Privacy notice: WizeDirect and Wize Health · Version 1 · Effective October 7, 2026
This notice covers our website and webshop, the clinic portal, buying groups, and the emails and messages we send.
- Who we are. Xccelerata Inc. (Wize Health / WizeDirect), . Our Privacy Officer is responsible for how we handle personal information. Privacy questions or requests: Privacy Officer, contact@wize.health.
- What we collect.
- Clinic and contact details: clinic name, contact name, role, email, phone, delivery and billing address, licence or registration details needed for approval.
- Orders and account data: webshop orders, buying groups joined, quantities, invoices, payments and refunds, and the messages and documents you send us through the portal.
- Portal chat: what you type into the portal's chat assistant. It is processed by our AI service provider to answer you and is not used to train its models.
- Payment data: handled by Stripe. We keep only a reference, card brand / last 4 digits, or bank name / last 4 digits; we never store full card or account numbers.
- Website use: pages viewed, ad campaign (UTM) and referral codes, device and approximate location, collected with Google Analytics 4 and Microsoft Clarity (session recordings with form fields masked), and, when we advertise on them, the advertising pixels of platforms such as Google Ads and Meta.
- Email and text-message engagement: email opens and clicks through SendGrid; text messages through Twilio.
- Why we use it. To run the webshop, buying groups and orders, approve clinic accounts, answer your questions, take payments, deliver, keep tax and accounting records, prevent fraud, send the messages you asked for or agreed to, and measure and improve our ads and site.
- Consent. By ordering, joining a group or creating an account you agree to the uses needed to provide the service. Text messages are used only for order and delivery updates. Marketing is sent by email only, with your consent, and every marketing email lets you unsubscribe. Analytics, session-recording and advertising cookies are used only after you accept them in the cookie banner (you can change this any time through "Cookie settings" at the bottom of every page).
- Who we share it with. Only service providers working for us: Stripe (payments), SendGrid (email), Twilio (text messages), our AI chat provider (portal chat), Google and Microsoft (analytics), advertising platforms (only with your cookie consent), Frappe Cloud (hosting), our delivery carriers (name, address, phone), and the manufacturer only when needed for warranty or recall. We do not sell personal information.
- Outside Canada. Our site is hosted by Frappe Cloud in . Some providers store or process data in the United States and other countries, where local authorities may be able to access it under their laws. We use contracts to protect it.
- How long we keep it.
- Leads who never order or commit: 18 months after the last activity, then deleted or anonymised.
- Customers: for as long as the account is active, and order, payment and tax records for 6 years after the end of the tax year (tax law).
- Consent and unsubscribe records: for as long as needed to prove consent (at least 3 years after the last message).
- Your rights. You can ask to see or correct your information, withdraw consent, or ask us to delete it (subject to legal retention). Quebec residents can also ask about automated decisions and data portability under Law 25. Contact our Privacy Officer at contact@wize.health; we reply within 30 days. You may complain to the Office of the Privacy Commissioner of Canada (or, in Quebec, the Commission d'accès à l'information).
- Security. Access is limited to staff who need it; data is encrypted in transit; a privacy incident that creates a real risk of significant harm is reported to the Privacy Commissioner and to the people affected.
- Changes. We post updates here with a new version date.