Rexall.ca Cookie and Tracking Notice
Effective date: November 12, 2026 Last updated: November 3, 2026
This Notice explains how Rexall Pharmacy Group Ltd. (“Rexall,” “we,” “us” or “our”) uses cookies and similar technologies on rexall.ca and current online services where this Notice is linked, including Rexall Pharmacy.
Rexall does not operate in Quebec, and the services described in this Notice are not offered to Quebec residents.
It supplements the Rexall.ca Website Privacy Policy and the Rexall.ca Website Terms of Use. For personal health information and Pharmacy Services, also consult the Rexall Pharmacy Privacy Policy and, where applicable, the Rexall Pharmacy Terms and Conditions or the Rexall.ca Pharmacy Request Terms.
These documents are available at https://www.rexall.ca/legal. The footer on public pages links to this single legal homepage, from which users can access all legal documents.
In this Notice:
-
“Digital Property(ies)” means rexall.ca or a current online service where this Notice is linked, including Rexall Pharmacy.
-
“Pharmacist” means the pharmacist or other authorized pharmacy professional responsible for the applicable Pharmacy Service.
-
“Pharmacy” means a participating Rexall-branded pharmacy connected with or selected to provide a Pharmacy Service.
-
“Pharmacy Operator” means the applicable Rexall legal entity that operates a Pharmacy, provides Pharmacy Services and controls the Pharmacy Records held by that Pharmacy.
-
“Pharmacy Services” means the regulated pharmacy services provided by the applicable Pharmacy Operator, including dispensing, prescriptions, Pharmacist care and related services offered in person or online.
-
“Pharmacy Records” means the authoritative pharmacy patient records, including prescription information, held and controlled by the applicable Pharmacy.
-
“Pharmacy Request” has the meaning given in the Rexall.ca Pharmacy Request Terms and includes refill, renewal, prescription-transfer and Pharmacist-appointment requests submitted through rexall.ca without signing in to Rexall Pharmacy.
-
“Restricted Contexts” means authenticated Rexall Pharmacy contexts, regardless of the approved entry point, Pharmacy Request and health-assessment pages, and any page where personal health information, Pharmacy Records or sensitive health-assessment information is collected or displayed.
-
“Rexall Pharmacy” means an online service offered by the Pharmacy Operators that allows eligible individuals to connect with participating Pharmacies and access related Pharmacy Services. Rexall Pharmacy may be accessed through approved entry points under different branding and is not a Pharmacy Record.
-
“Rexall Single Sign-In” means the credential, authentication, security and related technology services operated by Rexall Pharmacy Group Ltd., including hosting, communications, access recovery and technical support, that allow the same Rexall login credentials to authenticate access to Rexall Pharmacy through approved entry points. It handles only those credentials and Registration Brand and, if you connect to a Pharmacy, Pharmacy Linkage Information solely to recognize and maintain that connection; it does not collect, hold, receive or store Pharmacy Records, prescription, dispensing or clinical information, or payment information or payment methods.
1. What technologies do we use?
Rexall uses cookies and similar digital technologies (“Tracking Technologies”) to operate and protect the Digital Properties, remember choices, understand performance and support advertising and measurement, subject to your choices and the stricter controls described in this Notice.
Depending on the Digital Property, technology and your choices, Tracking Technologies may collect device and technical information, approximate location, browsing and interaction information, and performance or error information. Their purposes and the choices available to you are described below.
2. Cookie categories
Manage Cookie Preferences groups Tracking Technologies into Strictly Necessary, Analytics and Advertising. Strictly Necessary technologies, including the limited operational functions described below for Rexall Pharmacy, are always on and cannot be turned off through Manage Cookie Preferences. Analytics and Advertising are preselected and operate unless you opt out by category. Stricter controls apply in Restricted Contexts. A technology with more than one function is subject to the most protective applicable control.
Strictly Necessary technologies
Strictly Necessary technologies support core functions such as page delivery and network operation, secure sign-in and sessions, requested transactions and forms, recording privacy choices, and fraud, security and abuse prevention. Rexall uses Google reCAPTCHA for security, fraud prevention and abuse prevention, and Google processes information resulting from its use on Rexall’s behalf as a service provider.
They cannot be turned off through Manage Cookie Preferences. Blocking them through your browser or device may prevent a Digital Property from working properly, including sign-in, secure sessions and requested pharmacy functions.
A technology is not Strictly Necessary merely because it is useful for general analytics, advertising, personalization or business improvement.
Analytics and session replay
Unless you opt out of Analytics through Manage Cookie Preferences, Analytics technologies may help us understand how users navigate the Digital Properties, identify errors, assess performance and improve accessibility or usability.
Session-replay tools, where used, operate within Analytics and may reconstruct interactions such as clicks and navigation. They are disabled in Restricted Contexts, regardless of general-site choices.
Advertising, targeted advertising and measurement
Unless you opt out of Advertising through Manage Cookie Preferences, Rexall may use Advertising technologies to deliver, measure and report on campaigns for Rexall and its advertising clients.
We will not collect, infer, disclose or use personal health information, personal financial information or highly sensitive product information for targeted or behavioural advertising, advertising audiences, unrelated commercial profiling or campaign measurement without your express consent. These categories include identifiable Pharmacy, prescription, medication, clinical and health-assessment information, and information revealing intimate lifestyle, health, political or religious details. Appropriate Analytics and Advertising technologies may operate on public informational health pages unless you opt out through Manage Cookie Preferences. Browsing those pages is not treated as personal health information, used to infer a diagnosis or combined with protected Pharmacy information for advertising or targeting. Optional technologies remain off in Restricted Contexts.
Rexall may also measure and report on the effectiveness of advertising campaigns as a commercial service, including campaigns for its advertising clients and campaigns delivered by advertising networks, media or social media platforms. Rexall uses privacy-protective measures so that advertising clients and networks receive aggregated or de-identified campaign insights, such as how many customers saw an advertisement, where a campaign performed best or estimated sales, and not information that identifies you.
Where applicable law requires us to identify a specific technology, provider or recipient, we will provide that information at or before the point of collection or on request.
3. Manage Cookie Preferences and your choices
Manage Cookie Preferences preselects Analytics and Advertising, and technologies in those categories operate unless you opt out by category. You can change your choices at any time. Selecting “OK” closes the banner and keeps the current settings. The limited operational functions described below for Rexall Pharmacy are required, are not optional Analytics or Advertising technologies, and are not controlled by optional preferences. Cookie choices are separate from use of Rexall Single Sign-In or Rexall Pharmacy, contract acceptance, privacy-notice acknowledgement, Pharmacy Request or care choices, information-sharing authorization and marketing consent.
Opting out does not affect necessary functions or the required operational functions described below, but optional embedded content, remembered settings or personalization may be unavailable.
You do not need to create or use Rexall Single Sign-In credentials or sign in to Rexall Pharmacy to set general browser-based preferences.
Manage Cookie Preferences governs Tracking Technologies, not consent for commercial electronic messages. Operational, transactional or re-engagement messages prompted by permitted service event/status information are governed separately by law and communication preferences and will not include sensitive content. Each sender may rely only on its own relationship and available consent. Commercial electronic messages must identify the sender, include a working unsubscribe mechanism and honour unsubscribe requests.
4. Changing or withdrawing your choices
You may change or withdraw your choices at any time through Manage Cookie Preferences in the footer or the applicable preference centre.
This Notice is available through the cookie banner, Manage Cookie Preferences and applicable links. It is not accepted or acknowledged through Pharmacy Request checkboxes, and cookie choices remain separate from any Pharmacy Request acceptance or acknowledgement.
A change or withdrawal generally applies to future collection and use. It does not invalidate processing that occurred before you changed or withdrew your choice, and information may continue to be retained where permitted or required by law.
Changing your preferences may not automatically remove technologies already stored on your browser or device. You can use your browser or device settings to review or delete them.
You may need to make your choices again after clearing browser storage, using another browser, device or private session, or entering an interface with a separate choice record or stricter controls.
5. Pharmacy and other sensitive contexts
The Digital Properties include contexts involving Pharmacy Services and sensitive health information. A page visit, search or interaction can be sensitive if it reveals or supports an inference about a person’s health, medication, prescription, clinical needs or use of Pharmacy Services.
Optional Analytics, Advertising, audience-building, behavioural profiling, campaign measurement, session replay and other optional third-party tools remain off in Restricted Contexts, regardless of general-site choices. Only the limited operational functions described below are permitted. Tracking Technologies do not collect, receive or expose Pharmacy Records or prescription, medication, vaccination, clinical, health-assessment, health-card, insurance, authentication, payment-card, sensitive search, chat or free-text information, or other sensitive page or form content.
- In Restricted Contexts, Rexall or an instructed service provider may use only minimum service event/status, performance and security/troubleshooting information required to operate and protect the service, troubleshoot issues, measure completion and support permitted operational, transactional or re-engagement messages. It may be linked to your use of Rexall Pharmacy or a journey only where necessary for those purposes. It excludes page or form content, cart or product contents, medications, DINs, prescription details, Pharmacy Records, clinical or assessment information, authentication secrets and payment-card details. Information revealing use of Pharmacy Services is protected under the applicable Pharmacy Operator and service-provider privacy framework and is not assumed to be anonymous, aggregate, non-personal or non-PHI. Service providers receive only permitted signals and may use them only on instructions. These functions are not used for advertising, campaign measurement, audience building, unrelated profiling, loyalty or commercial enrichment, unrelated cross-property reuse or targeting, or combination with general browsing for those purposes. They are not optional Analytics or Advertising technologies and are not controlled by optional preferences.
General rexall.ca choices do not activate optional Tracking Technologies in Restricted Contexts, even if those technologies operate for general browsing. Required operational functions remain active and are not controlled by optional preferences. A third party operating its own service applies its own cookie controls to that service.
Use of Rexall Single Sign-In, Rexall Pharmacy or a common consent tool does not, on its own, authorize information to be combined. An optional saved payment method is part of Rexall Pharmacy, including when accessed through an approved entry point under different branding, and is handled through the Pharmacy’s authorized payment environment; Rexall Single Sign-In does not hold, receive or store payment information. Pharmacy Records and prescription, clinical or other personal health information are not combined with general browsing, loyalty or unrelated commercial information without the applicable Pharmacy Operator’s authorization process and any required consent. Information governed by separate terms or privacy notices is used only for the purposes described in those documents.
Pharmacy Services may present optional Pharmacist-recommended non-prescription add-ons based on a prescription or medication. These are clinical Pharmacy Services, selected by DIN and approved by a Pharmacist without supplier, merchandising or advertising input. They are not generated or shared through optional Analytics or Advertising technologies, used for advertising, campaign measurement, audience building or unrelated profiling, or disclosed to advertising partners. Declining an add-on does not affect Pharmacy Services. Further details are provided in the Rexall Pharmacy Privacy Policy and Rexall Pharmacy Terms and Conditions.
6. Service providers, third parties and embedded content
Some Tracking Technologies are operated by service providers acting on Rexall’s instructions. A service provider may support hosting, authentication, analytics, advertising and media services, security, fraud prevention, customer support, consent management or communications. It acts on Rexall’s behalf for those functions.
A third party may be responsible for its own service when you load external media, location-based services or tools, use an embedded service, follow a third-party link, or use an independent pharmacy, healthcare, recruitment, shopping, delivery, advertising or media service. Where appropriate, we will identify the third party before the content loads or before you leave a Digital Property. The third party’s privacy and cookie practices apply to its independent activities.
Optional third-party tools and embedded content, such as videos, that rely on Analytics or Advertising follow the relevant category choice and remain off in Restricted Contexts. Opting out or not loading the content may make that feature unavailable but does not prevent use of other available parts of the Digital Property.
7. Browser and device controls
Browser or device settings may let you review, block or delete cookies and local storage, limit cross-site tracking, reset advertising identifiers, restrict location access and manage application permissions.
These settings may affect other services and may not control all Tracking Technologies. Manage Cookie Preferences is the primary method for controlling optional Tracking Technologies operated by or for Rexall, subject to the stricter controls in this Notice. It does not control the required operational functions described above.
Blocking Strictly Necessary technologies may prevent you from using Rexall Single Sign-In or Rexall Pharmacy, maintaining a secure session, submitting a request or using essential Digital Property or pharmacy features.
8. Location information
We may use approximate location derived from an IP address where necessary to display regional information, identify the applicable province, locate a service you request or support security. Before a choice, location-based services may show the closest Rexall stores only in Store Locator or the Rexall Pharmacy store picker, using your permitted device location or a location that you enter. No Rexall Single Sign-In or Rexall Pharmacy information is sent to the mapping provider. The provider may collect search terms, your IP address and location coordinates for its own purposes under its privacy policy.
If a Digital Property requests access to your precise device location, your browser, application or device will ask for permission. You can withdraw that permission through your browser, application or device settings.
9. Retention
Retention varies by category: session technologies generally expire when a session ends; persistent technologies remain for a defined period or until deleted; choice records are kept to remember and demonstrate choices; analytics information follows the applicable configuration; and security records may be kept as reasonably necessary to address fraud, abuse or unauthorized activity.
We retain information only for as long as reasonably necessary for the identified purpose, subject to applicable legal, security, audit and record-keeping requirements.
10. Processing outside Canada
Rexall and its service providers may process or store information outside your province or outside Canada. Information handled in another jurisdiction may be subject to that jurisdiction’s laws and may be accessible to courts, law-enforcement authorities or other government bodies in accordance with applicable law.
Additional information is available in the Rexall.ca Website Privacy Policy.
11. Updates to this Notice
We may update this Notice when the Digital Properties, Tracking Technologies, providers, purposes or legal obligations change. We will post the revised Notice and update the date shown above.
If a change materially expands how an optional technology collects, uses or discloses personal information, we will provide an appropriate notice and request a new choice where required. An earlier choice for a narrower purpose will not be treated as consent to a new sensitive use.
12. Contact Us
Customer and technical support
For questions about this Notice or for customer or technical support, contact the Rexall Customer Service Department:
Online: https://www.rexall.ca/contact-us
Toll-free: 1-877-378-4100
Do not submit medical information, prescription or refill requests, Social Insurance Numbers or payment card numbers through the Contact Us form.
Pharmacy and prescription questions
For questions about a prescription, Pharmacy Records or Pharmacy Services, contact your Pharmacy directly. Pharmacy contact information is available in the applicable Pharmacy Service, on your prescription label or through the store locator on rexall.ca.
Privacy questions
For privacy questions, access or correction requests, or privacy complaints, contact the Rexall Privacy Officer using the contact information in the Rexall.ca Website Privacy Policy.
Emergencies
For a medical emergency, call 911.