Privacy Policy

Last Updated: March 13 2026

Drug + Bean Holdings Corp., together with its subsidiaries, pharmacies, brands, and affiliated operations (collectively referred to as “Drug + Bean”, “we”, “us”, or “our”), respects the privacy of each customer and prospective customer (“Customer” or “you”).

This includes individuals who visit our pharmacies, use our websites, communicate with us, request pharmacy services, or otherwise interact with Drug + Bean Pharmacies.

Drug + Bean is committed to protecting the personal information and personal health information we collect in accordance with applicable Canadian privacy laws, including the Personal Information Protection Act (Alberta) and the Health Information Act (Alberta).

This Privacy Policy explains:

  • What we mean by personal information

  • The purposes for which we collect and use personal information

  • How we collect and process your information

  • When and with whom we may share your information

  • How your information is stored and protected

  • How you may access or correct your information

  • How to contact us regarding privacy concerns

By doing business with us, visiting our pharmacy, using our website, or communicating with us, you consent to the collection, use, and disclosure of your personal information in accordance with this Privacy Policy.

If you do not agree with this Privacy Policy, please do not use our services or website.

Personal Information

Personal Information means information about an identifiable individual. This may include information that alone or combined with other data can identify you.

Examples include:

  • Name

  • Address

  • Email address

  • Telephone number

  • Date of birth

  • Payment or purchase information

  • Communication records with our pharmacy

Personal information does not include aggregated or anonymized information that cannot reasonably identify an individual.

Personal Health Information

In the course of providing pharmacy services, we may collect Personal Health Information, which is a subset of personal information relating to your health and healthcare.

Examples include:

  • Medication history

  • Prescription information

  • Drug allergies

  • Medical conditions relevant to medication therapy

  • Physician or healthcare provider information

  • Health insurance or drug plan information

Personal Health Information is collected and handled in accordance with the Alberta Health Information Act (HIA) and applicable professional pharmacy regulations.

Purposes for Collecting Information

Drug + Bean collects personal information and personal health information for purposes including:

  • Providing pharmacy services and dispensing medications

  • Maintaining accurate patient records

  • Communicating with you regarding prescriptions, services, or inquiries

  • Verifying identity to prevent fraud or errors

  • Processing payments or insurance claims

  • Communicating with your physician or other healthcare professionals when necessary for your care

  • Providing medication counselling and health services

  • Operating and improving our pharmacy services

  • Responding to inquiries or customer service requests

  • Meeting regulatory, legal, and professional obligations

  • Conducting internal analytics and improving customer experience

  • Marketing or communicating about products or services (where permitted or with your consent)

We do not collect personal information for purposes other than those identified unless we obtain your consent or are required or permitted by law.

How We Collect Personal Information

We may collect personal information in several ways, including:

  • When you visit our pharmacy

  • When you fill or transfer a prescription

  • When you communicate with our pharmacists or staff

  • When you create an account or submit a request on our website

  • When you contact us by phone, email, or other means

  • When your physician, healthcare provider, or insurer provides relevant information

  • When you participate in surveys, promotions, or communications

Most personal health information is collected directly from you or from healthcare professionals involved in your care.

Sharing Your Information

Drug + Bean may share your information only when necessary and appropriate, including with:

  • Healthcare providers involved in your care

  • Prescription insurance providers or drug benefit plans

  • Health authorities or government programs where required

  • Service providers who support pharmacy operations (such as secure IT systems, payment processing, or data storage)

  • Regulatory bodies or professional authorities

  • Law enforcement or government agencies where required by law

We require service providers who process information on our behalf to maintain appropriate privacy and security protections.

Drug + Bean does not sell or rent your personal information to third parties.

Website Use, Cookies, and Analytics

If you visit a Drug + Bean website, we may automatically collect limited technical information such as:

  • IP address

  • Browser type

  • Device information

  • Pages visited

  • Time spent on the site

We may use cookies or similar technologies to improve website functionality, analyze usage, and enhance user experience.

You may configure your browser to refuse cookies; however, some website features may not function properly without them.

We may also use analytics services such as Google Analytics to help us understand how visitors interact with our website.

Advertising and Marketing

Where permitted by law or with your consent, Drug + Bean may communicate with you regarding:

  • Pharmacy services

  • Health-related products

  • Promotions or announcements

You may unsubscribe or opt out of marketing communications at any time.

Drug + Bean does not use personal health information for advertising purposes.

Storage and Retention

Personal information and personal health information are retained only as long as necessary to:

  • Provide pharmacy services

  • Meet legal and regulatory obligations

  • Maintain required health records

  • Resolve disputes or enforce agreements

Information may be securely stored electronically or physically and may be processed using secure cloud-based systems.

Security

Drug + Bean uses administrative, physical, and technological safeguards designed to protect personal information from:

  • Unauthorized access

  • Disclosure

  • Loss or theft

  • Misuse or alteration

These safeguards include secure systems, restricted access to records, staff training, and professional confidentiality obligations.

However, no system can be guaranteed to be completely secure.

Access and Correction

You may request access to personal information or personal health information we hold about you.

You may also request corrections if you believe the information is inaccurate or incomplete.

Requests must generally be made in writing, and we may require identification to verify your identity.

We will respond to requests within the timeframe required by applicable law.

Withdrawing Consent

You may withdraw your consent for certain uses of your personal information, subject to legal and regulatory restrictions.

Please note that withdrawing consent may limit our ability to provide certain services.

Changes to this Privacy Policy

Drug + Bean may update this Privacy Policy from time to time to reflect:

  • Changes in our practices

  • Legal requirements

  • New services or technologies

The updated version will be posted on our website with a revised “Last Updated” date.

Contact Us

If you have questions about this Privacy Policy, wish to access or correct your information, or have concerns about how your information is handled, please contact the respective location:

mission@drugandbean.com

killarney@drugandbean.com

glendeer@drugandbean.com