Verify Diagnostics Business & Website Privacy Policy
Last updated: October 25, 2026
1. Who we are and which activities this policy covers
Verify Diagnostics Inc. (“Verify,” “we,” “us” or “our”) operates verifydiagnostics.com and vericheck.ca and owns the VeriCheck brand. Our address is 122 Commerce Park Dr., Unit D, Barrie, Ontario L4N 8W8, Canada.
This policy explains how we handle personal information in our general business and website activities: product and service enquiries, quotations, customer and distributor relationships, sales, delivery, customer support, product-quality enquiries, marketing communications and visits to these two websites (the “Websites”). It covers these interactions whether they occur online, by email, by telephone or through other ordinary business channels. Descriptions of optional website functions apply when you use a function that is available.
A separate policy applies to the VeriCheck app
The VeriCheck App Privacy Policy covers the VeriCheck mobile application, its accounts, collection records, donor information and optional encrypted cloud backup. That policy, not this general business policy, explains the app’s Google Sign-In, regional storage, recovery keys and in-app deletion controls.
This policy does not expand the purposes for which VeriCheck app information may be used or change the app’s privacy commitments. App support requests involving an app account or collection record remain subject to the app policy. Visiting either Website does not enable app backup or authorize access to a Google account.
Separate testing programmes, laboratory or clinical services, training platforms, employment relationships and other applications may require additional or separate notices. This policy does not replace those notices or authorize the collection of a person’s testing or health records through an ordinary business enquiry.
2. Information we handle and why
We collect information reasonably needed for the relevant interaction. Personal information includes information that identifies a person or can reasonably be linked to them, including business contact information where applicable privacy law protects it.
| Activity | Information involved | Main purposes |
|---|---|---|
| Enquiries, quotations and support | Name, business affiliation, email address, telephone number and the information you provide in a message or conversation | Answer questions, prepare quotations, provide assistance and keep relevant correspondence |
| Customer relationships and orders | Contact information, billing and delivery addresses, products and quantities, order history, invoices, payment status and transaction references | Fulfil orders, arrange delivery, administer payments and returns, provide service and maintain business records |
| Distributor or supplier relationships | Organization and representative details, business addresses and application or relationship information | Assess applications, communicate and administer the relationship |
| Product-quality or safety enquiries | Contact and product details, batch or lot information, and relevant information you provide about a complaint or incident | Investigate concerns, coordinate with relevant suppliers or authorities and meet applicable product-quality or safety duties |
| Newsletters and marketing | Contact details, subscription choices, consent records and unsubscribe preferences | Send communications we are permitted to send and respect your choices |
| Website use | IP address, browser and device information, requested pages, referring information, request times and related cookie or session identifiers | Deliver and protect the Websites, operate their features, troubleshoot and understand website visits |
| Public comments, where enabled | Submitted comment, display name, email address and any optional website address | Publish and moderate the comment and respond where appropriate |
| Privacy requests | Contact details, the request and proportionate identity or authorization information | Verify and respond to the request and document our handling of it |
Information comes primarily from you and your use of the Websites. We may also receive relevant information from the organization you represent, an authorized representative, or providers helping complete a requested transaction or service.
Sending an enquiry does not automatically subscribe you to unrelated marketing. We do not ask for identification documents, health records or other sensitive information merely to answer an ordinary product question.
Payments and public submissions
Payment information is handled through the payment arrangement used for the purchase. We use the transaction and billing information necessary for payment administration, invoicing, refunds and financial records. Do not send full card numbers, card security codes or banking credentials through an ordinary enquiry form or email; contact us for the appropriate payment channel.
Information posted in a public comment can be viewed or copied by others. Do not include donor information, test results or confidential material in public comments. Contact us about an inappropriate disclosure; copies held independently by others may be outside our control.
3. Sensitive information and testing records
Ordinary website forms, distributor applications and newsletter subscriptions are not intended for donor identification, test results, medical histories, identification-document images, passwords or backup recovery keys.
When assistance genuinely requires sensitive information, contact us first without including that information. We will identify the appropriate authorized process and the notice that applies. We limit sensitive information to what is necessary for that process and obtain the consent or other legal authority required for it.
For VeriCheck app records, the collecting organization determines the testing purposes, authorized recipients and applicable retention obligations. Verify’s role is described in the app policy. Each party remains responsible for its own legal obligations.
This policy does not itself establish consent to testing, HIPAA compliance or compliance with a provincial health-information law. Any required service-specific consent, authorization, safeguards and processing agreements must be in place.
4. Cookies, website technologies and privacy choices
The Websites use cookies and similar technologies to support website operation, security, preferences, forms and purchasing features where available, and to understand visits. A cookie is a small piece of information stored by a browser. Website requests can also disclose technical information to the providers that deliver the page or a feature, whether or not a cookie is stored.
These activities can involve IP addresses, browser or device information, session identifiers, pages visited, referral information and interaction times. Information linked to a browser or device is not necessarily anonymous merely because it omits a person’s name.
An embedded service can receive information when it loads and additional information when you use it. For example, the distributor application on verifydiagnostics.com uses a Zoho-hosted form. Information submitted through that form is used to handle the application. A link to a separate website is different from an embedded service: the separate website’s operator is responsible for its own practices, while we remain responsible for disclosures that we make or authorize.
Your choices
You can review and delete browser cookies, restrict cookies through browser settings, and choose not to use an optional embedded feature. Blocking technologies necessary for a requested function may prevent that function from working. Browser controls do not necessarily stop server-side processing or every disclosure to a provider.
Contact our Privacy Officer for information about the technologies involved in a particular website interaction and to exercise any applicable objection or opt-out right. When optional processing requires consent, we must obtain that consent before the processing; publication of this policy is not a substitute for that choice.
Browser signals: A browser’s “Do Not Track” setting and a legally recognized opt-out preference signal, such as Global Privacy Control, are different mechanisms. Do not assume that changing a browser setting stops every website disclosure. We will honour legally applicable opt-out requests and recognized preference signals as required by law; browser controls and email requests do not replace any consent or automated signal handling the law requires us to provide.
The app’s no-advertising and no-product-analytics statements apply to the app. They should not be read as a description of every technology used on these Websites. Website cookie choices do not enable or disable app backup, and choices on one domain do not necessarily carry over to the other domain.
5. Marketing communications
We send promotional communications only where we have the consent or other permission required by applicable law. A website visit, product enquiry or acceptance of app terms is not blanket consent to unrelated marketing.
You may unsubscribe through a marketing message or contact [email protected]. We process unsubscribe requests without delay and within the legally required period, including no later than 10 business days where Canada’s anti-spam legislation applies.
Unsubscribing does not prevent necessary non-marketing communications about a request you made, an order, an active service, product safety, account security or a legal requirement. We keep limited consent and suppression records where needed to document permission and avoid sending unwanted marketing.
6. Service providers and other disclosures
We disclose information only for the purposes described in this policy or another purpose for which the necessary consent or legal authority exists.
Depending on the interaction, recipients include website hosting and security providers; form, email and customer-management providers; payment processors; delivery carriers; distributors, suppliers or manufacturers involved in fulfilling an order or addressing a product concern; and professional advisers. We limit the information to what is appropriate for the recipient’s role. Zoho processes the distributor-form information described above.
Providers processing information on our behalf must protect it, use it only for authorized purposes and comply with applicable contractual and legal requirements. We use contractual and other appropriate measures to require a comparable level of protection and remain responsible for obligations that apply to our use of service providers. When a recipient acts independently, its own legal obligations and privacy notice also apply.
We may also disclose relevant information to a recipient you authorize; to the organization you represent where appropriate for its requested business activity; to comply with lawful process; or to address fraud, security incidents, safety risks or legal claims where permitted by law.
A proposed or completed business transaction, such as a merger or transfer of assets, may involve limited disclosure subject to legally required confidentiality, purpose restrictions and notices. This is not permission to use information for unrelated purposes.
We do not sell or rent customer contact lists for money. U.S. privacy laws can define “sale,” “sharing” or “targeted advertising” more broadly than selling a list. Where those laws apply to an activity, applicable disclosure, consent and opt-out requirements must be met. This section does not authorize the sale of VeriCheck app information or use of donor records for advertising.
7. Processing locations
Website and ordinary business information may be handled across borders through hosting, communications, forms, payments and other providers. Its storage and processing locations depend on the particular service and provider arrangement; this general business policy does not promise that all such information remains in the person’s country or that these systems follow the app’s regional arrangement.
When information is processed outside your jurisdiction, the laws and lawful access powers of that jurisdiction may apply. We use appropriate contractual and other safeguards and meet applicable requirements for cross-border processing. Contact our Privacy Officer for information about providers and locations relevant to your interaction.
VeriCheck app storage is different: the app policy describes Canadian datacentres for Canadian customers’ regional application data and encrypted backups, and U.S. datacentres for the corresponding U.S. customer data. It separately explains authentication and other processing outside that arrangement. Do not apply those app commitments to website logs, business emails or other systems covered by this policy.
8. Safeguards and incidents
We use administrative, technical and physical safeguards appropriate to the information and its sensitivity, including appropriate access restrictions and provider arrangements. No system can guarantee that all incidents will be prevented. That limitation does not reduce our obligation to implement appropriate safeguards.
If an incident occurs, we assess it, take appropriate response measures and make legally required notifications and reports. We may cooperate with affected customers, providers and authorities as appropriate and permitted by law.
Contact our Privacy Officer promptly about a suspected compromise. Do not send passwords, recovery keys or unnecessary sensitive records in the initial message.
9. Retention and deletion
We keep information only as long as reasonably necessary for its stated purpose and applicable legal, accounting, security and dispute-resolution requirements.
| Information | Retention approach |
|---|---|
| Enquiries and support correspondence | Retained while needed for the request, relevant follow-up and associated lawful obligations |
| Customer, order and financial records | Retained for the relationship, transaction administration and applicable recordkeeping requirements |
| Product-quality or safety records | Retained for investigation, traceability and any applicable regulatory obligations |
| Distributor and supplier records | Retained for assessment and administration of the relationship and associated lawful obligations |
| Marketing consent and suppression records | Limited records retained as needed to document consent and respect an unsubscribe request |
| Website and security records | Retained according to operational and security needs, sensitivity and relevant incident investigations |
| Privacy-request records | Retained as needed to handle the request and document legally required compliance |
We delete, securely dispose of or appropriately de-identify information when it is no longer needed. Residual provider or backup copies may be removed through their applicable deletion cycles and remain protected during that period. Legal preservation requirements can delay deletion of relevant information.
The app has separate retention and deletion rules. In-app account deletion does not erase independently required invoices or unrelated business records merely because the same person is also a business customer. Conversely, ordinary business retention is not a justification to keep app information that the app policy requires us to delete.
10. Your rights, requests and complaints
Depending on the law that applies, you may have rights to access personal information, obtain a copy, correct inaccuracies, request deletion, withdraw consent, object to or restrict specified processing, or opt out of certain selling, sharing or targeted advertising. Applicable conditions and exceptions, including lawful retention duties, may limit a request.
Send requests to our Privacy Officer using section 14. Describe the interaction involved and the action requested. Authorized representatives may make requests where permitted. We may verify identity and authority using proportionate information, but do not request unnecessary sensitive records.
We respond within the applicable legal period, explain any lawful extension or refusal, and provide available review or appeal information. We do not unlawfully discriminate against someone for exercising privacy rights. Where a right of appeal applies, contact our Privacy Officer with the subject “Privacy appeal” to request review of the decision.
Withdrawing consent does not undo earlier lawful processing. It may affect a service that genuinely requires the information. We will explain relevant consequences and any continuing legal retention requirement.
For donor testing records, the collecting organization is generally the first contact. We will handle information within our responsibility and assist with requests concerning information processed on behalf of a customer as required by our role and law.
You may complain to the Office of the Privacy Commissioner of Canada, an applicable provincial privacy authority, or the appropriate U.S. privacy or consumer-protection regulator. Contacting us does not prevent a regulatory complaint. Contract terms do not waive privacy rights or obligations that cannot legally be waived.
11. Children and young people
The Websites and business enquiry channels are intended for adults and professional or organizational users, not children under 13. We do not knowingly solicit personal information directly from children under 13 through ordinary website forms. Contact our Privacy Officer if you believe a child has provided such information so that we can assess and address it.
This does not mean that every authorized service excludes information about minors. Any lawful handling of a minor’s testing information requires the authority, notice, consent and safeguards applicable to that service and person; it is not authorized by a general website visit.
12. Relationship to other documents
The VeriCheck App Privacy Policy governs app information. The VeriCheck App Terms & Conditions separately govern the app contract, including customer security responsibilities and indemnification.
This business privacy policy is a notice of information practices, not a mechanism for imposing the app’s indemnity on website visitors. It does not replace a required data-processing agreement or health-information agreement.
13. Changes to this policy
We identify revisions by updating the date above. Material changes receive appropriate additional notice, such as a website notice or a direct communication. Before making a materially different use of information, we obtain any additional consent required by law. Merely posting a new policy is not a substitute for that consent.
14. Contact our Privacy Officer
Verify Diagnostics Inc. — Privacy Officer
122 Commerce Park Dr., Unit D
Barrie, Ontario L4N 8W8, Canada
Telephone: +1 705-812-4957 or 1-866-446-2953.