Thornhill Drug Mart (“we,” “our,” or “us”) operates the Free Naloxone Kit Program under the Ontario Naloxone Program for Pharmacies (ONPP). We are committed to protecting your privacy and safeguarding your personal health information.

Welcome to endoverdose.ca. Your privacy is critically important to us. This Privacy Policy document outlines the types of personal information that is received and collected by endoverdose.ca and how it is used.
Acknowledgement and Acceptance of Terms
Endoverdose.ca is committed to protecting your privacy. This Privacy Policy sets forth our current privacy practices with regard to the information we collect when you interact with our website. By accessing endoverdose.ca, you acknowledge and fully understand this Privacy Policy and freely consent to the information collection and use practices described in this document.
Information We Collect and How We Use It
endoverdose.ca collects certain information from and about its users in three ways: directly from our Web Server logs, the user, and with Cookies. We collect personal health information (PHI) only as necessary to provide services and ensure regulatory compliance under PHIPA and PIPEDA.
We follow the 'need-to-know' principle, meaning that only essential information is collected and accessed by authorized personnel. The collection is limited to what is needed for service delivery, to respond to user inquiries, and to meet legal obligations.
a. Web Server Logs
When you visit our Website, we may track information to administer the site and analyze its usage. Examples of information we may track include:
Your Internet protocol address.
The kind of browser or computer you use.
Number of links you click within the site.
State or country from which you accessed the site.
Date and time of your visit.
Name of your Internet service provider.
Web page you linked to our site from.
Pages you viewed on the site.
b. Use of Cookies
endoverdose.ca may use cookies to personalize or enhance your user experience. A cookie is a small text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie to you.
c. Personal Information Users
Visitors to our website can register to access services. When you register, we will request some personal information such as name, address, email, telephone number, and other relevant information. We collect this information to facilitate service delivery, ensure proper communication, and meet regulatory requirements. If you are purchasing a service, we will request financial information solely for billing purposes. Credit card information may be forwarded to the relevant provider for transaction processing, but we do not store this information ourselves.
Consent for Information Collection
Endoverdose.ca values informed consent, meaning we will ensure that you understand what information we are collecting and why. Under PHIPA and PIPEDA, we are committed to obtaining your consent before collecting any personal or health information. This consent may be implied or explicit depending on the type of data collected. We ensure that individuals are fully informed about the purpose of the collection, use, and disclosure of their information and understand their rights under these regulations. You will be given an opportunity to provide explicit consent before we collect any personal health information or other sensitive data. Consent may be withdrawn at any time, and you may contact us to modify or revoke your consent.
We store personal information, including personal health information (PHI), on secure servers located in Canada whenever possible. However, in certain cases, we may temporarily use secure third-party service providers whose infrastructure is located in the United States. As a result, some information may be stored or processed outside of Canada and might be subject to the laws of those jurisdictions, including lawful access requests by U.S. government authorities. By using our services, you acknowledge and consent to this potential cross-border transfer and storage of your information. We ensure that any service providers handling personal data on our behalf maintain high standards of privacy, security, and compliance in alignment with our obligations under PHIPA and PIPEDA.
Access and Correction of Personal Information
You have the right to access the personal information that we collect about you, including any personal health information (PHI), and to request corrections if inaccuracies are found. As part of our compliance with PHIPA and PIPEDA, we will take prompt action to accommodate such requests and ensure the accuracy of your information. Requests for access or corrections can be made using the contact information provided at the end of this policy. We will verify your identity before providing access or making corrections to ensure your data is protected. We will take prompt action to accommodate such requests as required by applicable privacy laws, such as PHIPA and PIPEDA. To exercise these rights, please reach out to us using the contact information provided at the end of this policy.
Use of Web Beacons or GIF Files
Endoverdose.ca web pages may contain electronic images known as web beacons – sometimes also called single-pixel gifs – that allow endoverdose.ca to count users who have visited those pages and to deliver co-branded services. endoverdose.ca may include web beacons in promotional e-mail messages or newsletters to determine whether messages have been opened and acted upon.
Security Measures
We are committed to keeping your personal information secure. In compliance with PHIPA and PIPEDA, endoverdose.ca uses industry-standard security protocols, including data encryption, secure servers, and access controls to protect personal health information (PHI) and other personal data. We also conduct regular reviews and risk assessments of our data protection practices to identify and mitigate any security vulnerabilities. All personnel handling personal information are trained on privacy policies, security procedures, and best practices to ensure compliance with PHIPA and PIPEDA. endoverdose.ca uses industry-standard security protocols, including data encryption, secure servers, and controlled access measures. Only authorized personnel have access to your personal information, and we have implemented physical, electronic, and managerial safeguards to protect the data we collect.
Retention and Disposal of Information
Personal information, including personal health information (PHI), is only retained as long as necessary for the purposes for which it was collected, or as required by law under PHIPA and PIPEDA. We implement secure disposal procedures, such as shredding physical documents and permanently deleting electronic records, to ensure information is irretrievably destroyed when it is no longer needed. Once it is no longer needed, we use secure methods to delete or destroy such information to prevent unauthorized access or use.
Changes to this Statement
Endoverdose.ca has the discretion to occasionally update this Privacy Policy. When we do, we will also revise the “updated” date at the top of this Privacy page. We encourage you to periodically review this policy to stay informed about how we are protecting the personal information we collect.
Contacting Us
If you have questions or concerns about our Privacy Policy, or your dealings with this website, please contact us through the following means:
Email: [email protected]
The information on this website is educational and should not replace professional medical guidance. In any emergency situation, always call 911 first.