Privacy Policy

GoodCap Pharmaceuticals Inc. Privacy Policy  

Last Updated July 13, 2022 

Privacy Policy Overview 

This Privacy Policy establishes rules to govern the collection, use and disclosure of personal information collected by GoodCap Pharmaceuticals Inc. (the “Company”,”we”) in the course of business, in compliance with federal and provincial privacy laws including the Personal Information Protection and Electronic Documents Act (Canada) and the Personal Information Protection Act (Alberta). 

This Privacy Policy applies to all individuals whose personal information the Company collects uses or discloses in the course of doing business. This includes individuals who are customers and all individuals who are contract workers, contractors, and consultants to the Company. It is our policy to only disclose your personal information as required or authorized by law or as otherwise set out in this policy. 

We reserve the right to change this policy from time to time as industry practice, the law, and our procedures in this area may change from time to time.  We will post the current version of this policy at www.goodcap.com/privacy 

What is Personal Information? 

For the purposes of this Privacy Policy, “personal information” means information about an identifiable individual, but does not include a person’s name, title, business address or telephone number, as an employee of an organization.  Where this Privacy Policy states that a list of items is “including”, the lists so described are meant to be examples and not exhaustive or exclusive.  

This Privacy Policy applies to all personal information that is collected, used or disclosed by the Company. The Company has designated a “Privacy Officer” to be accountable for the operation of this Privacy Policy. Individuals may question or report any privacy concerns, breaches, violations or compliance issues to the Privacy Officer at the address indicated below. 

If the policies and procedures outlined in this document do not address a specific situation, individuals are advised to contact the Privacy Officer privacy@goodcap.com for guidance or clarification. 

What Personal Information Do We Collect? 

The Company collects and uses only the personal information that we need for providing services and operating our business. Generally, the Company collects the following personal information from individuals for the various purposes set out below:  

• Name, address, email address (work or personal)
• Age, date of birth
• Buying purposes
• Credit card number

We normally collect information directly from our customers. We may collect your information from other persons with your consent or as authorized by law.  Before or at the time of collecting personal information, we identify the purposes for which we are collecting the information. We do not provide this notification when personal information is volunteered for an obvious purpose. If we wish to use or disclose your information for a new purpose not included in this policy, we will notify you and seek your consent. 

In addition, we also receive and send data from our servers and from your browser when you visit our website, including your IP address, the time and information about the page you requested and the website through which you were linked to our site, if any. We may use tracking technologies in a variety of ways, including the following: keeping count of return visits to our site; accumulating and reporting anonymous, aggregate (data collected in mass), statistical information on website usage; and determining which features users like best. The following are some of the tracking mechanisms we use: 

• Cookies. To help us tailor our website, and the tools and applications on our Website, to the needs and interests of our users, we keep track of visitor interactions with our website through the use of cookies. Cookies are small text files stored on your browser when you visit a website or mobile applications. The “Help” function on most web browsers contains information on how to set your browser to disable cookies. However, if you do not accept cookies, you will not be able to take advantage of some features of our website. We use cookies to improve the user experience on our Website by making it more responsive to the needs of our users and to make it easier for us to recognize you when you return to our website. We also use cookies to analyze our website’s performance and to measure advertising performance. 

• Web Beacons. To help us (and in some cases our advertisers and third-party service providers) keep track of how users are accessing particular pages or features within our website, and to track how users respond to ads and to other content we display on our Website, we may place a small file, called a web beacon, on some of our pages and on some of the listings and ads we distribute. We may also place a web beacon in the emails we send to you. When you open one of our emails or click on links within these emails, we track this click-through data to help us determine your interest in particular topics and measure the effectiveness of our communications to you.  

• Web Analytics. We may collect, or have a third party collect on our behalf, data on how visitors use and navigate through our website, such as the number of users who visit various pages within our website, what they click on, whether they scroll up or down on particular pages, fill out forms, etc. We use this information to improve our website and learn about users, and may disclose it to our affiliates, or to third parties.in a summary form where no personal identifiers are included.  

• Social Media. When you use one of the social media tools available on our website, we and the social media company operating the tool may collect information about you based on such use. The social media company’s use of that information will be subject to its own privacy policy. 

Using and Disclosing Personal Information

We will only use or disclose personal information where necessary to fulfill the purposes identified at the time of collection or for a purpose reasonably related to those purposes such as:  

• To process transactions
• To manage the Company’s business and operations, including customer relationships and investor matters
• To meet legal and regulatory requirements
• Informing individuals about the Company’s products and services that we believe may be of interest to them
• To better understand an individual’s interests in our products and services and potential investment and to conduct market research
• Deliver, develop, enhance or improve products and services
• Evaluate suitability of candidates
• Provide warranties for products and services
• Provide information on future opportunities
• Verify access rights to our website, account creation and purchases
• To third party service providers to assist in the operation of our business and marketing
• To our subsidiaries and affiliates
• To enforce our legal relationship with you
• As is necessary in contemplation of a business transaction

In the course of providing our services, we may share personal information with service providers who perform services on our behalf. These service providers help us operate our business, technology systems and applications, internal procedures, infrastructure and advertising and marketing. They provide services to us, such as fulfilling transactions, processing credit card payments, sending emails and postal mail, call centres, data hosting, contest administration, providing advertisements, and analytics services (e.g. tracking effectiveness of our marketing campaigns and analyzing usage of our website). We require these service providers to limit their access to and/or use of personal information to what is required to provide their services and require that those third parties adhere to confidentiality as well as security procedures and protections. Some of our service providers may be in the United States. When your personal information is used or stored in a jurisdiction outside of Canada, it may be subject to the law of this foreign jurisdiction, including any law permitting or requiring disclosure of the information to the government, government agencies, courts and law enforcement in that jurisdiction.  
Company affiliates and subsidiaries may share personal information with each other and use it for the purposes described in this Privacy Policy. This allows Company and each entity within the group to comply with applicable laws, regulations and requirements and ensures that your information is consistent, accurate and up-to-date.  

We may disclose personal information to a third party in connection with a sale or transfer of business or assets, an amalgamation, reorganization or financing of parts of our business (including the proceedings of insolvency or bankruptcy). In the event the transaction is completed, your personal information will remain protected by applicable privacy laws. In the event the transaction is not completed, we will require the other party not to use or disclose your personal information in any manner whatsoever and to completely delete such information, in compliance with applicable laws.  

Applicable laws may permit or require the disclosure of personal information without consent in specific circumstances (e.g., when investigating and preventing suspected or actual illegal activities, including fraud, or to assist government and law enforcement agencies). These circumstances include situations when permitted or required by law or when necessary to protect our group of companies, our employees, our customers, or others. If this happens, we will not share more personal information than is reasonably required to fulfill that particular purpose.

Consent 

Ordinarily we ask for consent to collect, use or disclose personal information, except in specific circumstances where collection, use or disclosure without consent is authorized or required by law. We may assume your consent in cases where you volunteer information for an obvious purpose.   

You may withdraw consent to the use and disclosure of personal information at any time, unless the personal information is necessary for us to fulfil our reasonable business or legal obligations. We will respect your decision, but we may not be able to provide you with certain products and services if we do not have the necessary personal information. 

The purpose for collecting personal information is set out in this policy. Any necessary consents shall be obtained before personal information is collected, used or disclosed.   

We ask for your express consent for some purposes and may not be able to provide certain services if you are unwilling to provide consent to the collection, use or disclosure of certain personal information. Where express consent is needed, we will normally ask customers to provide their consent orally (in person, by telephone), in writing (by signing a consent form), or electronically (by clicking a button). 

In cases that do not involve sensitive personal information, we may rely on “opt-out” consent.  

The amount and type of personal information collected by the Company shall be limited to what is necessary to fulfill the identified purpose. Personal information shall only be used or disclosed for the purposes for which it is collected. Exceptions may be made with the consent of the individual or if authorized or required by law.  

You may always opt out from receiving marketing communications from us by contacting us as at info@goodcap.com. Even if you have opted out of receiving marketing communications from us, we may still contact you for transactional purposes, in compliance with applicable laws (e.g., for customer service). 

In certain cases, we may transfer your personal information outside of Canada, including to our service providers who may need to access, process or store your personal information in the United States. When your personal information is used or stored in a jurisdiction outside of Canada, it may be subject to the law of this foreign jurisdiction, including any law permitting or requiring disclosure of the information to the government, government agencies, courts and law enforcement in that jurisdiction.

How do I Access my Personal Information? 

Upon request received by the Company in writing, individuals shall be informed of the existence, use, and disclosure of their personal information records and shall be given access to that information. Requests to access personal information held by the Company should be directed to the Privacy Officer.   

Requests must be made in writing or by e-mail. Individuals may be required to verify their identity in order to access their personal information. Any such documentation provided shall be used for verification purposes only.  

The Company responds to requests for access to personal information within thirty (30) days of receipt of the request, or as may be permitted in accordance with applicable privacy legislation.  

A fee for reasonable costs incurred may be charged when responding to more complex requests. The individual will be informed of the applicable fee.  

Requested information will be provided in a form that is generally understandable.  

The Company will be as specific as possible when describing third parties to whom it has disclosed personal information about an individual. When it is not possible to provide a list of the organizations to which it has actually disclosed information, the Company will provide a list of organizations to which it is likely to have disclosed information.  

Individuals are permitted either to view the original record, or to request a copy, subject to limitations as permitted or required by law. To preserve the integrity of the record and ensure that documents are not removed from the Company, individuals wishing to view an original record will do so at the Company’s head office and under the supervision of designated the Company personnel.  

Limitations on Access 

The Company will only refuse access to information about you in those circumstances permitted or required by applicable privacy legislation.  

In the event that the Company refuses to provide access to information, it will provide you with the reasons for its refusal upon request. Exceptions may include information that contains references to or opinions of other individuals, information that cannot be disclosed for legal, security or commercial proprietary reasons, or information that is subject to solicitor-client or litigation privilege. The Company will respond to your requests for access in accordance with applicable privacy legislation.   

How will my Personal Information be Maintained? 

Personal information shall be kept as accurate, complete, and up-to-date as necessary for the purposes for which it is to be used.  

Individuals have the right to challenge the accuracy and completeness of the personal information that is maintained by the Company and have it amended as appropriate.  

Individuals seeking a correction or amendment to their personal information should direct their requests in writing to the Company’s Privacy Officer.   

All formal requests to amend personal information must be accompanied by appropriate supporting documentation. The Company’s Privacy Officer will manage any exceptions. The amended information will be transmitted to third parties, as appropriate.  

If the individual is not satisfied with the results of the request, the Company shall internally document the issue, and provide a response. The existence of the unresolved challenge will be transmitted to third parties, as appropriate.  

How is my Personal Information Stored and Secured? 

Personal information will be retained only as long as necessary and will be disposed of in a manner that is appropriate to the sensitivity of the information. We render customer personal information non-identifying, or destroy records containing personal information once the information is no longer needed. We use appropriate security measures when destroying customer personal information, including shredding paper records and permanently deleting electronic records. 

Personal information will be protected by security safeguards, appropriate to the sensitivity of the personal information.  

Please note that we use cloud-based services to store information in the following countries: Canada and the United States. Where personal information is stored or processed outside of Canada, it is subject to the laws of that foreign jurisdiction, and may be accessible to that jurisdiction’s governments, courts, law enforcement, or regulatory agencies.         

We will notify all required authorities including the Office of the Information and Privacy Commissioner of Alberta, without delay, of a security breach affecting personal information if it creates a real risk of significant harm to individuals. 

Questions 

Inquiries or complaints concerning compliance with this Privacy Policy should be addressed, in writing, to the Company’s Privacy Officer.  

Privacy Officer:  

22 Adelaide St. West, Suite 3400

Toronto, ON 

M5H 4E3

privacy@goodcap.com 

If you are not satisfied with the response from our Privacy Officer after making a complaint, you may have recourse to additional remedies under applicable privacy legislation. If the Privacy Officer is unable to resolve the concern, the customer or user may also write to the Office of the Information and Privacy Commissioner for Alberta or the Office of the Privacy Commissioner of Canada (as applicable).