Effective Date: July 15, 2026
Related policies: Terms of Use · Terms of Sale · Privacy Policy
Contents
This summary provides a quick overview of how GetRuffly handles your personal information. Please read the full policy below for complete details.
Who we are: GetRuffly (getruffly.com™), operated by 2765565 Alberta Ltd. and affiliates, headquartered in Winnipeg, Manitoba, Canada.
What we collect: Personal, health, financial, and technical information necessary to facilitate your prescription orders through licensed pharmacies.
Why we collect it: To process your orders, communicate with you, comply with legal obligations, and improve our services.
Your rights: Access, correction, consent withdrawal, and complaint to the Office of the Privacy Commissioner of Canada.
Contact: [email protected] or by mail to Privacy Officer, GetRuffly, Winnipeg, Manitoba (see Section 12 below).
At GetRuffly (carrying on business as “getruffly.com™”), safeguarding your confidentiality and protecting your personal information is a primary concern. We are committed to meeting or exceeding the privacy standards established by Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”).
Important: GetRuffly is a referral and facilitation platform only. GetRuffly does not itself dispense medications, is not a pharmacy, does not prescribe medications, and is not a veterinarian or healthcare provider. All professional and regulatory obligations relating to the dispensing of medications and the prescribing of treatments rest solely with the licensed pharmacy and prescribing practitioner. Personal health information shared through our platform is collected and used solely to facilitate your connection with licensed pharmacies and prescribing practitioners.
As part of our commitment, getruffly.com™ has adopted the Ten Privacy Principles described in PIPEDA to govern our actions as they relate to the use of personal information. The Ten Privacy Principles are as follows:
Principle 1 – Accountability. getruffly.com™ is responsible for maintaining and protecting any personal information under our control. In fulfilling this mandate, getruffly.com™ has designated an individual who is accountable for our compliance with the Ten Privacy Principles.
Principle 2 – Identifying Purposes. The purposes for which personal information is collected shall be identified before or at the time the information is collected.
Principle 3 – Consent. The knowledge and consent of the Customer are required for the collection, use or disclosure of personal information except where required or permitted by law.
Principle 4 – Limiting Collection. The personal information collected must be limited to those details necessary for the purposes identified by getruffly.com™. Information must be collected by fair and lawful means.
Principle 5 – Limiting Use, Disclosure and Retention. Personal information may only be used or disclosed for the purpose for which it was collected unless the Customer has otherwise consented, or when it is required or permitted by law. Personal information may only be retained for the period of time required to fulfil the purpose for which it was collected, subject to minimum retention periods required by law.
Principle 6 – Accuracy. Personal information must be maintained in as accurate, complete and up-to-date form as is necessary to fulfil the purposes for which it is to be used.
Principle 7 – Safeguarding Personal Information. Personal information must be protected by security safeguards that are appropriate to the sensitivity level of the information.
Principle 8 – Openness. getruffly.com™ is required to make information available to Customers concerning the policies and practices that apply to the management of their personal information.
Principle 9 – Customer Access. Upon request, a Customer shall be informed of the existence, use and disclosure of their information, and shall be given access to it. Customers may verify the accuracy and completeness of their information, and may request that it be amended, if appropriate.
Principle 10 – Handling Customer Complaints and Suggestions. Customers may direct any questions or enquiries with respect to the privacy principles outlined above or about our practices by contacting getruffly.com™’s Privacy Officer.
getruffly.com™ gathers and uses only such information that is necessary for providing our services and fulfilling your orders. We typically collect the following categories of personal information:
Name, mailing address, email address, and telephone numbers.
Occupation, employment status, referral source, age, height, weight, sex, and date of birth.
Primary physician name and contact information, drug allergies, medications requested, family medical history, personal medical history, existing medications, and prescription information.
Credit card information (card type, number, expiry date, cardholder name), and banking information (transit and account numbers).
IP address, browser type, device information, pages visited, cookies and analytics data, and website usage patterns (see Section 9, Cookies and Tracking Technologies).
We may collect anonymous or non-personal information that cannot be associated with or traced back to a specific individual or business entity.
We use your personal information to:
We only use your personal information for the purposes that we have disclosed to you. If for any reason your information is required to fulfil a different purpose, we will notify you and ask for your consent before we proceed.
We obtain your consent to collect, use, and disclose your personal information at the time you provide it, through clear and conspicuous consent mechanisms including check-boxes, “I Accept” buttons, and written or electronic forms.
In some instances, consent may be implied by your actions, such as submitting a prescription order through the platform or voluntarily providing personal information for a stated purpose.
You may withdraw your consent to the collection, use, or disclosure of your personal information at any time by contacting our Privacy Officer at [email protected]. We will process your withdrawal request 10 business days following receipt of the request.
Consequences of Withdrawal: Please note that withdrawing consent for the collection, use, or disclosure of your health information may result in our inability to process or facilitate your prescription orders through the platform. Withdrawing consent for marketing communications will not affect our ability to provide core services.
We may disclose your personal information in the following circumstances:
We will not furnish your personal information to an outside organization for its use in marketing or solicitation without your prior consent.
In the course of providing our services, your personal information may be stored, accessed, or processed in jurisdictions outside of Canada, including the United States.
When your personal information is transferred outside of Canada, it may be subject to the laws of those jurisdictions, including laws that may permit access by courts, law enforcement, and national security authorities in those jurisdictions.
We take reasonable steps to ensure that any service provider processing your personal information outside of Canada provides a comparable level of protection through contractual obligations, including confidentiality, use limitations, and security requirements. For further information about our cross-border transfer practices, please contact our Privacy Officer.
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law. Our specific retention periods are:
When personal information is no longer required, it will be securely destroyed, erased, or rendered anonymous.
Like many websites, getruffly.com™ uses cookies and similar technologies to collect information about website traffic and usage patterns.
Cookies are small text files placed on your device that help us personalise content, provide functionality (such as e-coupons), remember your preferences, and analyse site traffic.
Some cookies may be placed by third-party service providers (such as analytics and advertising partners). These third parties operate under their own privacy policies.
You can manage or disable cookies through your browser settings. Instructions for managing cookies are typically available in the “Help” section of most browsers. Please note that disabling certain cookies may affect the functionality of the website.
Our use of cookies also allows us to collect and retain certain non-personally identifiable information about website users, such as browser type and pages visited. This information is collected from a particular computer as the user moves through the website, and reviewing server logs helps us to statistically monitor usage of the website.
We use current technologies and maintain security standards to ensure that your personal information is protected against unauthorized access, disclosure, inappropriate alteration, or misuse. All safety and security measures are appropriate to the sensitivity level of your information.
Electronic client files are kept in a secured environment with restricted access. Paper-based files are stored in restricted access areas.
We manage our server environment appropriately and our firewall infrastructure is strictly adhered to. Our security practices are reviewed periodically, and we employ current technologies to assist us in protecting the confidentiality and privacy of your information.
In the course of daily operations, we restrict access to personal information to authorized employees who have a legitimate business purpose and reason for accessing it. As a condition of their employment, all employees of getruffly.com™ are required to sign a confidentiality agreement, abide by the privacy standards we have established, and follow all applicable laws and regulations. Unauthorized access to and/or disclosure of client information by an employee of getruffly.com™ is strictly prohibited. All employees are expected to maintain the confidentiality of personal information at all times.
getruffly.com™ maintains a documented breach-response plan in accordance with PIPEDA and applicable regulations. In the event of a breach of security safeguards involving personal information under our control:
With respect to your personal information or our practices, Customers may contact our Privacy Officer and direct any questions and enquiries through the following channels:
Email: [email protected]
Mail: Privacy Officer, GetRuffly (2765565 Alberta Ltd.), Winnipeg, Manitoba, Canada
Fax: 1-888-463-8340
We will respond to all privacy-related enquiries within 30 days of receipt.
Decisions are often made based on the information we have. Therefore, it is important that your personal information is accurate and complete. As a customer, you have the right to access, verify, and amend the information held in your personal and financial files.
To help us keep your personal information up-to-date, we encourage you to amend inaccuracies and make corrections as often as necessary. Despite our efforts, errors sometimes do occur. Should you identify any incorrect or out-of-date information in your file(s), we will make the proper changes and provide you with a copy of the corrected information. Where appropriate, we will communicate these changes to other parties who may have unintentionally received incorrect information from us.
GetRuffly collects certain personal health information in the course of facilitating prescription orders. Depending on the nature of the information custodianship arrangement, Manitoba’s Personal Health Information Act (PHIA), C.C.S.M. c. P33.5, may apply to some or all of the personal health information processed through our platform.
To the extent that PHIA applies, GetRuffly will comply with PHIA’s requirements regarding the collection, use, disclosure, and security of personal health information. Where GetRuffly acts as an information manager (rather than a trustee) on behalf of a prescribing practitioner or pharmacy, the obligations of the trustee under PHIA remain with that practitioner or pharmacy.
Depending on the Customer’s province of residence and the pharmacy or prescribing practitioner involved in facilitating the Customer’s Order, other provincial health-privacy legislation may also apply to the personal health information processed through our platform. Without limitation, this may include Ontario’s Personal Health Information Protection Act, 2004 (PHIPA) and Alberta’s Health Information Act (HIA). GetRuffly will comply with the applicable jurisdiction-specific health-privacy legislation’s requirements regarding the collection, use, disclosure, and security of personal health information, in a manner consistent with the information-manager and trustee distinctions described above. Where multiple provincial regimes apply, GetRuffly will comply with the most protective applicable requirements.
For questions regarding the applicability of PHIA to your personal health information, please contact our Privacy Officer.
Canada’s Anti-Spam Legislation (CASL) governs the sending of commercial electronic messages (“CEMs”). GetRuffly complies with CASL as follows:
When we determine it is appropriate to do so, we may modify, remove, or add to this Privacy Policy. We shall give notice in a timely manner of any material changes in our information handling practices and privacy policy by posting the updated policy on our website and, where we hold your email address, by sending a notification of the change.
The modification date at the top of this Privacy Policy assists you in knowing when this policy was last updated. We encourage you to review this Privacy Policy periodically.