Privacy policy
ADPpro is a catalogue of Ontario Assistive Devices Program (ADP) seating and mobility products for healthcare providers. It is run by the ADPpro operator, who is responsible for the personal information described here. This policy covers this site (adppro.ca) and the app at app.adppro.ca.
In short
- To sign in, you give us your email address. That is the only thing we ask you for.
- We use it to sign you in, to decide on your beta access request, and to tell you once when you are approved.
- We do not sell it, send marketing, or use analytics or advertising trackers.
- It is stored in the United States by our service providers, Neon and Cloudflare.
- You can ask us to see, correct, or delete it at any time.
What we collect and why
Your account
When you sign in, you enter your email address and we send it a one-time code. Your first sign-in creates an account holding your email address, whether it has been confirmed, and when the account was created and last changed. We use it to sign you in and to recognise your account.
Each sign-in creates a session, which records the IP address and browser it started from, along with when it expires. We use sessions to keep you signed in and to protect your account.
Your beta access request
ADPpro is in a limited beta. Your first sign-in also records a request to join it. We keep its status (pending, approved or declined) and the dates it changed. A beta reviewer looks at each request by hand, using your email address to recognise it.
Emails we send
We send you two kinds of email: the sign-in code you ask for, and one message when your beta access is approved. Neither adds you to a mailing list. If you reply to us, we receive your message and your email address.
Request logs
Like most websites, our hosting records each request for security and troubleshooting: the address requested, your IP address, your browser and the time. The app's searches travel as requests, so the logs can include the measurements you search by. Those measurements do not identify anyone and we do not save them anywhere else.
On your device
The app does not save the measurements you enter. They are gone when you reload the page. It does remember some settings in your browser's own storage on this device: your name search, brand and specification filters, results layout, and which measurement fields you show. These stay after you sign out; the Clear button removes the filters, and clearing this site's data in your browser removes them all. Your seating build is kept only until you sign out or close the browser tab. Signing in sets cookies on our sign-in service to hold your session. Neither site uses analytics, advertising or tracking cookies.
What we do not collect
ADPpro does not ask for patient names or other patient identifiers, and the app has no place to enter them. Please do not include patient information in emails to us.
Who processes it
We use two service providers, who handle your information only to provide their service to us:
- Neon runs our database and sign-in service. Your account, sessions and beta access request are stored with Neon on Amazon Web Services in the us-east-1 region (Virginia, United States).
- Cloudflare hosts both sites, keeps the request logs, and delivers our emails through Cloudflare Email Sending. Cloudflare runs a global network, so a request may be handled in a data centre outside Canada.
We do not sell or rent personal information, share it for marketing, or send it to AI services.
Storage outside Canada
Your information is stored in the United States and may be processed in other countries where Cloudflare operates. While it is there, it is subject to the laws of that country, and authorities there may be able to obtain it under those laws.
How long we keep it
- Account and beta access request: while your account exists. If you ask us to delete it, we do so within 30 days.
- Sign-in sessions: they expire on their own, and are deleted with your account.
- Sign-in codes: they expire after 5 minutes.
- Your address for the approval email: cleared as soon as the email is sent, or within 14 days if it cannot be delivered.
- Request logs: up to 7 days.
- Database backups: backups roll over automatically, so deleted information leaves them within 30 days.
- Emails you send us: as long as we need them to answer you.
How we protect it
Every connection is encrypted, and stored data is encrypted by our providers. Only the operator has direct access to the database, and your browser never receives database credentials. The people who review beta requests see a requester's email address, the status and dates of the request, who decided it, and whether the approval email was delivered. The catalogue is shown only to approved, signed-in accounts.
Your choices
You can ask to see the personal information we hold about you, to correct it, or to delete your account. Deleting your account also withdraws your beta access request and ends your access to the app. To make a request, email us from the address you sign in with, so we can match it to your account.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.
Contact
Questions or requests about your personal information: feedback@adppro.ca.
Changes
If this policy changes, we will post the new version here and update the effective date above.