Privacy Policy — Pharmacy Staff

1. Who We Are

RxBridge is a private pharmacy management platform used by pharmacy staff to manage patient prescriptions, communications, and dispensing records. This policy explains how RxBridge handles the personal information of staff users and the patient information you access through the platform.

2. Information Collected About Staff

• Name and email address (used for your account and login)
• Role (pharmacist, technician, admin) and access rights
• Session identifiers and login timestamps (for security audit purposes)
• Multi-factor authentication credentials (encrypted TOTP secrets)
• Actions taken within the platform (recorded in the audit log)

3. Patient Information You Access

As a pharmacy staff member, you access patient personal health information (PHI) through RxBridge. This includes names, contact details, prescription records, insurance information, and communications. You are responsible for handling this PHI in compliance with PIPEDA, PHIPA, and OCP guidelines. Your access is logged in a tamper-evident audit trail.

4. How We Protect It

• Staff passwords are hashed using bcrypt
• TOTP MFA secrets are encrypted at rest using AES-256-GCM
• All access to patient records is logged in a structured audit trail
• Sessions are signed JWT tokens with server-side revocation
• All data transmitted over HTTPS with HSTS enforced
• Patient contact information and insurance numbers are encrypted at rest
• Tenant isolation ensures you can only access patients linked to your pharmacy

5. Retention

• Prescription and dispensing records: minimum 10 years (OCP requirement)
• Audit logs: retained indefinitely for compliance
• Patient messages: up to 2 years, then purged automatically
• Delivery records: up to 1 year after completion
• AI drug-info conversations: up to 6 months
• Staff account records: retained while your account is active; contact your admin to close your account

6. Who Has Access

Patient records are only accessible to staff members of the pharmacy to which the patient is linked. Admin-level staff can view the audit log and manage staff accounts. RxBridge platform operators may access anonymized technical data for maintenance but do not access patient PHI in the normal course of operations.

7. Your Rights

Staff members may request correction of their account information from their pharmacy administrator. Staff account information is deleted or anonymized when your account is removed by your administrator. Questions about this policy should be directed to your pharmacy administrator.

8. Governing Law

This policy is governed by PIPEDA, PHIPA, and applicable Ontario legislation.