Privacy Policy
Clinique Hormo-nova Inc.
Last updated: October 20, 2026
Clinique Hormo-Nova inc. (“we” or “us”) places great importance on protecting the personal information of its patients and clients. This policy describes how we collect, use, retain and protect your information, in accordance with the Act respecting the protection of personal information in the private sector (Law 25).
This privacy policy applies only to the website currently in use (hormonova.ca) (the “Website”). Any site that a user can access through a hyperlink or outbound link on the Website does not form part of the Website and is in no way connected to it for the purposes of this privacy policy. Accordingly, the MedFar client portal is a platform outside the technical scope of the Website. The secure portal is governed by its own terms. No personal information is transmitted to the client portal from the Website, which contains only an outbound link to it. The collection and processing of personal information through the patient portal (appointment booking and electronic medical record) are governed by the portal’s own terms and privacy policy.
Person in charge of the protection of personal information
Any question or request regarding this privacy policy must be sent to the person in charge of the protection of personal information:
Person in charge: Catherine Bouchard
Email: catherine@hormonova.ca
Telephone: 450-233-2258
Address: 210-190, chemin du Bas-de-Sainte-Thérèse, Blainville, Québec J7B 1A7
Personal information collected
We collect, or may collect, the following personal information through our Website:
- IP address, browser identifier, request headers, pages viewed and timestamps.
- Cookies, as described below:
- _fbp (advertising and profiling, set only with consent; identifies the browser for Meta advertising measurement and targeting, retained for 90 days)
- _tccl_visitor (audience measurement, set only with consent; recognizes a visitor from one session to the next (host’s analytics), retained for 12 months)
- _tccl_visit (audience measurement, set only with consent; defines the boundaries of a visit (host’s analytics), retained for 30 minutes)
- _scc_session (audience measurement, set only with consent; counts the pages viewed during a session, retained for 20 minutes)
- lastExternalReferrer (advertising and profiling, set only with consent; stores the visitor’s external referral source (written by the Meta pixel), retained until consent is withdrawn)
- __cf_bm (strictly necessary, set by Cloudflare; distinguishes human visitors from bots (protection of the content delivery network), retained for 30 minutes)
- wp-wpml_current_language (set only with consent; remembers the selected display language, retained for the duration of the session)
- cookieyes-consent (set by CookieYes; stores the visitor’s consent choice and serves as proof of that choice), retained for 12 months.
- Information submitted through forms:
- Contact form, in French and English (the information entered is not disclosed to any third party or transmitted to the Meta pixel)
- Contact details (last name, first name, address, email, telephone, etc.)
- Newsletter
The personal information listed above will be, or may be, disclosed to the following recipients:
- Meta pixel (advertising and campaign measurement; IP address, browser identifier, pages viewed, timestamps), located in the United States
- GoDaddy hosting and analytics (hosting, delivery and usage measurement of the Website; IP address, browsing logs, measurement identifiers), located in the United States
- Cloudflare (proxy, bot protection and content delivery; IP address, request headers, session fingerprint), global server network
- CookieYes (consent management and consent log; IP address, consent identifier and consent choices), located in the United Kingdom and India;
- MedFar patient portal (no information transmitted from the Website, outbound link only), located in Canada;
- Legal or regulatory authorities, where required by law.
Four of these recipients, namely Meta, GoDaddy, Cloudflare and CookieYes, process information outside Quebec, including in the United States, the United Kingdom and India. This information may therefore be subject to the laws of those jurisdictions. Before disclosing personal information outside Quebec, we assess whether it will receive adequate protection, in accordance with section 17 of the Act respecting the protection of personal information in the private sector.
The Website is not a transactional site; accordingly, no payment or financial information is collected through the Website.
Cookies and consent management
On their first visit, users are invited, through a banner available in French and English, to accept or refuse cookies, either all at once or by category. Refusing cookies is as easy as accepting them.
Strictly necessary cookies, namely __cf_bm (set by Cloudflare) and cookieyes-consent (set by CookieYes), are essential to the security of the Website and to storing the user’s choice. They do not require consent.
When users accept advertising cookies, the Meta pixel transmits only information about the page viewed. No information entered in a form (name, email or message) is transmitted to Meta.
Users may change or withdraw their consent at any time using the permanent button in the bottom left corner of every page of the Website. Withdrawing consent to advertising cookies immediately deletes the data stored in the browser’s local storage.
Each user choice is recorded in a consent log hosted by CookieYes on behalf of the Clinic. Every change to a choice generates a new identifier, so that the history of choices is preserved.
Users' rights
You have the right, in particular, to:
- Access your personal information
- Request the correction of your information
- Withdraw your consent at any time
- Request the deletion of your information where permitted by law
- Request the portability of your personal information
Website users may at any time change or withdraw consent previously given using the floating button provided.
To exercise any of these rights, users may send a written request to the person in charge of the protection of personal information, whose contact details appear above. We will respond to any request within 30 days of receiving it. Users who are dissatisfied with our response may contact the Commission d’accès à l’information du Québec.
Use of information
The personal information we collect through our Website is used for the following purposes:
- Improving our services and our Website;
- Complying with our legal and regulatory obligations;
- Operating and securing the Website, including protection against bots;
- Remembering the display language selected by the user;
- Measuring audience and use of the Website, with the user’s consent;
- Measuring the effectiveness of our campaigns and delivering targeted advertising on Meta platforms, with the user’s consent;
- Responding to requests submitted through the contact form;
- Keeping proof of the user’s consent choices.
Retention and security
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected and in accordance with our legal obligations. We apply administrative, technical and physical security measures to protect your information against unauthorized access.
Changes
We may update this policy at any time. The date of the last update will be indicated at the top of this page.