Privacy Policy

Effective as of October 10, 2024

‍myStoria is committed to the highest standards of privacy and security to ensure that any personal information you entrust to us when using our Services is fully protected. This policy, which is part of our Terms of Service, sets out our practices when collecting, using and disclosing any of your information in the course of providing you Services through the myStoria Platform (“Privacy Policy”). Defined terms within this policy have the same meaning as our Terms of Service unless otherwise indicated.
‍
‍Information we collect and use in delivery of Services
‍
Your Information
‍When you set up an account with us, we collect your identification and contact information, such as first name, last name, telephone number, mailing address and email address, as well as payment information, such as your credit card number, and we use this information when providing Services to you, including when using and communicating through the myStoria Platform and accessing customer support.

We also collect personal health information, including reproductive health information, medical diagnoses, lab testing results, symptoms, medication history, appointments and other information should you choose to upload this information into the myStoria Platform in order to use various features and functionality.  Additionally, should you authorize us, we assist you in obtaining your relevant medical records from your care providers and capture it into your myStoria profile for your convenience and reference.

The myStoria Platform may be used to capture information about individuals who form part of your health journey with you, such as your partner, surrogates or donors.  By inputting information into the platform about these or any other individuals, you represent and warrant that you have their permission to do so.

All your information collected and captured within the myStoria Platform will be considered your “Client Data”.  The purposes for which we use your Client Data, include, but may not be limited to, enabling and supporting:
‍
- Service delivery: in delivering all the features and functionality of the myStoria Platform to which you have subscribed or are using, including all related technology and data services, as well as the Concierge Service;
- Service performance and improvement: delivering service excellence by keeping the myStoria Platform technically optimized and performant, enhancing Services, developing new Services and meeting quality, reliability, privacy, security and accessibility needs;
- Payment processing: using your credit card number to process payments for Services; and
- Customer relationship management: informing you about new Services, features, offers, promotions and other pertinent information relevant to your account with us.

In order to deliver the Services to you, we may need to share your information with various parties, including, but not limited to those listed below. In doing so, we will respect and protect your privacy by using all reasonable measures to minimize the amount of information disclosed, including providing only de-identified information where possible:

- Service providers: we may engage third-party providers to support us in the delivery of the Services, including technology and data services and payment processing.
- Public authorities: we may disclose personal information to authorized law enforcement, regulators, courts, or other public authorities in response to lawful requests or to protect our rights and individual safety.
- Business Partnerships and Corporate Transactions: we may disclose personal information as permitted by law for strategic business transactions or in the case of a corporate acquisition or merger.

Concierge Team Communications
‍Your Concierge Team member is there to support you in your health journey. They are knowledgeable staff with strict duties to maintain the confidentiality of your information and only share with members of your care team or others as you authorize for the purpose of delivering Services to you.  In order to best support your care journey, our Concierge Team will access your myStoria profile on a need-to-know basis, including to input records and keep your profile updated.  All accesses to your record are audited and monitored to ensure privacy and security.

If you request the assistance of our Concierge Team to obtain your medical records from your healthcare providers for loading into your myStoria profile, we will obtain your express authorization to do so and procure such records using secure mechanisms.

‍Safeguarding your information
‍When you use the myStoria Platform or other Services to record, capture, input and generate information, the myStoria Platform maintains such information on secure servers located in Canada and the United States, which is kept private and confidential to myStoria.

myStoria uses industry-leading technical and organizational security measures, such as multi-factor authentication and encryption, to protect your Client Data, held by us from unauthorized access, disclosure, modification, and accidental loss and destruction.  

‍Data Retention
‍If you cancel or pause your myStoria subscription, we will maintain your Client Data for a period of 3 years from the data of cancellation or suspension of your account, after which we will securely dispose of the data in accordance with our records retention policy, if the subscription is not renewed or resumed.myStoria retains personal information only as long as necessary to provide and improve the Services or to meet legal obligations. For purposes of enhancing and developing new Services or myStoria technologies, we may retain de-identified information as permitted by law, including after you have ceased using the Services, and such information will be securely deleted once it is no longer needed for such purposes.
‍
‍International transfers
‍In order to deliver Services to you, we may rely on technology that stores or processes your information outside the jurisdiction in which you reside.  As such, your information may become subject to the laws of another jurisdiction, which may differ from the laws of your jurisdiction. By using our Services, you consent to the transfer of your information outside of your jurisdiction when necessary for delivering the Services.

‍Privacy Rights
‍Subject to certain limitations and depending on the privacy laws applicable to you, you may have the following legal rights regarding your information:
1. Right to access or correct your information held by us;
2. Right to have certain personal information that is held by us disposed of or removed;
3. Right to object to the processing of your information, as allowed by applicable law;
4. Right to object to marketing by changing your marketing and email preferences; and
5. Where we rely on your consent to process your information, you may have the right to withdraw or decline your consent at any time and, where we rely on legitimate interests, you have the right to object (as noted above). Please note that withdrawing your consent may affect your access and ability to use our Services.

You have the right to file a complaint about the way we use or process your information with the Information and Privacy Commissioner of Ontario (Canada) or other data protection authority as may be applicable to your jurisdiction.

Should you need to access or correct your information that is held by us, you can update such information accordingly within the myStoria Platform or use the contact information in the “Contact Us” section at the end of this policy to reach us.

‍Cookies and other similar technologies
‍myStoria uses cookies and similar tracking technologies on our website and the myStoria Platform to enhance user experience.  Should you have any questions about how we use cookies, please use the contact information in the “Contact Us” section at the end of this policy to reach us.

‍Third Party Sites and Links
‍The myStoria Platform may contain links to other websites, including the myStoria Community on Circle, that are not under our control and we assume no responsibility for those links or the privacy practices of the websites should you choose to navigate to them and use their services or products.  

‍Updates
‍We may update this Privacy Policy from time to time to reflect changes to how we handle your information held by us. Your continued use of our website, the myStoria Platform or Services will be deemed acceptance by you of the updated Privacy Policy.

‍Contact Us
‍If you have any questions or concerns about our privacy practices or this policy, you may contact us by email: privacy@mystoria.com.