Privacy Policy

Last updated: September 24, 2026

Drug Test Kits ("we", "us" or "our") operates DrugTestKits.ca from Barrie, Ontario. This Privacy Policy explains how we collect, use, disclose and protect personal information when you browse our Shopify store, buy products or services, contact us, or receive our marketing communications. It also explains your choices and how to raise a privacy concern.

Our commercial activities are subject to applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA). Additional rules may apply to particular testing services or providers, including Ontario's Personal Health Information Protection Act, 2004 (PHIPA) where applicable. This policy does not reduce any rights you have under applicable law.

1. Information we collect

The information collected depends on how you interact with us:

• Orders and accounts: your name, contact details, billing and delivery addresses, account information, products or services ordered, payment status and transaction history.
• Business purchases: organization details, business contact information, and information supplied for a corporate account or service request.
• Customer support: enquiries, correspondence, order references and information you choose to provide when requesting assistance.
• Website activity: your IP address, browser and device information, cookie or similar identifiers, referring pages, searches, pages and products viewed, and interactions with our website or marketing.
• Privacy and marketing preferences: consent choices, subscription preferences, unsubscribe requests and records needed to honour those choices.
• Testing-service information: when you purchase services that require it, identifying information, specimen or test identifiers, test results and related information needed to arrange, deliver or support the service.

We obtain information from you, from your use of the website, and from providers involved in transactions or services you request, such as payment, delivery and testing providers. If you give us another person's information, you must have appropriate authority to do so.

2. How we use information

We use personal information to process payments and orders; deliver products and purchased services; manage accounts; answer enquiries; provide support; investigate fraud and security issues; maintain records; and meet legal obligations. We also use information to understand website performance, improve the shopping experience, measure campaigns and provide marketing or advertising where permitted by law and your consent choices.

We limit collection, use and disclosure to information reasonably needed for an identified purpose. If we propose a materially different purpose, we will explain it and obtain any consent required before proceeding.

3. Test results and other sensitive information

We recognize that test results, health-related details and even information about particular purchases or browsing activity can be sensitive. Information associated with a purchased testing service is handled for the purposes explained for that service, such as arranging testing, communicating authorized results and responding to service enquiries.

Depending on the service, laboratories, specimen-collection providers, medical review professionals or other testing providers may collect information directly or receive information needed to perform their role. Before information is collected for a testing service, we will explain the relevant providers, intended recipients and reporting arrangements, and obtain the consent or authorization required for that service. Request clarification before providing information if these arrangements are unclear.

A purchase by an employer or another person does not, by itself, authorize unrestricted disclosure of an individual's results. Disclosure requires the appropriate consent or other lawful authority. Purchasing a kit or service also does not, by itself, authorize the use of test results or other sensitive information for advertising. Any proposed advertising use of sensitive information requires separate, meaningful express consent where required by law.

Please do not send test results, health card numbers, medical records or another person's sensitive information through our general contact form or ordinary email unless we have confirmed that the information is necessary and provided an appropriate way to submit it.

4. Consent and your choices

We seek meaningful consent appropriate to the information and purpose, unless the law permits or requires handling it without consent. For example, providing delivery details for an order allows us to use those details to fulfil that order; it does not provide blanket consent to unrelated uses. Sensitive information generally requires express consent.

You may withdraw consent to optional uses by contacting us. Legal or contractual restrictions may affect a withdrawal, and some information may still be needed to complete an order, provide a requested service or meet a legal obligation. We will explain relevant consequences. Optional marketing consent is not a condition of buying products.

5. Cookies, analytics and advertising

We use cookies and similar technologies for functions such as keeping items in your cart, remembering preferences, securing the website, measuring performance and supporting advertising. Shopify and advertising or analytics providers may collect device identifiers and information about browsing, purchases and campaign interactions to measure advertising and support remarketing or personalized advertising, subject to applicable consent requirements.

Simply visiting this website or reading this policy is not consent to every optional tracking or advertising use. Where a use involves sensitive information, an ordinary opt-out mechanism is not a substitute for the express consent required by law.

You can manage cookies through your browser settings and use any consent-preference controls displayed on the website. Blocking cookies may affect checkout or other features and does not necessarily prevent every form of server-side data sharing. Contact us to ask about the providers used, withdraw consent to an optional use, or obtain help with privacy choices. Withdrawing consent affects future use and does not undo processing that was already lawfully completed.

Facebook and Instagram advertising (Meta)

We use Shopify’s Facebook and Instagram by Meta integration to measure advertising performance and help show relevant advertising. Our current Conservative data-sharing setting uses the Meta Pixel, a third-party cookie that collects and shares activity on our store with Meta.

Depending on the events collected and applicable privacy choices, this can include pages and products viewed, searches, cart and checkout activity, purchases and order value, together with cookie identifiers, IP address and browser or device information. This information can identify or be associated with you; it is not necessarily anonymous.

If we enable enhanced data sharing, tools such as the Conversions API can also transmit events from Shopify’s servers to Meta and share customer identifiers such as name, email, phone number and location for account matching. This is different from our current Conservative setting. Any change remains subject to applicable consent requirements and the protections in this policy.

Meta may associate information received from our store with your Meta account and use it with other information it holds to personalize advertising and, where applicable, other content. Meta’s own processing is explained in the Meta Privacy Policy. See also Meta’s explanation of activity from other businesses and personalization controls.

You can review the advertising and activity-from-other-businesses controls available in your Facebook or Instagram Accounts Center. These controls govern Meta’s use of information and are separate from the consent choices you make with us. To withdraw consent to our optional advertising uses or ask about information shared with Meta, contact us with a privacy request. Browser cookie controls and ad blockers can limit browser-based tracking, but do not necessarily stop server-side sharing if that technology is later enabled.

Because this store sells testing products and services, browsing and purchase details can reveal sensitive information. The safeguards and consent requirements in section 3 also apply to advertising events, URLs and product information. This disclosure is not consent to sensitive-data advertising and does not override restrictions imposed by law or an advertising provider’s terms.

6. Shopify and service providers

Our store is hosted by Shopify. Shopify processes personal information to operate the storefront and checkout and provide services such as payment functionality, security and analytics. Through Shopify Network Intelligence and related enhanced services, Shopify may also process information about your interactions with our store together with information from your interactions with other merchants and Shopify to provide and improve services, including advertising-related services, subject to applicable privacy choices.

Information is shared with Shopify and other providers, which may be located in other countries. Read Shopify's Consumer Privacy Policy and visit Shopify's privacy portal for information about Shopify's own processing and available privacy controls. You can also contact us about information handled on our behalf.

Other recipients may include payment processors, shipping providers, business software and support providers, advertising and analytics providers, professional advisers, and providers involved in purchased testing services. We share information appropriate to their role and use contractual or other measures to protect information processed on our behalf. Payment information submitted at checkout is handled by the relevant payment providers; do not send card details through our contact form.

We may also disclose information with your authorization, when legally required or permitted, or in a business transaction where applicable legal conditions and protections are met. Marketing and advertising data sharing is described above; it should not be understood as an unrestricted right to disclose your information.

7. Processing outside Ontario or Canada

Shopify and other providers may store or process information in other provinces or countries, including the United States. Information processed outside Canada may be accessible to courts, law enforcement or other authorities under that jurisdiction's laws. We remain accountable for information transferred for processing on our behalf and use measures intended to provide comparable protection. Contact us with questions about our cross-border processing arrangements.

8. Marketing messages

We send commercial electronic messages in accordance with Canada's anti-spam legislation (CASL), including applicable consent, sender-identification and unsubscribe requirements. You can unsubscribe using the method provided in a message or by contacting us. We process unsubscribe requests without delay and no later than 10 business days after receiving them.

Unsubscribing from marketing does not prevent necessary non-promotional communications about an order, purchased service, safety issue or privacy request.

9. Retention and security

We retain information only as long as reasonably necessary for the identified purposes and applicable legal requirements. Retention depends on the type of record: order and payment records may be needed for accounting, tax or disputes; service and test records may have different legal or professional requirements; and limited consent or suppression records may be needed to honour your choices. Information subject to an access request or legal hold may need to be preserved.

When information is no longer required, we securely delete, destroy or anonymize it in accordance with applicable retention requirements. Contact us for information about retention applicable to a particular record or service.

We use administrative, technical and physical safeguards appropriate to the sensitivity of information, including limiting access to people who need it for their work. No system or transmission method is completely secure. If a privacy breach occurs, we will assess it and take the notification, reporting and recordkeeping steps required by law, including notifying affected individuals and the appropriate regulator when required.

10. Access, correction and privacy requests

You may ask whether we hold personal information about you, request access to it and information about its use or disclosure, and ask us to correct inaccurate or incomplete information. You may also request withdrawal of consent or deletion of information. Deletion is subject to applicable legal requirements and legitimate retention needs; it is not an unconditional right to erase every record.

We may reasonably verify your identity or authority before acting. Under PIPEDA, access requests are generally answered within 30 calendar days, subject to permitted extensions and exceptions. If an extension applies, we will notify you within the initial period. If access is refused, we will explain the reason and available recourse unless the law prevents us from doing so. Access is provided at little or no cost; any permitted fee will be explained in advance.

11. Children and third-party services

Our online store is not directed to children. Where a purchased service involves a minor, appropriate consent or other lawful authority must be established in light of the service, the individual's capacity and applicable law. Contact us if you believe a child's information has been provided improperly.

External websites and independently operated services, including laboratory websites linked from our store, have their own privacy practices. Review their notices before providing information. Their independent practices do not remove our responsibilities for information under our control.

12. Contact us or raise a concern

For privacy questions, access or correction requests, consent withdrawals or complaints, contact Drug Test Kits and mark your request "Privacy request : attention: Privacy Officer".

• Online: Contact Us. Include enough information to identify the issue, but do not include unnecessary sensitive records.
• Telephone: 1-866-218-4913.
• Mail: Privacy Officer, Drug Test Kits, D-122 Commerce Park Dr., Barrie, Ontario L4N 8W8, Canada.

We will review privacy complaints and respond appropriately. If your concern is not resolved, you may contact the Office of the Privacy Commissioner of Canada. Where Ontario's health privacy law applies to the information or provider concerned, you may contact the Information and Privacy Commissioner of Ontario.

13. Changes to this policy

We may update this policy to reflect changes in our services, practices or legal obligations. The date above identifies the latest revision. For material changes, we will provide appropriate notice and obtain fresh consent where required. Posting a revised policy does not, by itself, authorize a new use that requires your consent.