Privacy policy

What we collect

• Invoice payments: patient name, contact details, invoice number and amount. Card details go directly to Moneris and are never stored by us.
• Insurance information: patient name, date of birth, contact details, plan details and images of insurance cards you upload, used to bill your plan and shared with our pharmacy partner, our partner pharmacy, for that purpose.
• Refill and other requests: the details you enter, so we can contact your physician or reply to you.
• AllergyPath: nothing. The app stores its data on your device only. If a membership is required, we store your email and member code.
• ResQBand: orders, card registrations and family alerts are handled on getresqband.com, also operated by Western Allergy Services Ltd., under the privacy policy published there. The emergency alert texts described below are sent by Western Allergy.

How we use it

To process payments and insurance billing; to fulfil requests; to operate the ResQBand emergency alert texts; and to send transactional messages. Marketing email is sent only if you opt in, and every message has an unsubscribe link.

Storage and security

Our website, its database and our email run on cloud services located outside Canada, mainly in the United States (Vercel hosts the website, Neon the database, and Google Workspace and Resend handle email). Information is encrypted in transit and at rest; while it is stored outside Canada it may be accessible to courts and authorities there under their laws. Card payments are processed by Moneris in Canada, and we never see or store card numbers.

Access to submitted information is limited to staff who need it, and each time staff open an uploaded file it is logged. To protect against fraud and attacks we keep security logs (IP address, time and the action attempted) for 90 days. Uploaded files are kept only as long as needed to process your request and are then deleted on request or per our retention schedule.

Your rights

You can ask what we hold about you, ask us to correct it, or ask us to delete it, subject to legal record-keeping requirements. Contact our privacy officer at info@westernallergy.com or 1 866 335 5294.

Text messages

Western Allergy sends ResQBand emergency alert texts from 1 866 283 6110 only to emergency contacts who have replied YES to a one-time opt-in text. Message frequency varies; message and data rates may apply; reply STOP to opt out or HELP for help. Mobile numbers and opt-in status are used only for this program and are not shared with third parties or affiliates for marketing or promotional purposes. Full details: text message program.

Cookies and analytics

The site itself sets no tracking cookies. Two kinds of measurement may run:

• Vercel Web Analytics: counts page views and the country and device type of visits. It uses no cookies and stores nothing that identifies you; visits are aggregated from a hashed, short-lived request identifier.
• Google reCAPTCHA: on the payment pages only, to stop automated card fraud. Google checks that the browser is being used by a person and applies its own privacy policy and terms. It does not run on any other page.
• Google Analytics: the tag is on every page, but until you accept it in the banner it runs in a restricted mode that sets no cookies and sends Google only cookieless signals (such as the page visited, browser type and time), which Google uses in aggregate. If you accept, it also sets cookies to recognise a returning browser, and Google processes that data under its own terms. Decline, or send a Global Privacy Control signal, and it stays restricted. Private receipt and payment-link addresses are never sent in full. You can change your choice from the "Cookie settings" link in the footer.

AllergyPath keeps its data in your browser's storage so the app works offline; that storage is part of the service you asked for, not tracking, and you can clear it inside the app.

Last updated October 2026.