Skip to main content

Important: Changes to the Be Well Program effective December 18, 2026Click to read the full notice.

Rexall Pharmacy Privacy Policy

Effective date: November 12, 2026 Last updated: November 3, 2026

This Rexall Pharmacy Privacy Policy (this “Policy”) explains how the applicable Pharmacy Operator, Pharmacy and Pharmacist handle Personal Information and Personal Health Information for: (a) Rexall Pharmacy, including the underlying online Pharmacy profile and Pharmacy Services accessed through Approved Experiences; and (b) no-login Pharmacy Requests submitted through rexall.ca, including the selected Pharmacy’s and applicable Pharmacy Operator’s receipt, verification, assessment and handling of those requests and related Pharmacy Records and Pharmacy Services. It also explains how Rexall Pharmacy Group Ltd. separately handles Credentials, Registration Brand and Pharmacy Linkage Information for Rexall Single Sign-In. It describes Rexall Pharmacy Group Ltd.’s role as service provider to the applicable Pharmacy Operator in collecting and routing no-login Pharmacy Requests, but Rexall’s handling of information through rexall.ca, including the Pharmacy Request form, is governed by the Rexall.ca Website Privacy Policy.

About the name of this Policy. Although this Policy is called the Rexall Pharmacy Privacy Policy, it is not limited to the Rexall Pharmacy online service. It covers: (a) Rexall Pharmacy, the online service you sign up for; (b) no-login Pharmacy Requests submitted through rexall.ca, which do not require you to sign up for Rexall Pharmacy, and related Pharmacy Services provided in person or by telephone; and (c) Rexall Single Sign-In. When this Policy uses “Rexall Pharmacy” on its own, it means only the online service defined in Section 1, not this Policy, a no-login Pharmacy Request or a Pharmacy store. The services described in this Policy are not offered to Quebec residents.

At Rexall Pharmacy sign-up, you acknowledge this consolidated Policy once as part of the required sign-up action. Before submitting a no-login Pharmacy Request, you must acknowledge that you have read this Policy and the Rexall.ca Website Privacy Policy. This Policy describes information-handling practices and does not become a contract merely because it is acknowledged. Acknowledgement is separate from contract acceptance and from any consent or authorization for care, information sharing, marketing or cookies.

1. Defined Terms

In this Policy:

  • “Approved Experience” means the Rexall-branded Rexall Pharmacy experience and each Partner-Branded Experience through which you may access Rexall Pharmacy using your Credentials;

  • “Credentials” means your email address, encrypted password and authentication information used for Rexall Single Sign-In, including information used for multi-factor authentication or another security-verification method offered by Rexall;

  • “Independent Provider” means a third party that operates and is responsible for its own service, such as an independent healthcare or delivery provider. It does not include a service provider acting on behalf of Rexall, a Pharmacy Operator or a Pharmacy;

  • “Partner” means the manufacturer, prescriber, insurer or other partner associated with a Partner Program

  • “Partner-Branded Experience” means an Approved Experience offered with a Partner Program under a co-branded name (for example, “[Partner]-Rexall Pharmacy Program”);

  • “Partner Program” means a patient support or similar program relating to a prescription medication that is offered by or on behalf of a Partner, for which Rexall or an affiliate acts only as a technology provider, and through which a Partner-Branded Experience is made available. Each Partner Program is identified at sign-up or login and in the applicable Pharmacy Supplement;

  • “Personal Health Information” means identifying information concerning an individual’s physical or mental health, healthcare, prescriptions, medications, Pharmacy Services or other health-related matters, where that information is protected under applicable law;

  • “Personal Information” means information about an identifiable individual. It may include Personal Health Information where applicable;

  • “Pharmacist” includes the pharmacist or other authorized Pharmacy professional responsible for a Pharmacy Service;

  • “Pharmacy Request” means a refill, renewal, prescription-transfer, Pharmacist-appointment or similar request expressly offered through rexall.ca without requiring the individual to create or use Credentials, create an account or sign in to Rexall Pharmacy;

  • “Pharmacy” means the participating Rexall-branded pharmacy connected with the Rexall Pharmacy service or selected to receive and assess a Pharmacy Request or provide a Pharmacy Service;

  • “Pharmacy Linkage Information” means limited identifiers assigned by or on behalf of a Pharmacy and associated with your Credentials solely to recognize and maintain your connection to that Pharmacy across Approved Experiences. Pharmacy Linkage Information does not include Pharmacy Records, prescription, dispensing or clinical information, or payment information;

  • “Pharmacy Operator” means the applicable Rexall legal entity identified below that operates a Pharmacy, provides Pharmacy Services and controls the Pharmacy Records held by that Pharmacy;

  • “Pharmacy Supplement” means the short statement at the beginning of the Rexall Pharmacy Terms and Conditions, as presented for a Partner-Branded Experience;

  • “Pharmacy Records” (each, a “Pharmacy Record”) means the authoritative pharmacy patient records, including prescription information, held and controlled by the applicable Pharmacy. Pharmacy Records do not include Credentials;

  • “Pharmacy Services” means the regulated pharmacy services provided by the applicable Pharmacy Operator, including dispensing, prescriptions, Pharmacist care and related services offered in person, through Rexall Pharmacy or in response to a Pharmacy Request submitted through rexall.ca;

  • “Registration Brand” means the brand or Approved Experience through which you first registered your Credentials;

  • “Rexall Pharmacy” means the online service offered by the Pharmacy Operators that allows eligible individuals who sign up to connect with participating Pharmacies, manage prescriptions and access Pharmacy Services and features offered online from time to time. Rexall Pharmacy does not include a no-login Pharmacy Request or Rexall Single Sign-In, each of which is described separately in this Policy. Rexall Pharmacy is not the authoritative Pharmacy Record, which is held and controlled by the applicable Pharmacy;

  • “Rexall Single Sign-In” means the credential, authentication and related technology services provided by Rexall, including hosting, security, communications and technical support, that allow the same Credentials to authenticate access to Rexall Pharmacy through any Approved Experience;

  • “Rexall” means Rexall Pharmacy Group Ltd. in its capacity as provider of Rexall Single Sign-In and, for no-login Pharmacy Requests, as operator of rexall.ca and provider of the technology and administrative services used to collect, route and transmit Pharmacy Requests on the documented instructions of the Pharmacy Operators. In this Policy, “we,” “us” and “our” refer to the organization responsible for the activity described: the applicable Pharmacy Operator, Pharmacy or Pharmacist for the Rexall Pharmacy profile, Pharmacy Requests, Pharmacy Services and Pharmacy Records; and Rexall for Credentials, Registration Brand and Rexall Single Sign-In. For a no-login Pharmacy Request, Rexall acts as service provider to the applicable Pharmacy Operator on its documented instructions, including instructions given through the selected Pharmacy on the Pharmacy Operator’s behalf, to collect, route and transmit the request to the selected Pharmacy.

2. Who Is Responsible for Your Information?

The following Pharmacy Operator provides Pharmacy Services, controls Pharmacy Records and, with the selected Pharmacy and Pharmacist, receives, verifies, assesses and handles no-login Pharmacy Requests:

  • Pharmacy location: Ontario, Alberta, Manitoba or New Brunswick\

Pharmacy Operator: Rexall Pharmacies ULC

  • Pharmacy location: British Columbia\

Pharmacy Operator: Rexall Pharmacies (BC) Ltd.

  • Pharmacy location: Saskatchewan\

Pharmacy Operator: Rexall Pharmacies (Sask) Ltd.

Depending on applicable provincial law, the Pharmacy, Pharmacy manager or Pharmacist may also have direct responsibility for your Pharmacy Records.

Rexall Pharmacy Group Ltd. is accountable for Credentials, Registration Brand and its operation of Rexall Single Sign-In. It uses that information to register and authenticate you and provide related security, access-recovery and technology services. It also holds Pharmacy Linkage Information solely to recognize and maintain your connection to the applicable Pharmacy, including as a service provider to the Pharmacy Operator. Rexall Single Sign-In does not collect, hold, receive or store Pharmacy Records, prescription, dispensing or clinical information, Pharmacy profile information, or payment information or payment methods, and does not provide access to that information. Separately, Rexall provides hosting, communications and other technology or administrative services to the Pharmacy Operators on their documented instructions, including collecting and routing no-login Pharmacy Requests to the selected Pharmacy as service provider to the applicable Pharmacy Operator. None of these activities makes Rexall Pharmacy Group Ltd. your dispensing Pharmacy, Pharmacist or healthcare provider.

3. When This Policy Applies

This consolidated Policy applies to information handled for both: (a) Rexall Pharmacy, including the underlying online Pharmacy profile, Pharmacy Services and Pharmacy Records across Approved Experiences; and (b) no-login Pharmacy Requests submitted through rexall.ca, including the selected Pharmacy’s and applicable Pharmacy Operator’s receipt, verification, assessment and handling of those requests and related Pharmacy Records and Pharmacy Services. It also applies to Credentials, Registration Brand and Pharmacy Linkage Information handled separately for Rexall Single Sign-In and related technology services, including:

  • creating and maintaining Pharmacy Records, managing prescriptions (including without limitation fill, refill, renewal, transfer, automatic-refill and upload requests) and providing Pharmacy care;

  • connecting Rexall Pharmacy to the selected Pharmacy and displaying selected Pharmacy Record information through Approved Experiences;

  • collecting and routing no-login Pharmacy Requests as service provider to the applicable Pharmacy Operator, receiving, verifying, assessing and handling those requests at the selected Pharmacy, and supporting authorized access for a person in your care; and

  • arranging pickup or delivery, offering pharmacist-approved related health products or supplies, and capturing and processing payments, insurance and public-plan claims.

The applicable Pharmacy holds and controls Pharmacy Records. Rexall Pharmacy may display selected information from those records and submit requests to the Pharmacy, but is not itself a Pharmacy Record. The Rexall.ca Website Privacy Policy applies to information Rexall handles through rexall.ca, including browsing, the Pharmacy Request form, intake, routing, transmission, security and related technical records. This consolidated Policy applies to information handled by the selected Pharmacy and applicable Pharmacy Operator for a no-login Pharmacy Request, including verification, Pharmacy Records, professional decisions and Pharmacy Services, and to Rexall Single Sign-In information used for Rexall Pharmacy. The two privacy documents operate within their respective scopes, and neither displaces the other. If you are a new patient, the selected Pharmacy may create Pharmacy Records to act on a Pharmacy Request, but this does not sign you up for Rexall Pharmacy. A website confirmation or status message is not part of the authoritative Pharmacy Records and does not itself confirm that a requested Pharmacy Service will be provided. A common brand, website or login does not combine Pharmacy Records with Credentials or unrelated retail, marketing or commercial data or authorize unrelated marketing or cross-property reuse.

Rexall Pharmacy uses one underlying Pharmacy profile connected to the applicable Pharmacy across Approved Experiences. An Approved Experience may display different functions or information, but does not create a separate Pharmacy profile or Pharmacy Records. A Partner-Branded Experience will identify its Partner Program in the applicable Pharmacy Supplement and provide a partner-specific privacy notice for its Partner Program and information flows; that notice supplements, and does not replace, this Policy.

4. Information We Collect

Depending on the service, we may collect:

  • Identity and contact information, such as your name, date of birth, address, telephone number, email address, preferred language and government-issued identifiers, including your provincial health card or other government-issued health information number.

  • Pharmacy Records and care information, including prescription, medication, health, vaccination, assessment, clinical, prescriber, caregiver and healthcare-provider information.

  • Pharmacy Request information, including the request type and content, selected Pharmacy, identity or authority verification information, related communications and service-status information. The selected Pharmacy and applicable Pharmacy Operator handle this information for the request and related Pharmacy Records and Pharmacy Services; Rexall collects and routes it as service provider to the applicable Pharmacy Operator. Rexall and the applicable Pharmacy Operator also keep records reasonably sufficient to document the version of the terms accepted, the privacy policies acknowledged, the selected Pharmacy, any separate authorization or consent, and the date and time of submission.

  • Transaction and service information, including insurance, public-plan, billing, payment, request, pickup, delivery and communication-preference information.

  • Rexall Pharmacy profile and service information, including access logs, requests, forms and uploaded documents, which is handled for the applicable Pharmacy Operator.

  • Operational service information, including limited service event/status, performance, security and troubleshooting information needed to operate and measure Pharmacy journeys.

  • Rexall Single Sign-In information, limited to Credentials and Registration Brand collected from you or an eligible linked credential, and Pharmacy Linkage Information received from the applicable Pharmacy Operator. Rexall holds Pharmacy Linkage Information solely to maintain the Pharmacy connection across Approved Experiences and does not use it for unrelated marketing, profiling or cross-property reuse. Rexall Single Sign-In does not collect, hold, receive or store Pharmacy Records, prescription, dispensing or clinical information, Pharmacy profile information, or payment information, and does not provide access to that information. Pharmacy Operators do not receive your password.

We may collect this information from you or from an authorized caregiver or representative, prescriber, healthcare provider, another Pharmacy, insurer, public plan, health-information system, authorized service provider or other lawful source.

In Rexall Pharmacy, the Pharmacy Operators may collect limited service event/status, performance and security or troubleshooting information needed to operate and measure Pharmacy journeys. This does not capture page or form content, cart or product contents, Pharmacy Records, prescription, medication, clinical or assessment information, authentication secrets or payment-card details, and is not used for advertising, profiling or combination with general browsing data. Because it may reveal use of Pharmacy Services, it is protected accordingly.

5. How We Use Information

The applicable Pharmacy Operator uses information to:

  • provide Pharmacy Services and care, including prescription processing, clinical safety checks, consultations, vaccinations, medication reviews and follow-up;

  • communicate with you and authorized caregivers, representatives and healthcare providers, and arrange pickup or delivery;

  • process benefits, insurance claims, payments and refunds;

  • offer pharmacist-approved related health products or supplies, as described below;

  • operate, secure, troubleshoot and measure Rexall Pharmacy;

  • verify identity and authorized access;

  • send prescription, refill, pickup, delivery and safety communications, and permitted operational, transactional or re-engagement communications about Pharmacy journeys;

  • maintain Pharmacy Records and audit trails, prevent fraud and unauthorized access, support quality and business continuity, and meet legal, professional, regulatory and public-health requirements.

  • Rexall uses information for Rexall Single Sign-In and related technology services to register and maintain Credentials and Registration Brand, authenticate access using multi-factor authentication or another security-verification method offered by Rexall, maintain the Pharmacy connection using Pharmacy Linkage Information, send verification, security and access-recovery communications, prevent fraud, troubleshoot the service and meet legal obligations. Rexall does not use Pharmacy Linkage Information for unrelated marketing, profiling or unrelated cross-property reuse.

Operational Pharmacy communications are different from marketing. Commercial electronic messages will be sent only with your consent or as otherwise permitted by Canada’s anti-spam law, will identify the sender, include its contact information and a working unsubscribe mechanism, and exclude sensitive Pharmacy, clinical, Credentials and payment content from the subject line, body and metadata. Unsubscribe requests will be honoured within the period required by law. Reminders about an incomplete Rexall Pharmacy request and other request-related messages will not include request-form content or the contents of your request, medication, prescription, clinical, assessment or payment details, or authentication secrets. Marketing opt-outs do not prevent communications needed to provide Pharmacy Services or protect patient safety.

6. When We Share Information

The applicable Pharmacy Operator or Pharmacy may disclose Personal Information and Personal Health Information, with your authorization or as permitted or required by law, to:

  • Pharmacists, Pharmacy team members, prescribers and other healthcare organizations or providers involved in your care or authorized public-health activities;

  • insurers, public plans, claims administrators and another Pharmacy when you request a prescription transfer;

  • Rexall Pharmacy Group Ltd. and authorized payment, delivery, technology, hosting, authentication, communications, records-management, security and similar service providers acting on documented instructions; and

  • pharmacy and privacy regulators and other authorized authorities.

  • Separately, for Rexall Single Sign-In, Rexall may share information within Rexall on a need-to-know basis; with service providers supporting authentication, communications, hosting, security and support that act on its instructions; with an Approved Experience only to provide the limited authentication result needed for the sign-in you requested; and with advisers, regulators, courts, authorities or a corporate-transaction counterparty where permitted or required by law. Pharmacy Linkage Information is handled only on the applicable Pharmacy Operator’s instructions for the Pharmacy connection or as permitted or required by law. Rexall does not disclose Pharmacy Linkage Information to a Partner Program, Partner or other third party for its own purposes.

Service providers may handle information only on documented instructions, for authorized purposes and with appropriate safeguards; the Pharmacy Operators remain accountable. For operational measurement, providers receive only limited event/status data, not page or form content, cart or product contents, Pharmacy Records, clinical information, Credentials or payment details. This data is not used for advertising, audience building, unrelated profiling, loyalty or retail enrichment, cross-property targeting or combination with general browsing data.

If ownership or control of a Pharmacy changes, relevant records may be transferred to a lawful successor subject to continuing privacy and professional obligations.

7. Consent, Withdrawal and Your Choices

We obtain consent where required. The form of consent depends on the sensitivity of the information, the purpose and applicable law.

Your actions may indicate consent in appropriate circumstances. Submitting a no-login Pharmacy Request does not create Credentials, an account or a Rexall Pharmacy profile, automatically sign you up for Rexall Pharmacy or give express consent to receive marketing communications. We may also handle information without consent where permitted or required by law, including for patient safety, care, public health, regulatory or legal purposes.

Subject to applicable law, a Pharmacy Operator may rely only on its own Pharmacy Services contract with you (including, for a no-login Pharmacy Request, that request contract), and Rexall may rely only on its own Rexall Single Sign-In contract with you (or, for rexall.ca, its separate relationship with you described in the Rexall.ca Website Terms of Use and Rexall.ca Website Privacy Policy), as an existing business relationship, or on consent or another lawful basis, to send commercial electronic messages. An existing business relationship lasts while the applicable contract is in force and for two years after it ends, unless applicable law provides otherwise. Messages must identify the correct sender, include its contact information and a working unsubscribe mechanism and exclude sensitive Pharmacy, clinical, Credentials and payment content. Verification, security, password-reset, access-recovery and other required service communications may continue as needed. Contract acceptance, privacy acknowledgement, Pharmacy care, information-sharing authorization, marketing consent and cookie choices remain separate. We will provide additional notice and obtain authorization or consent, as required, before we:

  • give a caregiver access to your Pharmacy Records or Rexall Pharmacy;

  • disclose sensitive information to a Partner Program, Partner or other third party for its own purposes, or materially expand sharing beyond this Policy;

  • use information for an optional health assessment or use identifiable Pharmacy Records or other Personal Health Information for marketing or unrelated personalization, other than the pharmacist-approved add-ons described below; or

  • use a saved payment method for an activity not reasonably necessary for the requested Pharmacy Service. A saved payment method is optional and may be added only after you connect to a Pharmacy. It may be available through another Approved Experience using the same Pharmacy profile. Payment information is handled by the applicable Pharmacy Operator, Pharmacy and authorized payment providers; Rexall Single Sign-In does not hold, receive or store it.

Subject to legal and professional requirements, you may withdraw or limit consent for certain future activities. This may affect our ability to provide a requested Pharmacy Service and does not require deletion of Pharmacy Records that must be retained.

You may submit a request through the Rexall.ca Contact Us form either to close or cancel Rexall Pharmacy or, as a separate process, to close or deactivate your Credentials. The support team will action the applicable request after verifying it with the account holder and will confirm by email once the applicable closure, cancellation or deactivation is complete. Closing Rexall Pharmacy does not close your Credentials. Closing or deactivating Credentials ends Rexall Single Sign-In access and may prevent online access through Approved Experiences that require those Credentials, but does not close the separately governed Rexall Pharmacy profile or Pharmacy Services. Neither process deletes Pharmacy Records that the applicable Pharmacy must retain.

Recommended add-on products. Related health products or supplies are clinical Pharmacy Services selected through pharmacist review and approval for the applicable Drug Identification Number (DIN). Suppliers and merchandising or advertising teams have no input. These recommendations are not targeted advertising and do not use Pharmacy Records for marketing or unrelated personalization. Add-on products are sold by the Pharmacy.

Choosing not to purchase a recommended add-on product will not block, delay or degrade your prescriptions or Pharmacy Services.

8. Caregivers and Authorized Representatives

You may authorize another person to assist with Pharmacy Services, including through Rexall Pharmacy where available. Their access depends on verified legal authority and the permissions you provide, and may include selected Pharmacy Record information and service functions.

We may verify the identity, authority and supporting documentation of the patient and caregiver or representative. Access is generally set up at the Pharmacy and may be limited, refused or removed if authority cannot be verified, authorization is withdrawn, doing so is necessary to protect the patient or respect the instructions of a capable patient, or law requires a different process.

Caregivers must use the approved caregiver or representative process, must not share Credentials and must act only within their verified authority. The patient, an authorized representative or the Pharmacy may revoke or restrict caregiver access, and a caregiver must stop accessing the patient’s information as soon as their authority ends, even if technical access has not yet been removed.

9. Independent Providers

rexall.ca or Rexall Pharmacy may link to an Independent Provider. Unless expressly stated otherwise, each Independent Provider is responsible for its services, decisions and records under its own terms and privacy notice, and you remain free to choose another Independent Provider or Pharmacy.

Where a store locator or Pharmacy connection store picker offers location-based services, you may use your device location or enter a location to identify nearby Rexall stores. No Credentials are sent to the location-services provider for that purpose. The provider may collect search terms, IP address and location coordinates for its own purposes under its own privacy policy.

Before sensitive information is transferred to an Independent Provider for its own purposes, the Independent Provider, information and purpose of the transfer will be clearly identified and separate, specific authorization or consent will be requested where required.

10. Advertising, Loyalty and Tracking

We do not sell Pharmacy Records.

Shared branding, Credentials or a Partner-Branded Experience does not give Rexall, a Partner Program, Partner, Independent Provider or other third party access to Pharmacy Records, Pharmacy profile information or payment information for unrelated advertising, loyalty, supplier marketing or other own purposes. Any such access or disclosure requires clear notice and separate, specific authorization or consent.

We will not use identifiable Pharmacy Records, Personal Health Information or payment information for advertising, loyalty or supplier marketing unless the activity is lawful and supported by separate, express opt-in consent. You do not have to participate in a loyalty or marketing program to receive Pharmacy Services.

The Rexall.ca Cookie and Tracking Notice applies to rexall.ca and explains available choices. When you are signed in to Rexall Pharmacy through any Approved Experience, including any Partner-Branded Experience, on Pharmacy Request forms and wherever Pharmacy Records, Personal Health Information or health-assessment information is collected or displayed, only Strictly Necessary technologies (as described in that Notice) may operate. Optional Analytics and Advertising technologies (as described in that Notice), audience-building, profiling, campaign measurement, session replay, software development kits (SDKs) and other unrelated tracking remain off in those contexts and do not receive prescription, clinical, Pharmacy Record or request-form information. Only the limited operational event/status information described above may be used for service operation, security, troubleshooting, completion measurement and permitted communications, subject to the content and purpose restrictions in this Policy. Appropriate tracking may operate on public informational health pages under the Cookie and Tracking Notice, but browsing is not treated as Personal Health Information, used to infer a diagnosis or combined with protected Pharmacy events for advertising or targeting. Cookie choices are separate and are not inferred from acceptance of any terms or acknowledgement of this Policy.

11. Automated Tools

Rexall, a Pharmacy Operator or an authorized service provider may use approved automated tools to support functions such as fraud detection and prevention, security for Rexall Single Sign-In Credentials, service administration, request routing, record matching and quality assurance.

These tools do not replace the professional judgment of a Pharmacist or other regulated healthcare professional. Rexall, the Pharmacy Operators and their service providers will not use identifiable Pharmacy Record information to train a general-purpose artificial intelligence model.

12. Safeguards and Retention

Each responsible organization uses administrative, technical and physical safeguards appropriate to the sensitivity of the information it handles. These include access controls, authentication, encryption, monitoring, staff training, confidentiality obligations and safeguards for service providers. Rexall stores passwords in encrypted form and uses multi-factor authentication or another security-verification method it offers. Protect your password and verification codes and notify us of suspected compromise. No method of electronic storage, transmission or communication can be guaranteed to be completely secure or continuously available. We investigate incidents and notify affected individuals and regulators where required.

The applicable Pharmacy Operator retains Pharmacy Records as required or permitted by law, professional standards, patient-safety needs and legitimate legal or operational requirements. A request to close or cancel Rexall Pharmacy or, separately, to close or deactivate Credentials must be submitted through the Rexall.ca Contact Us form; the support team will action the applicable request after verifying it with the account holder and will confirm by email once the applicable closure, cancellation or deactivation is complete. Closing or cancelling Rexall Pharmacy does not close Credentials, and closing, deactivating, restricting or suspending Credentials ends or interrupts Rexall Single Sign-In access but does not close the separately governed Rexall Pharmacy profile or Pharmacy Services. Neither process, nor removing a Pharmacy connection, deletes Pharmacy Records that must be retained.

Rexall retains Credentials, Registration Brand and other Rexall Single Sign-In information only as long as reasonably necessary for the purposes in this Policy or as required by law. For Pharmacy Linkage Information, Rexall follows the applicable Pharmacy Operator’s retention and deletion instructions, subject to legal requirements. Limited operational event/status data is also retained only as long as necessary for authorized purposes and protected according to its sensitivity. When information is no longer required, the responsible organization securely destroys, erases or de-identifies it as applicable.

Some service providers may process or access information outside your province or outside Canada. When that occurs, the information may be subject to the laws of the other jurisdiction. We use contractual, organizational and technical measures designed to protect information handled by service providers.

13. Accessing or Correcting Your Information

Subject to applicable law, you may ask to:

  • access eligible Personal Information and Personal Health Information, receive a copy, and request correction of inaccurate or incomplete information; and

  • withdraw or limit consent for certain future activities and obtain information about complaint processes.

We may need to verify your identity and authority before responding. Legal exceptions may limit access to certain information.

For help with Pharmacy Records, contact the Pharmacy that provided the Pharmacy Service or the Rexall Privacy Office. For Credentials, Registration Brand, Pharmacy Linkage Information or other Rexall Single Sign-In information, contact the Rexall Privacy Office. Requests concerning an Independent Provider’s clinical record should be directed to that Independent Provider.

14. Contact Us

Customer and technical support

For questions about this Policy or for customer or technical support, contact the Rexall Customer Service Department:

Online: https://www.rexall.ca/contact-us

Toll-free: 1-877-378-4100

Do not submit medical information, prescription or refill requests, Social Insurance Numbers or payment card numbers through the Contact Us form.

Pharmacy and prescription questions

For questions about a prescription, Pharmacy Records or Pharmacy Services, contact your Pharmacy directly. Pharmacy contact information is available in the applicable Pharmacy Service, on your prescription label or through the store locator on rexall.ca.

Privacy questions

For privacy questions, access or correction requests, or privacy complaints, contact the Rexall Privacy Officer

Email: privacyofficer@rexall.ca

Telephone: 1-877-378-4100

Mail: Rexall Pharmacy Group Ltd.

Attention: Privacy Officer

6925 Century Avenue, Suite 900 Mississauga, Ontario L5N 0E3

Emergencies

For a medical emergency, call 911.

15. Changes to This Policy

We may update this Policy when Pharmacy Services, no-login Pharmacy Requests, Rexall Single Sign-In, related technology, legal requirements or privacy practices change. We will post the current version and revise the effective or last-updated date. If Rexall Single Sign-In is materially changed or replaced, Rexall will provide appropriate notice and require any acceptance, acknowledgement or consent required by law. A change in Credentials does not affect Pharmacy Services available without those Credentials.

An updated version of this Policy does not retroactively authorize a materially different use of Pharmacy Records, other Personal Health Information, Credentials, Registration Brand or Pharmacy Linkage Information. We will provide additional notice and obtain consent where required.

16. Related Documents and Accessibility

This Policy is linked at Rexall Pharmacy sign-up, inside Rexall Pharmacy and on each Pharmacy Request form. This Policy and related Rexall terms and privacy documents, including the Cookie and Tracking Notice and Accessibility Policy, are also available from the legal homepage at https://www.rexall.ca/legal, which is linked in the rexall.ca footer. This Policy is also available in an accessible format or with an appropriate communication support on request, as described in the Rexall Accessibility Policy.