Privacy Policy

1. What We Collect

GLP1Prices.ca is owned and operated by Onset Security Inc. We collect a limited amount of personal information, only when you voluntarily provide it. Specifically, when you sign up for our Generic Alert waitlist or weekly digest, we collect:

• Your email address • Your province or territory (optional) • Your drug interests (optional)

We do not ask for names, phone numbers or mailing addresses on the site. If you email us (for example a receipt photo), we keep that email in our mailbox to answer you and check the price; please cover your name, address and prescription number before you send it.

The site uses a few cookies and Google Analytics, described in section 4. We do not use fingerprinting.

2. How We Use Your Information

We use the information you provide for the following purposes only:

• To send you a confirmation email when you join the waitlist • To send you a notification when generic semaglutide prices are listed at Canadian pharmacies • To send you our weekly digest, which can include one clearly labelled sponsored message • To personalize your notification by province, if you provided one

Our emails contain a small image that tells us whether an email was opened, so we can count opens. We do not sell your information or use it for profiling, and advertisers never receive it.

3. Price Reports

You can tell us what you paid for a medication at a pharmacy, using the form below some of our price tables. We store the price, the pharmacy, the province, the medication with its dose and pack, the month you paid and your answer about the dispensing fee. We use a report only to check that price. A price appears on the site only after we review it, and the site never shows who reported it.

Leaving your email is optional. If you leave it and tick “You may email me about this price”, we use it only to contact you about that price, for example to confirm the pharmacy or the dose. We never publish it or add it to a mailing list, and we delete it 180 days after we review your report. To have it deleted sooner, email hello@glp1prices.ca.

We do not store your IP address with a report. To stop abuse, we count reports per visitor using a keyed one-way hash of the IP address, which we keep for at most 24 hours.

4. Analytics, Cookies and Local Storage

We use Google Analytics 4 to count visits and see which pages are useful. Google sets its own cookies (named _ga and _ga_*) and receives the page you view, your browser and device type, and an approximate location derived from your IP address. We do not send Google your email address or anything you type into a form.

The site also sets these cookies of its own:

• glp1_lang: remembers whether you chose English or French (1 year) • glp1_geo_prov: your approximate province, taken from your connection, so pages show only services available where you are (on a few pages, until you close the browser) • glp_sid: a random code that lets us count clicks on partner links without knowing who you are (180 days) • glp1_home_quiz_design: remembers which version of the home page you saw while we test designs

If you pick a province, medication or dose, the site can remember that choice in your browser’s local storage so you see it next time. It stays on your device and is not sent to us. You can clear cookies and site data in your browser settings at any time.

4a. Chat Assistant

If you use the chat assistant, the messages you type are sent to Anthropic, the provider of the AI model, to write a reply. We keep each conversation, with email addresses and phone numbers removed, for up to 180 days to improve the answers. Please do not type health details, names or other personal information into the chat.

5. Data Storage and Security

Your information is stored securely using the following services:

• Database: PostgreSQL hosted on Neon (servers located in the United States) • Email delivery: SendGrid, a Twilio company (servers located in the United States) • Analytics: Google Analytics (Google, United States) • Chat assistant: Anthropic (United States) • Hosting: Vercel (servers located in the United States) • CDN and security: Cloudflare (global network)

Because our service providers are based in the United States, your personal information may be stored and processed outside of Canada. Under PIPEDA, we are responsible for ensuring that our service providers protect your information to a comparable standard. Each of our providers maintains industry-standard security practices, including encryption in transit and at rest.

We use HTTPS encryption for all data transmitted between your browser and our servers. Access to stored personal information is restricted to the site administrator.

6. Third-Party Sharing

We do not sell, rent, trade, or share your personal information with any third party for marketing or commercial purposes.

Your information is only shared with the service providers listed in Section 5, strictly for the purpose of operating this website and delivering emails to you. These providers act as data processors on our behalf and are contractually required to protect your data.

7. Data Retention

We retain your waitlist information for as long as you remain subscribed. If you unsubscribe or request deletion, we will remove your personal information from our database within 30 days.

Google Analytics keeps visit data under the retention period set in our account, no longer than 14 months. Chat conversations are kept for up to 180 days. Emails you send us stay in our mailbox until we delete them; ask us and we will.

8. Your Rights Under PIPEDA

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

• Access: Request a copy of the personal information we hold about you • Correction: Request that we correct any inaccurate personal information • Deletion: Request that we delete your personal information • Withdrawal of consent: Withdraw your consent to our collection and use of your information at any time

To exercise any of these rights, email our privacy officer at privacy@glp1prices.ca (or hello@glp1prices.ca). We will respond to your request within 30 days, as required by PIPEDA.

You can also unsubscribe from our waitlist at any time by clicking the unsubscribe link in any email we send you.

9. How to Contact Us

If you have questions about this privacy policy or how we handle your personal information, contact us at:

Privacy officer: privacy@glp1prices.ca General: hello@glp1prices.ca Onset Security Inc., Toronto, Ontario

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. When we make changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of GLP1Prices.ca after changes are posted constitutes your acceptance of the updated policy.

11. Consent

By using GLP1Prices.ca and voluntarily providing your email address through our waitlist signup, you consent to the collection, use, and storage of your personal information as described in this privacy policy.

You may withdraw your consent at any time by unsubscribing from our waitlist or by contacting us at hello@glp1prices.ca.