privacy policy
Heartsbloom is committed to protecting your privacy. To better protect your privacy we provide this notice explaining our online information practices. To make this notice easy to find, we make it available on our website. htpps://heartsbloom.com. Welcome to our Privacy Policy. Your privacy is critically important to us.
It is Heartsbloom’ policy to respect your privacy regarding any information we may collect while operating our website. This Privacy Policy applies to www.heartsbloom.com (hereinafter, “us”, “we”, or “www.heartsbloom.com”). We respect your privacy and are committed to protecting personally identifiable information you may provide us through the Website. We have adopted this privacy policy (“Privacy Policy”) to explain what information may be collected on our Website, how we use this information, and under what circumstances we may disclose the information to third parties. This Privacy Policy applies only to information we collect through the Website and does not apply to our collection of information from other sources.
This Privacy Policy, together with the Terms and Conditions, Terms of Use, and Disclaimer posted on our Website, set forth the general rules and policies governing your use of our Website. Depending on your activities when visiting our Website, you may be required to agree to additional terms and conditions.
1. PRIVACY POLICY EFFECTIVE FOR CANADA
2. LINKS TO EXTERNAL SITES
Our Services may contain links to external sites that are not operated by us. If you click on a third party link, you will be directed to that thrid party’s site. We strongly advise you to review the Privacy Policy and terms and conditions of every site you visit. We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites, products or services.
3. PERSONAL INFORMATION?
A. What is Personal Information?
For the purposes of this Privacy Policy, personal information is any information about an identifiable individual, other than the person’s business title or business contact information when used or disclosed for the purposes of business communications.
B. Website Visitors.
Like most website operators, Heartsbloom collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. Heartsbloom’s purpose in collecting non-personally identifying information is to better understand how Heartsbloom’s visitors use its website. From time to time, Heartsbloom may release non- personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website. Heartsbloom also collects potentially personally-identifying information like Internet Protocol (IP) addresses for logged-in users and for users leaving comments on https://heartsbloom.com blog posts. Heartsbloom only discloses logged-in user and commenter IP addresses under the same circumstances that it uses and discloses personally-identifying information as described below.
C. What Personally-Identifying Information Do We Collect?
Certain visitors to Heartsbloom’s websites choose to interact with Heartsbloom in ways that require Heartsbloom to gather personally identifying information. The amount and type of information that Heartsbloom gathers depend on the nature of the interaction. For example, we ask visitors who sign up for a blog at https://heartsbloom.com to provide a username and email address. In general, we collect and maintain different types of personal information in respect of the individuals with whom we interact.
This includes:
• contact and identification information, such as your name, address, telephone number and e- mail address;
• product and service related information concerning the products and services that we provide to, or receive from, you;
• credit and financial information such as your payment preferences; and
• business relationship information, including information related to your agreements, preferences, advisors and decision-makers, feed-back and information requested by or provided to you.
We may also collect market-related information, which may include personal information, concerning market trends and activities impacting our business. This information may include contract terms, financial information and other information for the purpose of market analysis and strategic planning. We may also collect information related to our media, investor and public relations activities and information related to our interactions with financial and other analysts and advisors.
As a general rule, Heartsbloom collects personal information directly from you. In most circumstances where the personal information that we collect about you is held by a third party, we will obtain your permission before we seek out this information from such sources (such permission may be given directly by you or implied from your actions).
From time to time, we may utilize the services of third parties in our business and may also receive personal information collected by those third parties in the course of the performance of their services for us or otherwise. Where this is the case, we will take reasonable steps to ensure that such third parties have represented to us that they have the right to disclose your personal information to us. Where permitted or required by applicable law or regulatory requirements, we may collect information about you without your knowledge or consent.
Heartsbloom may collect statistics about the behavior of visitors to its website. Heartsbloom may display this information publicly or provide it to others. However, Heartsbloom does not disclose your personally-identifying information.
E. Why Do We Collect Personally-Identifying Information?
Heartsbloom collects personal information to enable us to manage, maintain, and develop our business and operations, including:
• To establish, maintain and manage our relationship with you so that we may provide you with, or receive from you, the products and services that have been requested;
• To be able to review the products and services that we provide to you so that we may understand your requirements for our products and services and so that we may work to improve our products and services;
• To be able to review the products and services that we obtain from you so that we may work with you and so that you may understand our requirements for such products and services;
• To be able to comply with your requests (for example, if you prefer to be contacted at a business or residential telephone number and advise us of your preference, we will use this information to contact you at that number); • To protect us against error, fraud, theft and damage to our goods and property;
• To enable us to comply with applicable law or regulatory process; and
• Any other reasonable purpose to which you consent.
F. How Do We Use and Disclose Your Personal Information?
We may use or disclose your personal information:
• For the purposes described in this Privacy Policy; or
• For any additional purposes for which we have obtained your consent to the use or disclosure of your personal information.
We may use or disclose your personal information without your knowledge or consent where we are permitted or required by applicable law or regulatory requirements to do so.
G. When do we Disclose Your Personal Information?
We may share your personal information with our employees, contractors, consultants and other parties who require such information to assist us with managing our relationship with you, including: third parties that provide services to us or on our behalf; third parties that assist Heartsbloom in the provision of services to you; and third parties whose services we use to conduct our business. In addition, personal information may be disclosed or transferred to another party during the course of, or completion of, a change in ownership of or the grant of a security interest in, all or a part of Heartsbloom or its affiliates through, for example, an asset or share sale, or some other form of business combination, merger or joint venture, provided that such party is bound by appropriate agreements or obligations and required to use or disclose your personal information in a manner consistent with the use and disclosure provisions of this Privacy Policy, unless you consent otherwise. Further, your personal information may be disclosed:
• As permitted or required by applicable law or regulatory requirements;
• To comply with valid legal processes such as search warrants, subpoenas or court orders;
• As part of Heartsbloom regular reporting activities to its affiliates;
• To protect the rights and property of Heartsbloom;
• During emergency situations or where necessary to protect the safety of a person or group; • where the personal information is publicly available; or with your consent.
H. Protection of Certain Personally-Identifying Information
Heartsbloom discloses potentially personally identifying and personally-identifying information only to those of its employees, contractors and affiliated organizations that:
• need to know that information in order to process it on Heartsbloom’s behalf or to provide services available at Heartsbloom’s website, and
• That have agreed not to disclose it to others. Some of those employees, contractors and affiliated organizations may be located outside of your home country; by using Heartsbloom’s website, you consent to the transfer of such information to them.
Heartsbloom will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to its employees, contractors and affiliated organizations, as described above, Heartsbloom discloses potentially personally-identifying and personally-identifying information only in response to a subpoena, court order or other governmental requests, or when Heartsbloom believes in good faith that disclosure is reasonably necessary to protect the property or rights of Heartsbloom, third parties or the public at large.
If you are a registered user of https://heartsbloom.com and have supplied your email address, Heartsbloom may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with Heartsbloom and our products. We primarily use our blog to communicate this type of information, so we expect to keep this type of email to a minimum. If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users. Heartsbloom takes all measures reasonably necessary to protect against the unauthorized access, use, alteration or destruction of potentially personally-identifying and personally-identifying information.
I. Your Consent is Important to Us
It is important to us that we collect, use or disclose your personal information where we have your consent to do so. Depending on the sensitivity of the personal information, your consent may be implied, deemed (using an opt-out mechanism) or express. Express consent can be given orally, electronically or in writing. Implied consent is consent that can reasonably be inferred from your action or inaction. For example, when you enter into an agreement with us, we will assume your consent to the collection, use and disclosure of your personal information for purposes related to the performance of that agreement and for any other purposes identified to you at the relevant time.
Typically, we will seek your consent at the time that we collect your personal information. In certain circumstances, your consent may be obtained after collection but prior to our use or disclosure of your personal information. If we plan to use or disclose your personal information for a purpose not previously identified (either in this Privacy Policy or separately), we will endeavor to advise you of that purpose before such use or disclosure. As we have described above, we may collect, use or disclose your personal information without your knowledge or consent where we are permitted or required to do so by applicable law or regulatory requirements.
J. Choice to Opt-Out
You may change or withdraw your consent at any time, subject to legal or contractual obligations and reasonable notice, by contacting hello@heartsbloom.com. All communications with respect to such withdrawal or variation of consent should be in writing. We assume that, unless you advise us otherwise, you have consented to the collection, use and disclosure of your personal information as explained in this Privacy Policy.
K. Updating Your Personal Information
It is important that the information contained in our records is both accurate and current. If your personal information happens to change during the course of our relationship, please keep us informed of such changes. In some circumstances, we may not agree with your request to change your personal information and will instead append an alternative text to the record in question.
L. Access to Your Personal Information
You can ask to see your personal information. If you want to review, verify or correct your personal information, please contact hello@heartsbloom.com. Please note that any such communication must be in writing. When requesting access to your personal information, please note that we may request specific information from you to enable us to confirm your identity and right to access, as well as to search for and provide you with the personal information that we hold about you. We may charge you a fee to access your personal information; however, we will advise you of any fee in advance.
Your right to access the personal information that we hold about you is not absolute. There are instances where applicable law or regulatory requirements allow or require us to refuse to provide some or all of the personal information that we hold about you. In addition, the personal information may have been destroyed, erased or made anonymous in accordance with our record retention obligations and practices. In the event that we cannot provide you with access to your personal information, we will endeavor to inform you of the reasons why, subject to any legal or regulatory restrictions.
4. SECURITY
This Site has security measures in place to protect against the loss, misuse or alteration of the information under our control. If our site allows you to enter sensitive information (such as a credit card number) on order firms, we encrypt the transmission of that information using secure socket layer technology (SSL).
We may also at times provide information about you to third parties to provide various services on our behalf, such as providers who process credit card payments. We will only share information about you that is necessary for the third party to provide the requested service. These companies are prohibited from retaining, sharing, buying, selling, storing or using your personally identifiable information for any secondary purposes.
We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is one hundred percent (100%) secure, however. Therefore, we cannot guarantee its absolute security.
5. ADVERTISING
Ads appearing on our website may be delivered to users by advertising partners, who may set cookies. These cookies allow the ad server to recongize your computer each time they send you an online advertisement to compile information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they belive will be of most interest to you. This Privacy Policy covers the use of cookies by Heartsbloom and does not cover the use of cookies by an advertisers (SSL)
6. GOOGLE ANALYTICS AND COOKIES
We may use a tool called “Google Analytics” to collect information about use of this Site, such as how often users visit the Site, what pages they visit when they do so, and what other sites they used prior to coming to this Site. Google Analytics collects only the IP address assigned to you on the date you visit this Site, rather than your name or other identifying information.
Google Analytics plants a permanent cookie on your web browser to identify you as a unique user the next time you visit this Site. A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. This cookie cannot be used by anyone but Google, Inc. The information generated by the cookie will be transmitted to and stored by Google on servers in the United States.
We use the information received from Google Analytics only to improve services on this Site. We do not combine the information collected through the use of Google Analytics with personally identifiable information.
Google’s ability to use and share information collected by Google Analytics about your visits to this Site is restricted by the Google Privacy Policy http://www.google.com/policies/privacy. You can prevent Google Analytics from recognizing you on return visits to this Site by disabling the Google Analytics cookie on your browser. By continuing to navigate our website without changing your cookie setting, you hereby acknowledge and agree to Heartsbloom’s use of cookies.
7. COLLECTION AND USE OF PERSONAL INFORMATION OF CHILDREN UNDER AGE 13
We are committed to protecting the online privacy of children. In accordance with the Children’s Online Privacy Protection Act (”COPPA”), we will not knowingly collect any personally identifiable information from children under the age of thirteen (13) without first obtaining parental consent. Prior to providing any personally identifiable information (your name, email address, address, phone number etc.), children under the age of thirteen (13) must have a parent or legal guardian complete and return (by email or regular mail) a Parental Consent Form to hello@heartsbloom.com or
Heartsbloom
398 Danforth Avenue
Toronto, ON, Canada.
The consent form states that the child’s “Parent” or “Legal Guardian”, by his or her signature, consents to the collection and transfer of the child’s personally identifiable information. Consent may be revoked by completing a “Revocation of Parental Consent Form” and sending it to the email or physical mailing address above. In compliance with COPPA, We are sensitive about children consulting with parents or guardians before furnishing personal information or ordering anything online.
It is also our intention to adhere to the Children’s Advertising Review Unit (CARU) Guidelines on Internet advertising with its special sensitivities regarding solicitations to children under thirteen (13). We encourage parents/guardians to supervise and join their children in exploring cyberspace.
8. TRANSFER OF DATA ABROAD
If you are visiting this Site from a country other than the country in which our servers are located, your communications with us may result in the transfer of information across international boundaries. By visiting this Site and communicating electronically with us, you consent to such transfers.
9. COMPLIANCE WITH LAWS AND LAW ENFORCEMENT
We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including without limitation subpoenas), to protect our property and rights or the property and rights of a third party, to protect the safety of the public or any person, or to prevent or stop activity we consider to be illegal or unethical.
To the extent we are legally permitted to do so, we will take reasonable steps to notify you in the event that we are required to provide your personal information to third parties as part of legal process.
10. CHANGES IN OUR PRACTICES
We reserve the right to modify this Privacy Policy at any time. If we decide to change our Privacy Policy, we will post those changes to this Privacy Policy and any other places we deem appropriate, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it.
If we make material changes to this Policy, we will notify you here, by email, or by means of a notice on our home page, at least thirty (30) days prior to the implementation of the changes.
11. CORRECTING, UPDATING AND REMOVING PERSONAL INFORMATION
You may alter, update or deactivate your account information or opt out of receiving communications from us at any time. You may send an email to hello@heartsbloom.com or you may send mail to Hearsbloom at
Heartsbloom
398 Danforth Avenue
Toronto, ON, Canada.
We will respond to your request for access or to modify or deactivate your information within thirty (30) days.
12. MEDICAL PRIVACY NOTICE
This Section describes how medical information about you may be used and disclosed by us and how you can get access to this information. Please review it carefully.
A. Who Will Follow This Notice?
Health care practitioners who treat you at any of our locations, including employees, volunteers, and members of our, all departments and operating units of our organization, and all medical practices operated us, other members of our workforce, and our business associates.
B. Your Medical Information
This Section refers to your “medical information”. This means all information that identifies you and relates to your past, present or future physical or mental health or condition including information about payment and billing for the health care services you receive.
C. Our Pledge Regarding Medical Information
We understand that your medical information is personal and we are committed to its protection. We create a record of the care and services you receive to ensure that we are providing quality care and to comply with legal requirements. This notice applies to all your medical information that we maintain, whether created by our staff or others.
We are required by law to give you this notice of our legal duties and privacy practices with respect to your medical information, to follow the terms of this Privacy Notice, and to notify you following a breach of the privacy or security of your unsecured medical information.
D. How We May Use and Disclose Medical Information About You
For each category of use and disclosure, we will try to give some examples, although not every use or disclosure in the category will be listed.
i. For treatment. We may use your medical information so that we and other health care providers may provide you with medical treatment or services. Different health professionals may also share your medical information in order to coordinate the different services you need. We may disclose your medical information to people outside our offices and/or locations who may be involved in your medical care after you leave our care.
ii. For Payment. We may disclose your medical information so that treatment and services you receive may be billed by us to a third party. For example, your health plan may need to know about treatment you received so they will pay us for the services provided. We may also disclose your medical insurance information to obtain prior approval from your health plan.
iii. For Healthcare Operations Purposes. We may use and disclose your medical information for our internal operations, such as business management, and administrative activities, legal and auditing functions, and insurance-related activities. We may use medical information to make sure that all of our patients receive quality care, such as reviewing our processes or to evaluate the performance of those caring for you. We may also disclose information to doctors, nurses, technicians, and other personnel for review and learning purposes. We may remove information that identifies you from this set of information so others may use it to study healthcare and healthcare delivery without learning a specific patient’s identity. Under certain circumstances, we may disclose your medical information for the health care operations of other health care providers.
iv. Health Information Exchange. We may exchange your health information electronically through among health care providers for the purposes described in this Notice. You have the right to request that your information not be included in this exchange.
v. Individuals Involved In Your Care or Payment of Your Care. We may release your medical information to a friend or family member who is involved in your medical care, or to someone who helped pay for your care.
vi. Notification. We may release your medical information to notify a family member, personal representative or another person responsible for your care of your location, general condition, or death. We also may release your medical information for certain disaster relief purposes.
vii. Contacts. We may contact you to provide appointment reminders, information about treatment alternatives, or other health related benefits and services that may be of interest to you.
viii. Worker’s Compensation. We may release medical information about you for worker’s compensation or similar programs, which provide benefits for work related injuries or illnesses.
ix. Mental Health Information. State laws create specific requirements for the release of mental health records. We will obtain your specific authorization to release mental medical information when required by these laws.
42 CFR, Part 2.
xi. Miscellaneous. We may use or disclose your medical information without your prior authorization for several other reasons. Subject to certain requirements, we may give out your medical information without prior authorization for public health purposes, abuse or neglect reporting, health oversight audits or inspections, research studies, funeral arrangements, Coroner’s investigations, organ donation, and emergencies. We also may disclose medical information when required by law in response to a request from law enforcement in specific circumstances, for specialized government functions including correctional, military or national security purposes, in response to valid judicial or administrative orders or to avoid a serious health threat. Additional specific rules may apply to mental health records.
xii. Other Disclosures. Other uses and disclosures not described above will be made only with your written authorization. For example, we require your signed authorization for uses and disclosure that constitute the sale of your medical information and for most uses and disclosures of psychotherapy notes. Additionally, we will not use or disclose your medical information for marketing purposes unless we have a signed authorization from you except that an authorization will not be required if (a) a communication occurs face-to-face; (b) consists of marketing gifts of nominal value. You may revoke your authorization at any time unless we have relied on your authorization or your authorization was required as a condition of obtaining health care services.
E. Your Rights Regarding Medical Information About You.
i. Right to Inspect and Copy. In most cases you have the right to inspect or receive a copy of your medical information (or have a copy provided to an individual whom you designate) when you submit a written request. If your medical record is maintained electronically in a designated record set, you have the right to request a copy of the information in an electronic form and format. We may deny your request in certain circumstances. If you are denied access to your medical information, you may appeal.
ii.Right to Amend. If you believe the information in your record is incorrect or incomplete, you have the right to request an addendum be added to your record by submitting a written request giving your reason. We may deny your request under certain circumstances. If we deny it, we may advise you in writing of the reason or explain your rights to submit a statement of explanation.
iii. Right to an Accounting of Disclosure. You have the right to a list of those instances where we have disclosed your medical information other than for treatment, payment, healthcare operations, or where a disclosure was specifically authorized., for the Hospital’s directory, to persons involved in your care, and certain other limited situations. To request an accounting of disclosures, you must submit a written request to our Support Department.
iv. Right to a Paper Copy of this Notice. If this notice was sent to you electronically you have a right to a paper copy of this notice. You may request that we send other communications of protected health information by alternative means, or to an alternative location. This request must be made in writing to the person listed below in
Section 13. We are required to accommodate only reasonable requests. Please specify in your correspondence exactly how you want us to communicate with you; and if you are directing us to send it to a particular place, the contact/address information.
v. Right to Request Restrictions. You may request in writing that we not use or disclose your medical information except when specifically authorized by you, when required by law, or in an emergency. Except in the case of certain requests related to disclosures to health plans, we are not required by law to agree to your request, but we will consider the request. We will inform you of our decision.
vi. Right to Request Restrictions on Disclosures to Health Plans. You may request in writing that we restrict disclosures of your medical information to a health plan for purposes of carrying out payment or healthcare operations if the disclosure is not required by law and the medical information pertains solely to a health care item or service for which you (or a person other than the health plan who is acting on your behalf) have paid us out of pocket and in full at the time of service. We must agree to a request that meets these requirements.
F. Changes to this Notice We reserve the right to change this Section at any time. Changes will apply to medical information we already hold, as well as new information after the change occurs. We will post a copy of our current notice within our facilities and we will post it on our website at
G. Complaints and Requests. If you have questions about this notice or want to talk about a problem without filing a formal complaint, please contact Heartsbloom at the following number: 1.888.964.2188. If you believe your privacy has been violated, you may file a complaint with our organization.
13. CONTACT INFORMATION
If you have any questions about this Privacy Policy, the practices of this Site or under our Services, your dealings with this Site or our Services please contact us by email or regular mail at the following address:
Heartsbloom
398 Danforth Avenue
Toronto, ON, Canada.
1.888.964.2188
hello@heartsbloom.com