This policy explains how Drip Tonic Inc. (“we,” “us,” “Drip Tonic”) collects and uses personal information through driptonic.ca. It is written to align with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario’s applicable privacy frameworks.
Your clinical information — intake forms, session notes, and medical history — is governed by Ontario’s Personal Health Information Protection Act (PHIPA). Drip Tonic Inc. is the health information custodian for those records; we use our booking platform JaneApp as our service provider to collect and store them on our behalf, in Jane’s Canadian healthcare-secured environment. They are not stored on driptonic.ca.
1. Who we are
Drip Tonic Inc. is an Ontario corporation offering RN-administered, NP-supported mobile IV therapy across Toronto, the Greater Toronto Area, and surrounding areas. Our website (driptonic.ca) is the marketing front for that service. Bookings, intake, and payment are handled through JaneApp.
Privacy Officer: Drip Tonic’s Privacy Officer is accountable for our compliance with this policy and can be reached at wellness@driptonic.ca.
2. What we collect
The website collects only what is necessary for the page you are using:
- Event inquiry form: your name, email, phone, event date, headcount, location, and a brief description of the occasion.
- Newsletter signup (if you choose to subscribe): your email address.
- Blend quiz (if you ask us to email your result): your email address and the blend you matched with. This adds you to our email list; you can unsubscribe anytime.
- Direct email to us: whatever you choose to write to wellness@driptonic.ca.
- Website analytics: page views, referring source, device type, and approximate location. We use Google Analytics, which sets cookies. Analytics runs only if you accept it in our cookie banner; if you decline, these cookies are not set.
We do not collect health information through this website. Any medical history, allergies, medications, or symptoms you share with us happen inside the JaneApp intake, never through driptonic.ca forms.
3. Why we collect it
- To respond to your event inquiry or email.
- To send you the newsletter you signed up for, and your blend match if you requested it from the quiz.
- To understand which pages people read and where they come from, so we can improve the site.
We never sell your information. We never share it for advertising. Every email we send includes a one-click unsubscribe.
4. Where your information goes
We use trusted third-party services to run the website. Each receives only the data needed for the job:
| Service | What it sees | Why |
|---|---|---|
| JaneApp | Bookings, intake, session notes, payment | Booking platform and storage for clinical records (PHIPA) |
| Netlify | Page traffic, form submissions | Serves the website and routes form submissions |
| Microsoft 365 (Outlook) | Event-inquiry submissions and emails to wellness@driptonic.ca | Our business inbox and where form notifications arrive |
| Brevo | Subscriber email + opt-in date | Stores the subscriber list and sends the newsletter and quiz emails; data may be processed in the European Union or other jurisdictions |
| Google Analytics | Cookie-based, aggregate usage data — only with your consent | Tells us which pages are useful |
Some of these providers store data outside of Canada (typically the United States or European Union). Where that happens, the data may be subject to the laws of those jurisdictions. If you contact us from Quebec, this means some of your information may be stored outside Quebec and Canada. We choose providers with strong security and privacy practices.
5. How long we keep it
- Event inquiries: kept for 2 years after the event concludes, then deleted.
- Newsletter: kept until you unsubscribe, then removed from our active list.
- General emails: kept for as long as the conversation is useful, then archived or deleted.
- Analytics: aggregate visit data is kept indefinitely; it does not identify you.
6. Cookies & tracking
We use two kinds of cookies, and nothing more:
- Essential cookies needed for the site to work — for example, remembering your cookie choice or that you closed a banner. These are always on.
- Analytics cookies set by Google Analytics, which help us see which pages are useful. These are off by default and load only after you accept analytics in our cookie banner.
When you first visit, our banner lets you accept or decline analytics; declining is as easy as accepting, and you can change your mind at any time by clearing this site’s data in your browser. We do not set advertising cookies and do not track you across other websites.
When you click through to JaneApp to book, you leave driptonic.ca and enter Jane’s platform. Jane’s own cookie and privacy policy applies there.
7. How we protect your information
- The website runs over HTTPS (the padlock in your browser).
- Form submissions and emails are protected in transit by industry-standard encryption.
- Access to our subscriber list and inboxes is restricted to the founders, secured with two-factor authentication.
- Clinical records live inside JaneApp’s PHIPA-compliant environment; we do not duplicate them elsewhere.
8. Your rights
You have the right to:
- Know what personal information we hold about you.
- Receive a copy of it, in a usable format.
- Correct anything that is inaccurate.
- Withdraw consent for any use you previously agreed to (for example, by unsubscribing from the newsletter).
- Ask us to delete your information, subject to any legal record-keeping requirements.
- Complain to the Office of the Privacy Commissioner of Canada if you believe we have mishandled your data: priv.gc.ca.
To exercise any of these rights, email wellness@driptonic.ca. We aim to respond within 30 days.
9. Breach notification
If we discover a privacy breach involving a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner without unreasonable delay, as required by PIPEDA.
10. Photography & media
At group bookings and events, we may take photographs or video for marketing — our website, social media, and promotional material. We ask for your consent before using any image in which you are identifiable, and you can decline at the event with no effect on your session. For any guest under 18, we obtain consent from a parent or legal guardian before using their image.
If an image of you is already published and you’d like it removed, email wellness@driptonic.ca and we will take it down from the channels we control.
11. Children
Drip Tonic services are intended for adults. A guest under 18 may be served only with the consent of a parent or legal guardian, who provides the intake information on their behalf. We do not knowingly collect personal information directly from anyone under 18 through driptonic.ca. If you believe we have, please contact us so we can remove it.
12. Changes to this policy
We may update this policy as the site or our tools change. When we do, the “Last updated” date at the top will change. Material changes will be noted prominently on this page for at least 30 days.
13. Contact
Drip Tonic Inc.
Toronto, Ontario, Canada
wellness@driptonic.ca
647-787-6818
This policy is provided for transparency and is not a substitute for legal advice. Specific situations may require a different approach. If you have a concern about how your data has been handled, write to us first. We’ll work with you in good faith.