Privacy

Pharmacist Hub is operated from Ontario, Canada, and is accountable for the information described here under the Personal Information Protection and Electronic Documents Act.

Questions, requests and complaints go to the Privacy Officer at hello@pharmacisthub.ca, which reaches the person accountable directly. The operator is named in full in the terms of use.

Nothing in this service asks for or accepts patient names, health numbers, prescriptions or clinical details. It records that you worked a shift and what you are owed for it. Please keep it that way: the free text boxes for notes are not a safe place for anything about a patient, and personal health information carries obligations under Ontario’s Personal Health Information Protection Act that this service is not built to meet.

Pharmacist Hub is for working pharmacists and is not intended for anyone under 18. Nothing here is knowingly collected from a child. If you believe a minor has created an account, write to hello@pharmacisthub.ca and it will be deleted.

Your account, so you can sign in:

• Your email address.
• A cryptographic hash of your password. The password itself is never stored and cannot be recovered from the hash.
• If you turn on two-factor authentication, the shared secret for your authenticator app, and hashes of your recovery codes.

Your profile, because it is what appears on an invoice:

• Your name, business name and billing address.
• Your email and phone number.
• Your registration number with your college, if you choose to enter it.
• Your GST/HST number, tax settings, default rates and invoice preferences.

The work you record:

• Shifts: date, start and end times, breaks, hours, rate, any premium, mileage and your notes.
• Invoices: numbers, dates, line items, totals, tax, status, and a snapshot of the billing details as they stood when the invoice was issued.
• Expenses: date, category, description, amount and tax.
• Continuing education: course name, provider, hours and whether it was accredited.
• Pharmacies you bill: name, contact person, email, phone, address, purchase order and payment terms.

No files are stored. There is no upload for receipts, logos or documents, so nothing of that kind is held on your behalf.

Note the pharmacy contacts in that list. Those details are about other people, and you are the one who collected them. Handle them as you would any client record.

To run the service you asked for, and nothing else: signing you in, keeping your records, calculating totals, producing invoices, and sending the small number of emails the service depends on, which are confirming your address and resetting your password.

Your records are not used to train models, not sold, not rented, and not shared with advertisers. There is no advertising here and no tracking of you across other sites.

Only the ones the service cannot work without: confirming your address when you sign up, and resetting your password when you ask. There is no newsletter, no product announcements and no marketing, so there is nothing to unsubscribe from.

If that ever changes, Canada’s anti-spam law requires your express consent before a promotional message is sent, and you would be asked first rather than opted in by default. Consent, once given, can be withdrawn in any message or by writing to hello@pharmacisthub.ca.

The database is hosted by Supabase in Amazon’s Canadian region (ca-central-1). Your records are encrypted in transit and at rest, and the database enforces at the row level that one account cannot read another’s data.

Four suppliers are involved in running the service:

• Supabase hosts the database and handles sign-in. Data is stored in Canada.
• Cloudflare serves the site and provides visitor counts. The analytics are aggregate and cookieless, and do not identify you.
• Resend delivers the confirmation and password reset emails. It receives your email address and the contents of those messages. It processes data in the United States.
• Google provides the address lookup on the pharmacy and profile forms. When you type in an address field, the text you type is sent to Google to return suggestions. If you would rather it were not, type the address without using the suggestions.

The last two mean some information is processed outside Canada, where it may in principle be reached by foreign courts and authorities. That is limited to your email address and any address text you type. Your shifts, invoices, expenses and income figures stay in Canada.

If Pharmacist Hub is ever sold or transferred, your records would move with it, because they are what the service is. You would be told before that happened, not after, and a buyer would be bound by this policy as it stands until you were given notice of any change and a chance to leave.

Your records would not be sold separately from the service itself. A pharmacist’s billing history is not a product, and it will not be treated as one.

Your records are kept for as long as your account exists, because they are the records you are relying on. Delete your account and they are removed. See deleting your account for exactly what happens and what to do first.

One thing worth knowing before you delete anything: the Income Tax Act requires you, not this service, to keep your business records for six years from the end of the tax year they relate to. Export before you delete.

You have the right to:

• See what is held about you. Most of it is already visible in the app, and the shifts and year-end pages will export it as a spreadsheet at any time.
• Correct anything wrong. Every field can be edited directly.
• Take your data elsewhere. The CSV exports are yours, in a format any spreadsheet or accountant can read.
• Delete everything, without giving a reason.
• Withdraw consent, which in practice means deleting your account, since the records are the service.

Ask by email and you will get an answer within 30 days, which is what the law allows; in practice it will be much sooner.

Traffic is encrypted with TLS and the site refuses plain HTTP. Passwords are hashed. Two-factor authentication is available and, once you switch it on, is enforced at every sign-in. The database refuses cross-account reads at the row level rather than relying on the application to ask the right question.

No service can promise it will never be breached. If one happens that creates a real risk of significant harm to you, you will be told at the first reasonable opportunity, and so will the Privacy Commissioner, as PIPEDA requires.

Every breach of security safeguards is written down and kept for at least 24 months, including the small ones judged not to warrant telling anyone. That record exists whether or not a breach is ever reportable, and the Commissioner may ask to see it.

Raise it at hello@pharmacisthub.ca first. If that does not resolve it, you can complain to the Office of the Privacy Commissioner of Canada, which can investigate independently and is not connected to this business:

Office of the Privacy Commissioner of Canada
30 Victoria Street, Gatineau, Quebec K1A 1H3
1-800-282-1376 · priv.gc.ca

If this policy changes in a way that affects what is collected or who it is shared with, you will be told by email before it takes effect, not by a quietly edited date at the top of the page.