LeoMed Privacy Policy

This English version is a translation provided for convenience. In case of any discrepancy, the French version prevails.

Below you will find the privacy policy for
LeoMed Technologies Inc.

If you have any questions regarding the privacy policy, please contact Joseph Aubut at the following address: sécurité@leomed.co

Updated: February 11, 2024

Introduction

This policy protects the personal information and data subject rights of customers or external users of LeoMed Technologies Inc (hereafter LeoMed) products and services, including its LeoMed Gateway mobile application, by clearly explaining the following:

  • What personal information we need (and why we need it);
  • How we protect your personal information and the rights of the individuals concerned;
  • How to request and access your personal information;
  • How to give, refuse or withdraw consent to the use of your personal information;
  • How to give, refuse or withdraw consent to the collection and use of their personal information or lodge complaints;
  • To be informed, without unnecessary delay, if your personal information is leaked to an unauthorised third party.

This policy applies to all personal information stored on systems and media that are owned, leased or otherwise provided by LeoMed, regardless of location.

Personal information we may need (and why we need it) :

Including as sources LeoMed's web application and its mobile application LeoMed Gateway, we may collect and process these examples of information (at times, we may also need to collect other personal information not listed here):

  • Personal health information
  • Health data from connected devices (e.g. vital signs)
  • Research data
  • Software analysis
  • Protection of your information

Protection of your information

LeoMed has appointed a Security Officer who is responsible for your rights as a data subject. We have appropriate technical and organisational measures in place to protect your information. We will process and protect your information in accordance with these data protection principles:

  • Personal information shall be treated fairly and lawfully.
  • Personal information shall only be obtained for one or more specified and lawful purposes and shall not be processed in a way that is incompatible with that purpose or those purposes.
  • Personal information shall be adequate, relevant and not excessive in relation to the purposes for which it is processed.
  • Personal information shall be accurate and updated as necessary. Personal information shall not be kept longer than necessary.
  • Personal information shall be processed in accordance with your rights as a data subject as set out in the Privacy Regulation(s) ("GDPR"), ("PIPEDA") or ("CCPA").
  • Appropriate technical and organisational measures shall be put in place to protect personal information against unauthorised or unlawful processing and against accidental loss, damage or destruction.
  • Personal information will not be transferred to a country or territory outside your country unless we can be assured that the level of protection for your personal information is adequate.
  • You will be notified in writing of any changes or updates to the controls in place to protect your personal information.

Inventory of personal information

To protect personal information, LeoMed maintains an accurate inventory of all personal information that is collected, processed or stored and transferred by LeoMed.

Cookies are small pieces of data that a website stores on your computer that allow the website to remember a user based on the device they are using. This can allow a website to remember the state the user left when they closed their browser or to track information about the user's experience with the website. Some cookies are used to track other analyses about the user's experience on the website, such as the pages they have visited, the links they have clicked on, or the time they have spent on a certain page.

LeoMed uses cookies to track various information about your use and personal experience of the LeoMed website and does so only with your consent, using a cookie banner.

We may track, with your consent, the following details about your experience on our website

  • Monitoring preferences
  • Authentication and security
  • Status of the session
  • Various analyses

Special considerations for California residents

As a California resident, you have the following rights:

  • To refuse to have your data sold, disclosed or exchanged for services in kind.
  • Have a clear and visible option to give or withhold your consent to the disclosure or sale of your information.
  • If you choose not to participate in the collection or use of your personal information, you have the right to acquire the same service or product offering as the person who chose to participate.
  • You have a private right of action that allows you to seek statutory or actual damages for a data breach resulting from a lack of reasonable security measures. This means that whether or not there has been any actual loss to you as an individual, when your information is disclosed due to a lack of security, you have the right to sue or join a class action lawsuit for damages.

Access to your information (requests for access to personal information)

You have the right to request a copy of the personal information we hold about you and to have any inaccuracies in your personal information corrected. When you submit a request for your personal information, you have the right to:

  • Know what personal information LeoMed processes or has processed.
  • To know the reason(s) and purpose(s) for processing your personal information.
  • Know whether your personal information has been shared and if so, with whom and for what purpose(s).

Procedure for submitting a subject access request

The process for submitting a subject access request is as follows:

  • Requests for your personal information are submitted to your organisation by email.

Implied consent is given if the user uses the services offered by LeoMed after the cookie banner is displayed. Explicit consent is given after reading and accepting the privacy policy of the LeoMed website, which is publicly available.

Explicit consent is withheld if the privacy policy is not read and accepted, or if a customer uses the contact information or a form on the LeoMed website to request withdrawal of consent. LeoMed will never assume or imply consent from persons under the age of 16.

Express consent can only be freely given if the person concerned is 16 years of age or older. Children between the ages of 13 and 16 must give their explicit consent before their information is processed or stored for use and we ask parents or guardians to give their explicit consent first. Children under the age of 13 will not have their personal information processed or stored for use by LeoMed.

Privacy complaints can be directed to the following email address

Correct inaccuracies in your personal information.

You have the right to correct any inaccuracies in your personal information that we collect.

LeoMed gives you the opportunity to correct inaccuracies in your personal information.

Right to be forgotten

You have the right to request that your information be deleted and that you be completely forgotten about from our records, unless there is a legal basis to retain the records, such as financial transactions and tax purposes.

Notification of leaks and violations

An individual whose personal information has been leaked or is included in a breach has the right to be notified within a reasonable time after the leak or breach is discovered and if the personal information disclosed was in unencrypted form.

Notification of a leak or breach will be expedited if the lost personal information presents a real risk of significant harm to the individual. This type of personal information is called "sensitive information". The individual whose personal information has been disclosed will be informed of the possible consequences of the leak. Sensitive information that could pose a real risk of significant harm to an individual includes, but is not limited to, information that could result in the following

  • personal injury
  • humiliation
  • damage to reputation or relationships
  • loss of employment
  • loss of business or professional opportunities
  • financial loss
  • identity theft
  • negative effects on the credit report
  • damage to or loss of property