Privacy policy

aiCurePath Prescription Portal Privacy Policy

Effective Date: July 15th, 2026
Last Updated: July 15th, 2026

1. Important Notice

This Privacy Policy explains how aiCurePath Health Platform Inc. / aiCurePath Health Inc. (“aiCurePath,” “Platform,” “we,” “our,” or “us”) collects, uses, stores, discloses, and protects personal information, patient-related information, practitioner information, prescription-related information, and order-related information when users access or use the aiCurePath Prescription Portal.

The aiCurePath Prescription Portal is a healthcare technology platform intended for use by licensed healthcare practitioners, including licensed Traditional Chinese Medicine practitioners, doctors, or other authorized healthcare professionals, to prescribe, recommend, or order medications, herbal products, supplements, and related products for their patients.

This website is not a public marketplace. It is not intended for general self-diagnosis, self-prescription, or independent purchase of prescription-related products without practitioner involvement.

By accessing, registering for, prescribing through, placing an order through, submitting information through, or continuing to use the Portal, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to information collected through:

The aiCurePath Prescription Portal;
Practitioner account registration and login;
Patient information entry forms;
Prescription or product order submission tools;
Product selection and prescription management tools;
Payment coordination tools;
Communication tools;
Customer support or administrative communications;
Related websites, pages, forms, and technology services operated by aiCurePath.

This Privacy Policy applies to practitioners, patients, purchasers, clinic representatives, suppliers, fulfillment providers, and other users who interact with the Portal.

3. Applicable Privacy Laws

aiCurePath is based in Canada and may handle personal information in accordance with applicable Canadian privacy laws, which may include the Personal Information Protection and Electronic Documents Act (“PIPEDA”), applicable provincial privacy laws, and applicable health privacy laws.

PIPEDA applies to private-sector organizations that collect, use, or disclose personal information in the course of commercial activities, and the Office of the Privacy Commissioner of Canada explains that consent may be express or implied depending on the circumstances and the sensitivity of the information.

Where Ontario personal health information is involved, the Personal Health Information Protection Act, 2004 (“PHIPA”) may apply depending on the role of the parties and the nature of the information. Ontario’s PHIPA sets out rules for personal health information handled by health information custodians and related parties.

Where Québec users or personal information are involved, Québec’s private-sector privacy law may also apply. Québec’s Act respecting the protection of personal information in the private sector requires enterprises to establish and implement governance policies and practices regarding personal information.

This Privacy Policy is intended to support privacy transparency but does not replace legal advice. aiCurePath should have this policy reviewed by qualified privacy counsel before publication.

4. aiCurePath’s Role

aiCurePath operates the Prescription Portal as a technology platform.

The Portal may support:

Practitioner registration;
Patient-practitioner communication;
Patient information entry;
Prescription or product recommendation submission;
Product listing and product information display;
Order transmission to suppliers or fulfillment providers;
Payment processing coordination;
Administrative communication;
Technology and operational support.

aiCurePath does not provide medical advice, does not diagnose, does not prescribe, does not practise medicine, and does not practise Traditional Chinese Medicine.

Practitioners remain solely responsible for patient assessment, diagnosis, treatment planning, prescription decisions, dosage instructions, contraindication review, informed consent, follow-up care, and medical documentation. Your attached Practitioner Prescription Responsibility Agreement states that practitioners are solely responsible for clinical services including patient assessment, diagnosis, treatment planning, herbal prescription decisions, contraindication screening, follow-up care, documentation, and compliance with professional standards.

5. Information We Collect

Depending on how the Portal is used, we may collect the following categories of information.

5.1 Practitioner Information

We may collect information from or about practitioners, including:

Name;
Professional title;
Clinic or business name;
License or registration number;
Jurisdiction, province, state, or country of practice;
Professional contact information;
Email address and phone number;
Login credentials;
Professional credentials;
Insurance confirmation, if required;
Account status and approval status;
Prescription or order activity;
Communications with aiCurePath, patients, suppliers, or fulfillment providers.

5.2 Patient or Purchaser Information

When a practitioner submits a prescription or order for a patient, or when a patient or purchaser completes an order or payment, we may collect:

Patient name;
Email address;
Phone number;
Shipping or delivery address;
Billing information;
Product order details;
Prescription-related information;
Practitioner name and prescription reference;
Product instructions;
Patient notes entered by the practitioner or patient;
Communications related to the order;
Payment confirmation status.

5.3 Prescription-Related Information

The Portal may collect or process prescription-related information, including:

Prescription ID or order ID;
Practitioner ID;
Patient name or patient contact information;
Prescribed product or formula;
Quantity;
Dosage or usage instructions;
Practitioner notes;
Product cautions or special instructions;
Order status;
Fulfillment status;
Payment status.

5.4 Payment Information

Payments may be processed by third-party payment providers, such as Stripe, Shopify, or other payment processors.

We may receive limited payment-related information, such as:

Payment status;
Transaction ID;
Payment amount;
Currency;
Billing contact information;
Refund or chargeback status;
Payment confirmation.

We do not intentionally store full credit card numbers on our own systems. Payment card information is generally handled by third-party payment processors according to their own privacy and security practices.

5.5 Supplier and Fulfillment Information

If suppliers or fulfillment providers use or receive information through the Portal, we may collect:

Supplier business name;
Contact person;
Business contact information;
Order fulfillment status;
Shipment tracking information;
Product availability;
Product-related communications;
Return, refund, or delivery issue records.

5.6 Technical and Usage Information

When users access the Portal, we may automatically collect technical information, such as:

IP address;
Browser type;
Device type;
Operating system;
Referring page;
Pages viewed;
Date and time of access;
Login activity;
Error logs;
Cookies and similar tracking technologies;
Security and fraud prevention signals.

6. How We Use Information

aiCurePath may use collected information for the following purposes:

To create and manage practitioner accounts;
To verify practitioner eligibility, credentials, or access rights;
To support practitioner-directed prescription submission;
To transmit orders to suppliers or fulfillment providers;
To coordinate product order processing;
To facilitate payment processing;
To send order confirmations or status updates;
To provide customer support;
To communicate with practitioners, patients, purchasers, suppliers, or fulfillment providers;
To maintain security and prevent fraud;
To troubleshoot technical issues;
To improve the Portal and user experience;
To maintain records required for business, legal, compliance, or operational purposes;
To comply with applicable laws, regulations, court orders, or regulatory requests;
To enforce our Terms of Service, Practitioner Agreement, supplier agreements, or platform policies.

We do not use patient-related prescription information to provide medical advice or make clinical decisions.

7. Legal Basis and Consent

We collect, use, and disclose personal information with consent or as otherwise permitted or required by law.

Consent may be provided directly by the user, by the practitioner on behalf of the patient where legally permitted, or through continued use of the Portal after reviewing this Privacy Policy.

Because prescription-related and patient-related information may be sensitive, practitioners are responsible for obtaining all required patient consents before submitting patient information, prescription information, or order information through the Portal.

Practitioners must ensure that patients understand:

What information is being submitted;
Why the information is being submitted;
Who may receive the information;
How the information may be used for prescription, order, payment, and fulfillment purposes;
That suppliers or fulfillment providers may receive the information necessary to complete the order.

8. Practitioner Responsibility for Patient Consent

Practitioners are responsible for ensuring that each patient receives and understands all required notices, disclosures, and consents before any prescription, recommendation, order submission, or treatment-related use of the Portal.

This may include:

Informed consent;
Telehealth or telewellness consent;
Privacy notice;
AI-assistance disclosure, where applicable;
Product-use instructions;
Risks, benefits, and alternatives;
Contraindication and adverse reaction warnings;
Emergency care instructions.

The attached Practitioner Prescription Responsibility Agreement states that practitioners are responsible for ensuring patients receive and understand required notices, including informed consent, telehealth or telewellness consent, AI-assistance disclosure, privacy notice, product-use instructions, and risk-related disclosures.

9. How We Share Information

We may share information only as reasonably necessary for the operation of the Portal, prescription processing, order fulfillment, payment coordination, legal compliance, or user support.

9.1 With Practitioners

Patient and order information may be shared with the prescribing or ordering practitioner so they can provide care, review prescription details, support follow-up, and respond to patient questions.

9.2 With Suppliers and Fulfillment Providers

We may share necessary order and prescription-related information with suppliers, pharmacies, herbal product providers, shipping providers, or fulfillment partners so they can prepare, package, dispense, ship, deliver, or otherwise fulfill the order.

This may include patient name, shipping address, contact details, prescribed product, quantity, practitioner instructions, and order reference details.

9.3 With Payment Processors

We may share payment-related information with third-party payment processors to process transactions, confirm payment status, issue refunds, handle chargebacks, and prevent fraud.

9.4 With Technology Service Providers

We may share information with technology vendors who support hosting, cloud storage, database management, analytics, security, email delivery, payment integration, customer support, or system maintenance.

These providers are expected to use information only for the services they provide to aiCurePath.

9.5 For Legal, Regulatory, or Safety Reasons

We may disclose information where required or permitted by law, including to:

Comply with legal obligations;
Respond to court orders, subpoenas, regulatory requests, or lawful government requests;
Protect patient safety;
Investigate fraud, misuse, or security issues;
Enforce platform terms or agreements;
Protect the rights, property, safety, or security of aiCurePath, users, practitioners, suppliers, or the public.

9.6 Business Transfers

If aiCurePath is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to appropriate confidentiality and legal protections.

10. We Do Not Sell Patient Information

aiCurePath does not sell patient personal information or patient health information to advertisers.

We do not use patient prescription information for unrelated third-party advertising.

Any use of de-identified, aggregated, or statistical information will be handled in a way that does not directly identify individual patients, unless otherwise permitted by law.

11. AI-Assisted Tools and Automated Features

The Portal may include AI-assisted tools, educational content, product references, herbal formula support, wellness suggestions, or clinical support features.

AI-assisted features may process information entered into the Portal to generate informational or support outputs.

AI-generated content:

Does not constitute medical advice;
Does not replace practitioner judgment;
Does not diagnose, treat, cure, or prevent disease;
Does not establish a practitioner-patient relationship;
Must be independently reviewed and verified by the practitioner.

Practitioners remain solely responsible for final clinical decisions, prescriptions, product recommendations, dosage instructions, and patient communications. The attached Practitioner Agreement states that AI-generated content is advisory and informational only and must be independently reviewed and verified by the practitioner.

12. Cookies and Similar Technologies

The Portal may use cookies, pixels, local storage, analytics tools, and similar technologies to:

Keep users logged in;
Remember preferences;
Improve website performance;
Understand how users interact with the Portal;
Detect errors;
Improve security;
Prevent fraud or unauthorized access.

Users may adjust browser settings to block or delete cookies. Some Portal features may not function properly if cookies are disabled.

13. Data Storage and Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, disclosure, alteration, or destruction.

These safeguards may include:

Account authentication;
Access controls;
Encryption where appropriate;
Secure hosting infrastructure;
Logging and monitoring;
Limited internal access;
Vendor security controls;
Staff or contractor confidentiality obligations.

No system is completely secure. We cannot guarantee that unauthorized access, cyber incidents, data loss, or misuse will never occur.

Users are responsible for maintaining the confidentiality of their login credentials and for using secure devices and networks when accessing the Portal.

14. Cross-Border Processing and Service Providers

Some service providers may process or store information outside the user’s province or country, including in Canada, the United States, or other jurisdictions where service providers operate.

When information is processed outside the user’s jurisdiction, it may be subject to the laws of that jurisdiction, including lawful access requests by courts, law enforcement, or government authorities.

aiCurePath will use reasonable contractual or organizational measures to protect personal information handled by service providers.

15. Retention of Information

We retain personal information only as long as reasonably necessary for the purposes described in this Privacy Policy or as required or permitted by law.

Retention periods may depend on:

The type of information;
Account status;
Prescription or order history;
Legal and regulatory requirements;
Payment and tax obligations;
Professional recordkeeping obligations;
Dispute resolution needs;
Security and fraud prevention needs.

Practitioners remain responsible for their own professional recordkeeping and clinical documentation obligations.

16. User Rights and Choices

Subject to applicable law, users may have rights to:

Request access to their personal information;
Request correction of inaccurate or incomplete information;
Withdraw consent, subject to legal and contractual restrictions;
Request deletion of certain information, where permitted;
Ask questions about privacy practices;
File a complaint with aiCurePath or a privacy regulator.

Certain information may need to be retained for legal, regulatory, medical, tax, accounting, dispute resolution, fraud prevention, or safety reasons.

To make a privacy request, contact us using the contact details in this Privacy Policy.

17. Withdrawal of Consent

Users may withdraw consent to certain uses or disclosures of personal information, subject to legal, regulatory, professional, contractual, or operational restrictions.

Withdrawal of consent may limit or prevent access to certain Portal services, including prescription processing, payment, shipping, fulfillment, account access, or support.

18. Accuracy of Information

Users, practitioners, patients, purchasers, suppliers, and fulfillment providers are responsible for providing accurate, complete, and up-to-date information.

Practitioners are responsible for confirming that patient information, prescription information, dosage instructions, contraindications, and order details are accurate before submitting an order.

aiCurePath is not responsible for errors caused by inaccurate, incomplete, or outdated information submitted by users, practitioners, patients, suppliers, or fulfillment providers.

19. Children and Minors

The Portal is not intended for independent use by children.

If a patient is a minor, the practitioner and/or parent or legal guardian must ensure that appropriate consent is obtained before any personal information, health information, prescription information, or order information is submitted through the Portal.

20. Marketing Communications

We may send administrative communications related to account status, prescription orders, payment confirmations, shipping updates, platform changes, security alerts, legal notices, and service updates.

Where permitted by law and with appropriate consent, we may send marketing or promotional communications. Users may unsubscribe from promotional communications using the unsubscribe link or by contacting us.

Users may still receive transactional, legal, security, or service-related messages even if they unsubscribe from marketing communications.

21. Privacy Breach Response

If we become aware of a privacy or security incident involving personal information, we will assess the incident and take steps that may include:

Investigating the incident;
Containing the risk;
Notifying affected individuals where required;
Notifying regulators where required;
Notifying practitioners, suppliers, or service providers where necessary;
Taking corrective action.

Practitioners, suppliers, and fulfillment providers must notify aiCurePath promptly if they become aware of any actual or suspected unauthorized access, disclosure, loss, or misuse of patient information or Portal-related information.

22. Third-Party Websites and Services

The Portal may contain links or integrations with third-party websites, payment processors, shipping providers, supplier websites, or other external services.

This Privacy Policy does not apply to third-party websites or services that are not operated by aiCurePath.

Users should review the privacy policies of those third parties before using their services.

23. Changes to This Privacy Policy

aiCurePath may update this Privacy Policy from time to time.

Updated versions will be posted on the Portal with a revised “Last Updated” date.

Your continued access to or use of the Portal after an updated Privacy Policy is posted means you acknowledge the updated Privacy Policy.

Where required by law, we may provide additional notice or request renewed consent for material changes.

24. Contact Us

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call or email us at aicurepathhealth@gmail.com.

25. Final Acknowledgement

By accessing, registering for, prescribing through, placing an order through, submitting information through, or continuing to use the aiCurePath Prescription Portal, you acknowledge that you have read and understood this Privacy Policy.

You understand that:

aiCurePath is a technology platform only;
The Portal is intended for practitioner-directed prescription and order support;
Practitioners are responsible for clinical decisions, prescriptions, patient consent, and medical documentation;
Suppliers and fulfillment providers may receive necessary information to fulfill orders;
Payment processors may receive necessary information to process payments;
Personal information may be used and disclosed as described in this Privacy Policy.

Country/region