1. Our Commitment to Privacy

Heal-3 Inc. (“Heal-3”, “we”, “us”, “our”) is committed to protecting the privacy, security, and dignity of everyone who engages with our programs and research. We comply with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and all applicable provincial privacy laws, including Alberta's Personal Information Protection Act (PIPA), British Columbia's PIPA, and Quebec's Law 25.

Our mission is to improve workplace mental health and psychological safety through evidence-based programs, diagnostics, and technology innovations such as Thrive.

2. Information We Collect

We collect only the information necessary to operate our programs and services, including:

• Contact information: name, email address, phone number, organization or employer;
• Professional information: role, sector, or participation in Heal-3 programs and research;
• Program and wellness data: survey responses, peer-support feedback, or voluntary metrics from wearable devices (e.g., heart-rate variability, sleep duration, activity levels);
• Website and technical data: IP address, device type, browser, and engagement statistics for security and improvement purposes.

We do not collect diagnostic or medical-treatment data unless explicitly authorized for a defined research purpose.

3. Purpose of Collection

Personal information is collected and used to:

• Deliver, evaluate, and enhance Heal-3 programs, workshops, and research;
• Communicate with participants, clients, and partners;
• Conduct aggregated, anonymized analysis to inform policy and prevention strategies;
• Maintain and secure our digital platforms; and
• Comply with legal and regulatory requirements.

We do not sell, trade, or rent personal information under any circumstances.

4. Consent

We collect, use, and disclose personal information only with informed consent or as otherwise authorized by law. Consent may be given in writing, electronically, or verbally and is always obtained before collecting sensitive information. You may withdraw consent at any time by contacting info@heal-3.com, subject to legal or contractual limitations.

5. Disclosure to Third Parties

Heal-3 will never disclose personal information without an individual's informed consent and knowledge, unless required by law. When disclosure is necessary and consented to, it will be limited to the minimum information needed for the intended purpose.

We may share information with:

• Authorized service providers (e.g., secure data-storage or communications platforms), bound by strict confidentiality agreements;
• Research or funding partners, using anonymized or aggregated data only; and
• Regulatory or legal authorities, but only when legally compelled.

All personal data are stored securely on servers located in Canada or in jurisdictions with equivalent privacy protections.

6. Data Security

We apply administrative, technical, and physical safeguards to protect all personal information against loss, theft, unauthorized access, disclosure, or misuse.

Only trained Heal-3 personnel and authorized contractors who require access to perform their duties can view identifiable data.

7. Retention and Destruction

Personal information is retained only as long as necessary to fulfill its purpose or as required by law. When data are no longer required, they are permanently and securely destroyed or anonymized.

8. Your Rights

You have the right to:

• Access your personal information;
• Request corrections to ensure accuracy and completeness;
• Receive information on how your data have been used or disclosed; and
• Withdraw consent or request deletion of your data (subject to legal requirements).

Requests can be made in writing to info@heal-3.com.

9. Accountability and Oversight

Heal-3 has appointed a Privacy Officer responsible for ensuring compliance with federal and provincial privacy laws.

If you are not satisfied with our response to a privacy concern, you may contact the appropriate privacy authority:

10. Updates to This Policy

Heal-3 may update this Privacy Policy from time to time to reflect new practices or regulatory changes. The latest version will always be available at www.heal-3.com/privacy-policy. We encourage you to review it regularly to stay informed about how we protect your information.