Privacy Policy

1. Who is responsible

Ontario Pharmacy Assistant Academy Inc. is responsible for personal information collected through OPAA's website and services. We use it to operate the Academy, administer applications and deliver the programs described on our website.

2. Information we collect

The information we collect depends on how you interact with OPAA. It may include:

• Application and enrolment details: legal first and last name, email address, phone number, information you enter about a promotion or referral, your signed student agreement, and records of application and enrolment status. An application in progress may be held while secure checkout is pending; OPAA creates the enrolled application after payment is confirmed.
• Payment records: payment status, amount, date, invoice or receipt details, and transaction references. Stripe collects and processes payment-card details through its checkout service; OPAA does not receive or store your full card number.
• Student and learning records: account and sign-in information; course access and progress; lesson and video viewing; activity, assignment, quiz and exam responses and results; class and supervised-training schedules and attendance; submitted checklists or reflections; support or instructor notes; and certificate details.
• Messages and support requests: the name, email, phone number if provided, topic and message you submit through OPAA's support, contact or chat features, along with our replies and related support records.
• Website and security information: basic page-view and usage information from Google Analytics, and technical or anti-abuse information used to help operate and protect the website.

OPAA does not ask students to provide patient health information. If such information is sent to us by mistake, contact us promptly and do not resend or repeat the details in another message.

3. How we use information

OPAA uses personal information to review and administer applications; confirm payment and enrolment; create and manage student accounts; provide learning materials and support; schedule instruction and supervised training; record progress, attendance and assessments; issue and verify certificates; respond to enquiries; manage refunds and accounting; maintain website security; and meet legal, regulatory and recordkeeping obligations.

We do not sell personal information. We do not use student records or assessment results for advertising.

4. Google Ads and lead forms

OPAA advertises through Google Ads. If OPAA makes a Google-hosted lead form available with an ad, the form will identify the fields requested and link to this policy. Depending on the form, you may choose to provide details such as your name, email address, phone number or program interest. Google provides information you submit to OPAA so we can respond to your enquiry or provide information you requested. Submitting an ad lead form does not itself complete an OPAA application, create an enrolment or make a payment.

Google separately handles information collected through its services under Google's own privacy terms. OPAA's website currently uses Google Analytics 4 as described below. The website source reviewed for this policy does not include a Google Ads conversion or remarketing tag.

5. Google Analytics and cookies

OPAA currently uses Google Analytics 4 on the website to measure page views and understand general website use. Google Analytics may use first-party cookies or similar browser storage and may receive information such as pages viewed, browser and device details, approximate location, and interactions with the website. Google processes this information under its own terms and may process or store it outside Canada.

At the effective date above, the website loads Google Analytics without showing a cookie banner or an on-site setting to turn off Analytics. Google Analytics is separate from the cookies used by the student sign-in service to keep an account session working. You can manage or block cookies through your browser settings; doing so may affect sign-in or other website functions. This policy describes the current setup and does not represent that an on-site analytics consent or opt-out tool is available.

6. Payments

OPAA uses Stripe Checkout for tuition and other OPAA payments. When you continue to checkout, Stripe collects payment details directly. OPAA receives information needed to confirm and administer a transaction, such as payment status, amount, transaction references, and invoice or refund records. Stripe's handling of information is also subject to Stripe's privacy policy and terms.

7. Student portal and learning records

The student portal records information needed to provide and administer the course. This can include account activity, lesson and video progress, assignment and activity submissions, quiz and exam answers and results, class attendance, supervised-training attendance and records, and certificate status. Instructors and authorized OPAA administrators may access the records needed for teaching, assessment, student support, administration and certificate verification.

Where a training pharmacy or supervising pharmacist needs information to arrange or conduct a supervised session, OPAA may share the relevant student and scheduling details. The pharmacy is responsible for patient information it holds under its own obligations. OPAA student records are not pharmacy patient records.

8. Service providers and processing outside Canada

OPAA uses outside services to operate its website and programs. Depending on the service you use, these may include Cloudflare (website hosting, delivery and security checks), Supabase (student authentication), Stripe (payments), Resend (email delivery), Mux (course video), Google services (Analytics and online classes or scheduling), and Google Ads (advertising and, if offered, lead forms).

Each provider receives or processes information needed for its service and may handle it under its own privacy practices and terms. Some providers may store or process information outside Canada, where it may be subject to the laws of that location. Not every provider receives every category of information.

9. Safeguards and retention

OPAA uses administrative and technical safeguards designed to protect personal information, including account authentication and access restrictions for administrative functions. No website, storage system or internet transmission can be guaranteed completely secure. If a privacy breach occurs, OPAA will assess and respond to it and provide notices or reports required by applicable law.

We keep information only as long as reasonably needed for the purposes described in this policy, to meet legal, tax and accounting requirements, to resolve questions or disputes, and to maintain certificate verification records. Financial records may need to be kept for at least six years where required. Retention periods differ by record type; OPAA does not promise a single deletion date for every record. When information is no longer required, it will be securely deleted or de-identified as appropriate and feasible.

10. Your privacy rights

Depending on the circumstances and the law that applies, you may ask OPAA whether it holds personal information about you, request access to it, ask how it has been used or disclosed, challenge its accuracy, and request a correction. You may also raise a concern about how your information has been handled. We may need to verify your identity before responding and may be unable to provide information where a legal exception applies.

OPAA handles personal information in accordance with applicable Canadian privacy laws, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA), where it applies. Ontario's Personal Health Information Protection Act (PHIPA) governs personal health information handled by health information custodians such as pharmacies; a pharmacy's patient records are managed by that pharmacy, not as OPAA student records. You may also contact the Office of the Privacy Commissioner of Canada about concerns under PIPEDA: priv.gc.ca.

11. Marketing and unsubscribe choices

OPAA sends messages needed to respond to enquiries, administer applications and payments, provide course access and support, and manage student records. These service messages are not a subscription to promotional emails. The OPAA application form does not include a separate marketing subscription checkbox, and we do not treat applying or enrolling as consent to receive marketing.

If OPAA sends commercial electronic messages, it will do so only where permitted by Canada's Anti-Spam Legislation (CASL), identify the sender, and include a working unsubscribe mechanism. You can also ask to stop promotional messages by emailing support@opaacademy.ca. Unsubscribing from marketing does not stop messages needed to administer an existing application, payment or course.

12. Links to other websites

The OPAA website may link to third-party websites or services. Those services have their own privacy policies and practices. OPAA does not control how they collect or use information, so review their privacy information before sharing personal details with them.

13. Children's privacy

OPAA's pharmacy assistant training and website are not directed to children. OPAA does not knowingly seek personal information from children for a child-directed service. If you believe a child has submitted personal information to OPAA, contact us so we can review the circumstances and take appropriate steps.

14. Changes to this policy

OPAA may update this policy when its services, data practices or legal obligations change. The current version will be posted on this page with its effective date. Please review it periodically.

15. Contact OPAA

For a privacy question, access or correction request, or complaint about how OPAA handles personal information, contact OPAA Support and mark your message “Privacy”. Please share only the information needed to describe your request, and do not include passwords, payment-card details or patient information.