Privacy Policy

1. Who we are and scope

This Privacy Policy describes how Fadak AI operating as Fadak ("Fadak," "we," "us," or "our") collects, uses, discloses, and protects personal information in connection with our website at fadakai.com (the "Site") and the healthcare coordination and related services we offer in Ontario, Canada (collectively, the "Services"). By using the Site or Services, you acknowledge this policy.

We follow practices aligned with Canadian private-sector privacy law and with common expectations in Ontario healthcare settings: limiting collection, using information only for identified purposes, safeguarding information, and being transparent about our practices.

2. Legal framework (Ontario and Canada)

Our collection, use, and disclosure of personal information is governed primarily by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and by Ontario law where it applies. Where we handle personal health information (as defined under Ontario's Personal Health Information Protection Act, PHIPA), we do so in a manner consistent with Ontario health-privacy principles: accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access, and accountability for compliance.

Depending on our role and the nature of the information, additional obligations may apply. Nothing in this policy is intended to reduce any protection that applicable law provides to you.

3. Information we collect

We may collect the following categories of information, depending on how you interact with us:

• Contact and identity information you provide, such as name, email address, phone number, and relationship to a care recipient.
• Scheduling and communications you submit through forms, email, or third-party booking tools (for example, Calendly), including messages and availability.
• Service-related information you choose to share for coordination purposes (for example, appointment details, provider names, or health-related context needed to assist you). We collect only what is reasonably necessary for the purposes described in this policy or as otherwise permitted or required by law.
• Technical and usage data such as IP address, device type, browser, general location derived from IP, pages viewed, and referring URLs, collected through cookies and similar technologies as described below.

4. How we use information

We use personal information to:

• provide, schedule, and improve the Services;
• respond to inquiries and communicate with you;
• operate, secure, and troubleshoot the Site;
• comply with law and enforce our terms; and
• analyze usage in aggregate or de-identified form to improve our offerings.

We do not sell your personal information. We do not use your information for automated decision-making that produces legal or similarly significant effects.

5. Consent and withdrawal

We rely on express or implied consent to collect, use, or disclose personal information as appropriate, except where the law permits or requires otherwise. You may withdraw consent where withdrawal is practicable and where not inconsistent with legal or contractual obligations; withdrawal may affect our ability to provide certain Services.

6. How we share information

We may share personal information with:

• Service providers who assist us (for example, hosting, email, analytics, scheduling, or videoconferencing), located in Canada or elsewhere, under contractual terms that require appropriate protection of personal information.
• Professional advisers where necessary (for example, lawyers or accountants).
• Authorities when required by law, regulation, court order, or to protect rights, safety, or security.
• Business transfers in connection with a merger, acquisition, or sale of assets, with notice as required by law.

7. Cookies and similar technologies

We and our partners may use cookies, local storage, and similar technologies to remember preferences, understand how the Site is used, and improve performance. You can control cookies through your browser settings; disabling cookies may affect Site functionality.

8. Retention

We retain personal information only as long as necessary for the purposes described in this policy, to meet legal, regulatory, tax, or professional obligations, and to resolve disputes. Retention periods vary by type of information and purpose.

9. Safeguards

We implement reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information, consistent with practices commonly used in Ontario healthcare and professional service settings. These measures may include access controls, secure transmission where applicable, staff training, and vendor oversight.

No safeguards are perfect. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed in a manner that breaches our safeguards.

10. Data breaches and incident response

If we become aware of a breach of security safeguards involving personal information under our control that poses a real risk of significant harm, we will follow applicable breach-notification requirements under PIPEDA and other applicable law. This may include notifying affected individuals and, where required, reporting to the Privacy Commissioner of Canada and, where applicable, the Information and Privacy Commissioner of Ontario (IPC), and taking steps to mitigate harm.

Limitation: To the fullest extent permitted by applicable law, Fadak is not liable for any damages, losses, costs, or claims arising from or related to any unauthorized access, disclosure, loss, or misuse of personal information or personal health information, including cyber incidents and third-party attacks, except where such limitation is prohibited by law. This includes, without limitation, indirect, consequential, incidental, special, or punitive damages, and loss of profits, reputation, or business opportunity. See also our Terms of Service.

11. Your rights and complaints

Subject to applicable law, you may have the right to:

• request access to your personal information and information about how we have used it;
• request correction of inaccurate or incomplete information;
• withdraw consent where processing is based on consent, subject to legal or contractual restrictions; and
• challenge our compliance with applicable privacy principles.

To exercise these rights, contact us at info@fadakai.com. We may verify your identity before responding. You may also file a complaint with the Privacy Commissioner of Canada (priv.gc.ca) or, for matters within its mandate, the Information and Privacy Commissioner of Ontario (ipc.on.ca).

12. Minors

The Site and Services are not directed at individuals who lack capacity to consent under applicable law. We do not knowingly collect personal information from children inappropriately. If you believe we have collected information that should not have been collected, contact us and we will take appropriate steps.

13. Cross-border processing

Personal information may be processed and stored in Canada or in other jurisdictions where our service providers operate. Where information is transferred outside Canada, we take steps that are appropriate in the circumstances, including contractual protections where required.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. Material changes may be communicated through the Site or by email where appropriate.

15. Contact

Privacy inquiries and requests: info@fadakai.com