Privacy Policy

Bio-Stream Diagnostics Inc. ("Bio-Stream", "we", "us", or "our") is committed to protecting the privacy, confidentiality, and security of personal information entrusted to us. 
 

This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process personal information through: 

• www.bio-stream.ca; 

• the TRAX Platform; 

• laboratory and diagnostic services; 

• healthcare provider portals; 

• patient portals; 

• customer and partner portals; 

• mobile applications; 

• customer service communications; and 

• any related products or services (collectively, the “Services”). 
   

We are committed to handling personal information in accordance with: 

• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA); 

• applicable provincial privacy laws; 

• applicable health information legislation; 

• contractual privacy obligations; and 

• other applicable privacy regulations in the jurisdictions in which we operate. 

Personal Information 

Personal Information means information about an identifiable individual. 

Examples include: 

• name; 

• address; 

• telephone number; 

• email address; 

• date of birth; 

• identification numbers; 

• payment information; 

• device identifiers; 

• IP addresses where they can identify an individual. 
   

Personal Health Information 

Personal Health Information may include: 

• laboratory test results; 

• biomarker data; 

• diagnostic information; 

• medical history; 

• health assessments; 

• clinical reports; 

• physician orders; 

• specimen information; 

• healthcare provider information. 
   

De-Identified Information 

De-Identified Information means information that has been modified to remove direct identifiers and cannot reasonably be used to identify an individual. 

Depending on the services you use, we may collect the following types of information. 

Information You Provide 

• Full name 

• Contact details 

• Account credentials 

• Billing and payment information 

• Patient information 

• Healthcare provider information 

• Communications and inquiries 

• Survey responses 

• Employment-related applications 
   

Healthcare and Laboratory Information 
 

Through the TRAX Platform and related services, we may collect: 

• laboratory orders 

• specimen information 

• diagnostic results 

• biomarker measurements 

• physician information 

• referral information 

• treatment-related information 

• healthcare utilization information 
   

Technical Information 
 

When you use our website or platform, we may collect: 

• IP address 

• Browser information 

• Device information 

• Operating system 

• Login history 

• User activity logs 

• System performance information 

• Platform usage analytics 

Bio-Stream uses information for purposes including: 

Delivering Services 

• Processing laboratory orders 

• Managing specimens 

• Producing reports 

• Delivering clinical results 

• Supporting healthcare providers 

• Operating the TRAX Platform 

Customer Support 

• Responding to inquiries 

• Troubleshooting technical issues 

• Providing customer service 

• Managing user accounts 

Security and Compliance 

• Verifying user identity 

• Preventing fraud 

• Detecting unauthorized access 

• Monitoring cybersecurity risks 

• Complying with legal obligations 

Research and Development 

• Improving platform functionality 

• Validating products 

• Enhancing diagnostic services 

• Developing new technologies 

• Conducting quality assurance activities 

Platform Performance 

• Monitoring system reliability 

• Measuring service effectiveness 

• Evaluating user experience 

• Improving platform usability 

When acting as a service provider to healthcare organizations, clinics, laboratories, physicians, or other healthcare providers, Bio-Stream may process Personal Health Information on behalf of those organizations. 
 

In such circumstances: 

• the healthcare provider may remain the custodian of the information; 

• Bio-Stream may act as a service provider, processor, or information manager; 

• processing activities are performed in accordance with applicable agreements and privacy legislation. 
   

Bio-Stream does not use Personal Health Information beyond authorized purposes without appropriate consent or legal authority. 

The TRAX Platform may utilize: 

• machine learning; 

• artificial intelligence; 

• predictive modeling; 

• automated data analysis; 

• clinical workflow optimization tools. 
   

These technologies may process information to: 

• generate insights; 

• support healthcare workflows; 

• improve operational efficiency; 

• identify trends and patterns. 
   

AI-generated outputs are intended to support decision-making and should not be relied upon as the sole basis for healthcare decisions. 

By using our Services, submitting information, creating an account, or accessing the Platform, you consent to the collection, use, and disclosure of your information as described in this Policy. 
 

Where required by law, explicit consent will be obtained before collecting or processing certain categories of information. 
 

You may withdraw consent at any time, subject to legal, contractual, clinical, or regulatory limitations. 

Bio-Stream may disclose information to: 
 

Healthcare Providers 

• Physicians 

• Clinics 

• Laboratories 

• Healthcare systems 

• Authorized care teams 
   

Service Providers 

• Cloud hosting providers 

• IT support providers 

• Payment processors 

• Security providers 

• Professional advisors 
   

All service providers are required to maintain appropriate confidentiality and security protections. 
 

Regulatory and Legal Authorities 
 

We may disclose information when: 

• required by law; 

• required by court order; 

• required by regulators; 

• necessary to protect legal rights; 

• necessary to ensure public safety. 

Bio-Stream may create and use de-identified, anonymized, or aggregated information for: 

• scientific research; 

• quality improvement; 

• product development; 

• validation studies; 

• healthcare analytics; 

• operational improvement; 

• regulatory submissions. 
   

Such information does not identify individuals. 
 

Bio-Stream may retain ownership of de-identified and aggregated datasets created through its Services. 

Your information may be processed, stored, or accessed in jurisdictions outside your province, territory, or country of residence. 
 

Where information is transferred internationally, Bio-Stream implements reasonable safeguards designed to protect information and comply with applicable laws. 

Information processed in foreign jurisdictions may be subject to lawful access by government authorities in those jurisdictions. 

Bio-Stream maintains administrative, technical, and physical safeguards designed to protect information against: 

• unauthorized access; 

• loss; 

• misuse; 

• alteration; 

• disclosure; 

• destruction. 
   

Safeguards may include: 

• encryption; 

• access controls; 

• role-based permissions; 

• system monitoring; 

• cybersecurity testing; 

• secure backup procedures; 

• incident response protocols. 
   

While we take reasonable steps to protect information, no technology or transmission method can guarantee absolute security. 

Bio-Stream retains information only as long as necessary to: 

• provide services; 

• comply with legal obligations; 

• meet regulatory requirements; 

• resolve disputes; 

• enforce agreements. 
   

Retention periods may vary depending on: 

• legal requirements; 

• healthcare regulations; 

• contractual obligations; 

• operational needs. 
   

Following expiration of retention requirements, information will be securely deleted or de-identified. 

We may use: 

• cookies; 

• analytics tools; 

• session technologies; 

• performance monitoring tools; 

• security monitoring technologies. 
   

These technologies help us: 

• improve website performance; 

• enhance user experience; 

• measure platform usage; 

• maintain security. 
   

Users may modify browser settings to manage cookies, although certain functionality may be affected. 

Subject to applicable laws, individuals may have rights to: 

• access personal information; 

• correct inaccurate information; 

• withdraw consent; 

• request deletion where legally permitted; 

• obtain information about data processing practices; 

• receive information regarding disclosures. 
   

Requests may be submitted using the contact information below. 

Bio-Stream does not knowingly collect personal information directly from children unless authorized by a parent, guardian, healthcare provider, or otherwise permitted by law. 
 

Where information relating to minors is processed, appropriate legal and clinical consent requirements apply. 

If a privacy or security incident occurs involving personal information, Bio-Stream will: 

• investigate the incident; 

• take appropriate containment measures; 

• assess associated risks; 

• notify affected individuals where required by law; 

• notify regulators where required. 

Our Services may contain links to third-party websites or services. 
 

Bio-Stream is not responsible for the privacy practices, content, or security of third-party websites. 
 

Users should review the privacy policies of those organizations independently. 

Bio-Stream may update this Privacy Policy periodically to reflect: 

• changes in laws; 

• changes in regulatory requirements; 

• enhancements to services; 

• operational changes. 
   

Updated versions will be posted on our website with a revised effective date. 
 

Continued use of our Services constitutes acceptance of the updated Privacy Policy. 

For questions, concerns, or privacy-related requests, please contact: 

Privacy Officer 

Bio-Stream 

2011 94 Street 

Edmonton, Alberta, Canada 

Email: info@bio-stream.ca 

Phone: [1 780 800 1900] 

Website: www.bio-stream.ca