records

After enrolment, clinical information is collected only in the approved secure care system. The treating practitioner or clinic may be the health-information custodian for its clinical record. That custodian controls access, correction, retention, and disclosure under its legal and professional obligations. Weight2Lose coordinates care using the minimum necessary information and helps direct an access or correction request to the appropriate custodian.

5. Service providers and disclosures

Weight2Lose uses Resend to send email from info@weight2lose.ca; Google Calendar through the shared booking service operated by the Weight2Lose Realtime Voice backend for availability and calendar events; the telephony and voice provider powering Jay, the automated AI assistant, for consented administrative calls; Stripe for staff-facilitated payments and direct payments made through Stripe-hosted payment pages; Clerk for staff authentication; and participating practitioners or clinics. Each receives only information needed for its role and is subject to appropriate contractual and access safeguards.

When you book a consultation with a human Program Director, we use your contact details and appointment information to record the booking in our calendar and send your appointment confirmation. That confirmation may be sent automatically. Our service providers process the information needed to provide these functions. Optional promotional communications require separate permission.

Only the initial confirmation of a successfully booked consultation may be sent automatically. Inquiry acknowledgements, rescheduling or cancellation emails, reminder emails, proposals, promotional campaigns, sales replies, and other authored messages are sent only after individual approval.

A provider may process information outside your province or Canada, where foreign governments, courts, or authorities may lawfully access it. Contractual, technical, and organizational safeguards reduce but cannot eliminate the residual risks of electronic processing. Weight2Lose does not sell personal information or use clinical information for targeted advertising.

6. Consent and choices

The required administrative contact permission covers calls and emails used to respond to an inquiry or booking and provide confirmations, reminders, and related service updates, including through Jay, our automated AI assistant. Promotional consent is a separate, optional, initially unchecked choice for program news and offers. Refusing or withdrawing promotional consent does not affect enrollment or care. You may change either contact permission at /contact/preferences or by emailing info@weight2lose.ca. If you prefer to arrange contact without automated calls, email info@weight2lose.ca for a human/email alternative. Withdrawal cannot undo past lawful processing and may be limited by an active contract, legal retention, fraud prevention, or another lawful requirement.

7. Retention

A longer period applies where law, litigation hold, fraud investigation, or an enforceable obligation requires it. Records are securely deleted or de-identified when retention ends.

• Incomplete staff-facilitated enrollment records: 90 days unless a longer period is required for consent evidence, security, or law.
• General enquiries and business or professional applications that do not proceed: 24 months after the last meaningful interaction, unless a continuing relationship or legal obligation requires retention.
• Orders, invoices, payment and reconciliation records, agreement evidence, refunds, and tax records: seven years after the end of the applicable fiscal year or relationship, whichever is later.
• Security logs: up to 24 months, subject to provider controls.
• Marketing records: until withdrawal, plus a minimal suppression record needed to honour unsubscribe.
• Clinical records: the applicable custodian’s legal and professional schedule.

8. Safeguards and incidents

Weight2Lose applies safeguards appropriate to the information and service, including restricted access, secure transport, supplier controls, and procedures for handling privacy incidents. No system is risk-free. Weight2Lose contains, investigates, documents, and gives required notice of a breach, including notice to affected people and regulators when legally required.

9. Access, correction, and complaints

Email privacy@weight2lose.ca to request access, correction, withdrawal of optional consent, or a privacy response. Weight2Lose verifies identity and responds within applicable time limits. If a request concerns a clinical record, it will identify or coordinate with the relevant custodian. You may escalate an unresolved concern to the Office of the Privacy Commissioner of Canada or another applicable regulator.

10. Cookies and preferences

The public Site may use essential storage and cookies for security and application-form functionality. A submitted application reference may be held in browser-session storage so its confirmation page can display it. Stripe uses its own payment and security technologies for staff-facilitated payments and direct payments made through Stripe-hosted payment pages.

No analytics, marketing tags, or session-replay tools are enabled on the rebuilt public Site. Future non-essential tracking requires a separate implementation and privacy review and any legally required affirmative consent. Health answers, payment details, and free-text application contents must not be sent to analytics or advertising services.

11. Changes

Weight2Lose posts a new effective date and version when this Notice changes, and gives additional notice when a material change affects information already collected or requires a new consent.

This document is incorporated into an order only when identified in the customer’s acceptance record and durable agreement copy. Administrative-contact and promotional choices are collected separately and are not agreement acceptance. Consumer statutory rights are non-waivable.

Earlier versions are available to affected patients on request at info@weight2lose.ca.