Privacy Policy | Arthros

1. Who we are

Arthros Inc. (“Arthros”, “we”, “us”) is a corporation incorporated under the laws of Ontario, Canada. This Privacy Policy applies to the Arthros marketing website at arthros.ca and to any communication you have with us through this site.

This site is a marketing and information resource only. It does not collect, store, or process personal health information (PHI). No clinical data, patient records, or sensitive health information is submitted through this website.

2. What information we collect

Information you provide

When you submit a form on this site (pilot intake, clinician application, or contact form), we collect:

Your name and email address
Your organisation name, phone number, and message (as applicable)
Professional credentials and province (clinician applications only)

This information is used solely to respond to your enquiry and is stored in our secure CRM.

Analytics

This site uses Plausible Analytics, a privacy-first analytics platform that does not use cookies and does not collect personal information. No data is shared with third-party advertising networks. You can review Plausible's data policy at plausible.io/privacy.

Cookies

This site uses a single functional cookie to remember your cookie consent preference. No tracking cookies, advertising cookies, or cross-site cookies are set.

3. How we use your information

To respond to your enquiry or application
To send you information you have requested about Arthros or FlareForward
To improve our website (via aggregate, anonymised analytics)

We do not sell your personal information. We do not share it with third parties for marketing purposes.

4. Legal basis for processing

We process the personal information you submit through our forms on the basis of your consent (by submitting the form) and our legitimate interest in responding to business and professional enquiries.

5. Data storage and retention

Form submissions are stored in Airtable, a cloud-based database service. Airtable processes data under standard contractual clauses. We retain form submissions for up to 24 months, after which they are deleted unless an ongoing relationship is established.

We do not store personal health information on this site or in Airtable. All clinical platform data (Phase B) will be stored in Canadian-resident infrastructure under separate terms and a full Privacy Impact Assessment.

6. Your rights (PIPEDA and Quebec Law 25)

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information
Withdraw consent at any time (this does not affect lawfulness of prior processing)

To exercise any of these rights, email hello@arthros.ca. We will respond within 30 days.

Residents of Quebec have additional rights under Law 25 (Act to Modernize Privacy Protection). If you believe we have not complied with your privacy rights, you may file a complaint with the Commission d'accès à l'information du Québec.

7. Security

We use industry-standard security measures to protect the information you provide, including TLS encryption in transit and access controls on our data processors.

8. Third-party services

This site uses the following third-party services:

Vercel — hosting (US-based; standard data processing agreement)
Airtable — form submission storage (US-based; standard DPA)
Resend — transactional email delivery
Plausible Analytics — cookieless, privacy-first analytics (EU-hosted)
Cloudflare Turnstile — bot protection on forms (no tracking)

9. Contact

For privacy enquiries, contact our Privacy Officer at hello@arthros.ca or by mail to: Arthros Inc., Ontario, Canada.