Aurora Wellness Collective Inc.  Privacy Policy

Last Updated: April 2025

At Aurora Wellness Collective Inc. (“Aurora”, “we”, “us”, or “our”), we are committed to protecting your personal information and privacy. This Privacy Policy outlines how we collect, use, disclose, store, and protect your personal information, in accordance with Canadian privacy legislation (including PIPEDA) and, where applicable, HIPAA guidelines for U.S. clients receiving clinical care.

💼 1. Scope of Policy

This Privacy Policy applies to all visitors, users, and clients of Aurora's website, digital platforms, AI tools, membership services, and clinical offerings.

🔍 2. Information We Collect

We collect the following types of information:

Personal Information:

• Name, date of birth, address, email, phone number

• Payment and billing information

• Emergency contact (if required)

Health & Wellness Information:

• Intake and consent forms

• Service history (therapy, coaching, AI interactions)

• Wellness goals and preferences

Technical Data:

• IP address, browser type, usage analytics

• Cookies and session data

📧 3. How We Use Your Information

Your information is used to:

• Deliver services you have requested

• Match you with the appropriate provider or tool

• Personalize AI or coaching interactions

• Communicate with you about appointments, services, updates

• Maintain accurate health records

• Improve our platform’s functionality and user experience

• Comply with legal and regulatory obligations

🔑 4. Consent

We will obtain your informed consent before collecting, using, or disclosing your information, except where permitted or required by law. By using our platform and services, you consent to the practices described in this policy.

🔒 5. Information Storage & Security

We store your data securely using encrypted Canadian-based servers and/or compliant third-party platforms.

• Clinical data is stored in compliance with PIPEDA and, where applicable, HIPAA (for U.S. clients)

• All sessions, forms, and interactions are encrypted end-to-end

• Access is restricted to authorized personnel only

👥 6. Disclosure of Information

We do not sell or rent your personal information. We may share information only with:

• Licensed professionals or coaches within Aurora

• Third-party processors (e.g., payment gateways, secure video platforms)

• Regulators or legal authorities when required by law

All third parties are contractually obligated to maintain confidentiality and data protection standards.

📅 7. Data Retention

We retain your data only as long as necessary:

• For active clients: for the duration of your service relationship

• For former clients: for 7 years post-termination (in accordance with regulatory standards)

• You may request deletion of non-clinical data at any time

✉️ 8. Access & Correction

You may request access to your personal data, or ask us to correct inaccurate information by contacting privacy@aurorawellnesscollective.ca. We will respond within 30 days.

👁️ 9. Cookies & Digital Tracking

Our website uses cookies for functionality, analytics, and personalization. You can manage cookie preferences in your browser settings.

🌐 10. International Users & HIPAA Compliance

While Aurora is a Canadian company, we may serve clients located in the U.S. For any client receiving therapy or coaching governed under HIPAA, we ensure compliance by:

• Using HIPAA-compliant data storage tools

• Obtaining HIPAA-compliant consent forms

• Limiting disclosures to covered entities and authorized individuals only

✉️ 11. Contact Us

For privacy-related questions, corrections, or concerns:

Privacy Officer
Aurora Wellness Collective Inc.
Email: privacy@aurorawellnesscollective.ca

📖 12. Updates to this Policy

This policy may be updated periodically. We will notify users of material changes through our website or by email.

Last reviewed: April 2025

This Privacy Policy complies with Canada’s PIPEDA, Ontario's health privacy laws, and incorporates key elements of HIPAA for U.S.-based service delivery.