Privacy Policy

We collect only what a form asks for. There is no tracking pixel, no advertising identifier, and no profile built about you across visits.

When you request a resource

• Your name, work email address, and organization.
• Your role and, if you choose to give it, your organization type.
• What you are working on, if you choose to tell us.
• The date, time, and IP address of the submission.

When you write to us

• Your name, email address, and organization if you give one.
• Whatever you put in the message.
• The date, time, and IP address of the submission.

When you simply read the site

• An aggregate page view, recorded by Plausible without cookies and without anything that identifies you or your device.
• Standard server and security logs held briefly by our host and by Cloudflare, including IP address, so we can keep the site up and keep bots off the forms.

• To send you the resource you asked for.
• To reply to your message.
• To decide what to publish next. Knowing what readers are working on is how we choose the next article and the next resource.
• To keep the site available and to stop automated abuse of the forms.

We do not sell personal information, we do not rent or share mailing lists, and we do not use anything collected here for advertising.

DEXPRA does not ask for, and this site is not built to receive, personal health information. Please do not include patient data in a form or an email to us.

You give consent by filling in a form and ticking the box beside it. Every box starts unchecked, and it covers one purpose only: asking for a resource sends you that resource, and nothing else. We run no mailing list and send no marketing.

You can withdraw consent at any time. Tell us what to stop through the contact form and we will action it within 10 business days at the latest, and usually the same day.

These are every third party that handles information from this site. Each one is bound by its own agreement with us to process it only as we instruct.

If we add or replace a provider, this table changes before the provider starts handling anything.

We keep personal information for as long as it serves the purpose it was collected for, and then we delete it.

Ask us to delete something sooner and we will, unless a law requires us to keep it.

Most of our providers operate in the United States, so information you give us is stored and processed outside Canada. While it is there it is subject to the laws of that country, including lawful access by its courts and government agencies.

We tell you this because Canadian privacy law expects you to know it before you decide whether to fill in the form.

This site sets no cookies. There is nothing to consent to, which is why you were not shown a banner.

Our analytics provider, Plausible, counts page views without cookies and without storing anything that identifies a visitor or a device. We see how many people read an article. We cannot see who.

The site is served over HTTPS. Form contents are never written to our logs or sent to analytics: a message you write reaches the mailbox it was addressed to and nowhere else. Access to that mailbox is limited to people who need it.

No system is perfect. If we discover a breach that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada, as PIPEDA requires.

Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) you can ask us what personal information we hold about you, ask for a copy of it, ask us to correct it if it is wrong, and ask us to delete it.

How to ask

Send us a message with “Privacy request” in it, and tell us which of the above you want. Write from the address you gave us, or tell us which address to look under, so we can find the right record without asking you for more information than we already hold.

We respond within 30 days. If we need longer we will tell you why before that deadline passes, and if we refuse a request we will tell you the reason and how to challenge it.

If you are not satisfied

Write to us first so we have a chance to fix it. If that does not resolve it, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

This site is written for people working in healthcare technology. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe we have, tell us and we will delete it.

When this policy changes we update the effective date at the top of the page. If a change materially affects how we handle information you have already given us, we will say so by email to the address we hold, rather than relying on you to notice a new date.

Privacy questions, access requests, and corrections all go to the same place: the contact form. It reaches a person, and we do not publish a mailbox address on this site.

The terms that apply to reading this site and using its resources are in our Terms of Use.

DEXPRA
Ontario, Canada