Privacy Notice

This document is divided into the following parts:

1. A. Introduction
2. B. Personal Data
3. C. Your Rights 
4. D. General Provisions

‍

A. Introduction

‍Who are we?

We are Eucalyptus Canada Ltd (Eucalyptus). We are the data controller of your personal data when you use the Services. 

Why are you reading this?

This privacy notice describes how we, as a controller, protect personal data and respect privacy in accordance with data protection laws.

Eucalyptus connects customers with registered Practitioners (as defined in our Terms & Conditions). Please note that Practitioners shall be separate and independent controllers of your personal data from us, and shall process personal data in accordance with their own privacy processes and practices.

Does it apply to you?

If you are accessing the Services for any reason, this privacy notice applies to you. For the purposes of this Privacy Notice, customers also include potential customers who have started (but not finished) the online questionnaire on our ‘Juniper’ branded website (www.myjuniper.ca). This privacy notice also applies to you if you or your employer has a business relationship with us.

Please take a moment to read it.

B. Personal Data

How do we collect your personal data?

From the first moment you interact with us, we are collecting your personal data. Sometimes you voluntarily provide us with personal data, sometimes personal data about you is collected automatically, and sometimes we collect it from third parties, including our Practitioners. How we collect your personal data will usually depend upon our relationship with you (and we have provided some examples below).

What personal data do we collect?

We may collect some or all of the personal data listed below depending upon our relationship with you:

Why do we collect your personal data? 

Data protection law requires that we only use your personal data for purposes that we tell you about and where we have a legal basis to do so. Here are the purposes and legal bases for which we process the personal data talked about above:

1. To provide the Services to you:

‍To offer and provide you with our Services (as defined in our Terms & Conditions), including our weight management-related services; to register you with an account; to connect you to Practitioners, Supporting Healthcare Professionals & Associate Practitioners; to run our online health community and provide you with advice and content. We may use internal tools using artificial intelligence and large language models (LLMs) for purposes including generating content and materials for patients. 

2. To fulfil your orders:

‍For us to process your orders, and support our Associate Pharmacy to dispense your prescription and supply and deliver your medication (via third party courier or postal service providers) to you.

3. To communicate with you:

‍To communicate with you about our services or goods (including to tell you when you have a new message from your Practitioner or Supporting Healthcare Professional and send you reminders of this), to provide you dispatch and track information, to manage returns and exchange authorisations, to provide customer support and/or to answer any queries you have asked us. We use internal tools and third party software using artificial intelligence and LLMs to analyse some communications you send to us for the purpose of sending automated responses.

‍

4. To send you marketing that you have asked us to or we think you will like:
To send you marketing or promotional information; to send you reminders about services or products that you have expressed an interest in. Where you have consented, we may also use your health data (not including your clinical images or conversations with Practitioners) to send you marketing information that is tailored to you or we think could be of interest to you.

‍

5. Seeing our adverts for Juniper online:

We use online advertising to keep you aware of what we are offering and to help you see and find our products and services. How we use your personal data to do this is further described in the ‘Online Advertising’ section below.

6. To improve our offering:

To improve our Juniper brand or any of our group companies’ products and services, including analytics, research and development or to otherwise manage our business, including our website.


7. To enable us to comply with the law: 


‍To comply with any legal or regulatory obligations or requirements that apply to us, including carrying out any identity (anti-fraud) checks that we are required to undertake or to comply with any record-keeping requirements that apply to us. 


8. To manage our business relationships:

‍To manage the contract or business relationship we either have with you or your employer.

9. To enforce our rights where needed:


To seek professional advice, to enforce or protect our rights, to establish and defend legal claims; to conduct investigations or take action in relation to crime and fraud prevention, risk management, and violation of our terms and conditions for services.


Consent

We obtain your consent in order to collect and share (including with Practitioners and Supporting Healthcare Professionals) any of your health data provided as part of the online questionnaire. You provide this consent when you start the quiz and provide us with answers to the questions. However, it is important that you understand that when you purchase any medications from us through our Associate Pharmacy, we rely on the different legal basis of ‘provision of healthcare’, as described above, in order to fulfil that prescription.

You have the right to withdraw your consent at any time. You may withdraw your consent by contacting our Privacy Team (see ‘Contact Us’ below). 

Direct marketing

Under Canadian legislation, we usually need your consent to send you any direct electronic marketing messages (e.g. by text, email etc.). 

You can opt out of receiving some or all marketing messages at any time if you do not wish to receive these from us. You can do so by following the unsubscribe link included in the marketing message or by contacting our Patient Experience  Team (see ‘Contact Us’ below).

Online advertising

You may see Juniper banners and ads when you are on other websites and apps, such as social media. We manage this through a variety of digital marketing networks and ad exchanges, and use a range of advertising technologies.

We use tools of social media platforms to advertise our products and services (e.g. Facebook Custom Audience). We use these tools to match information that we hold with personal data in their database to create custom audiences and tailor advertising to your interests on the internet, including social media, as permitted by applicable law. Some of this is done through ‘re-targeting’, which displays advertisements relevant to our products and services you have previously viewed on our website. For example, we may provide email addresses that we obtained from you (e.g. when providing this to us as part of the quiz) to a social media platform, which are then usually hashed (encrypted) and matched against their own data, for them to present sponsored posts in your feed. We do this to offer tailored advertisements that may be of interest to you if you have shown an interest in our products.

We also use information about our customers to generate a "lookalike audience" or similar audience of prospective customers through the Facebook or Google advertising platforms. This allows us to target advertisements on their networks to potential customers who appear to have shared interests or similar demographics to our existing customers, based on the platforms' own data. Again, this is usually achieved through the provision of email addresses, which are hashed and then later deleted once the lookalike audience is created. We do not have access to the identity of anybody in the lookalike audience, unless they choose to click on our ads. Based on this, we believe that generating lookalike audiences poses little or no threat to the privacy of our customers.

We do not share or use your clinical images or discussions with Practitioners for the purpose of advertising or marketing.

If you opt-out of receiving all marketing messages from us then we will not share your personal data for these purposes.

We also use cookies to create more relevant marketing for you and to present relevant content to you on third party websites. This is based on your cookie consent when you visit our Juniper branded website (if you have given this to us). See our Cookie Notice for further details. 

June AI Assistant and 3rd Party AI

June is an AI assistant intended to help you through your journey.  June combines your information with knowledge provided by our expert team to help you work towards your goals.  If you decide to use June, please note that it uses third-party AI technology provided by our AI partners. 

Responses from June are based on your messages to it and other relevant information collected from your other interactions with us through our Juniper brand. For example, if you ask June a weight loss question, June may provide tips based on your message to June, as well as data collected from your in-app weight tracker.

We require our AI partners (3rd-party data processors) to use your information only for the purpose of allowing June to work with you, and to improve June and our other products and services over time.  Our AI partners will not use your information to improve their models outside of those commissioned for us and our corporate group.  We require our AI partners to only retain your information to the extent it is needed to provide the June service, or as required by law.

Please do not provide June with any identifying information, such as your full name, date of birth, or address, in conversations with June.  

We may retain the history of your conversations with June.  This helps us ensure you continue to have access to previous conversations, and helps us provide our services and support, (which may include collecting information about your experience with June to assess the performance of and improve June and our other services), as well as other reasons required by law and the reasons disclosed elsewhere in this Privacy Notice.

If you agree to use June, we will only access the information you give June when required. Your use of June is also governed by June’s Terms of Use, and our general Terms and Conditions.

Who do we share your data with?

Sometimes it is necessary for us to share your personal data with third parties. Your personal data is shared only when we consider it to be necessary and according to the safeguards, and for the purposes, detailed in this privacy notice. We will never disclose your health data unless we have a lawful basis to do so.

1. Practitioners and Supporting Healthcare Professionals

We need to share your personal data with the Practitioners and Supporting Healthcare Professionals so they can carry out consultations with you. This includes the sharing of your health data as part of the online health questionnaire where you have consented.

2. Your GP

If we have a legal or regulatory obligation or if you consent to us doing so, we may share your personal data with your GP for the purposes of providing them with information about your medicine subscription.

3. Third party service providers

We share your personal data with various third-parties that we rely upon to perform a variety of services on our behalf and to help grow and improve our business, such as IT service providers (including cloud IT service providers and software partners), payment system operators (such as Shopify or Stripe), delivery and fulfilment providers (in order to deliver your subscription), companies who provide marketing software that we use (eg, email and social media platforms), third parties who carry out identity checks on our behalf, our professional advisors (such as lawyers) and any other organisations that provide us with technical and support services.

4. Our group companies

We will share personal data in certain circumstances with other companies across the group of companies that we and the Juniper brand is part of.

5. Regulators or other authorities

We will share your personal data where we are legally required to do so or where we think this is required and we are permitted to do so, for example to respond to a request for cooperation from a relevant authority.

6. Other third parties to protect us

We may share your personal data as required in order to help prevent fraud or to protect or enforce our rights or the rights of any of our group companies.

7. Other parties as part of a corporate transaction

If it is proposed that we are to merge with or be acquired by another business in the future, we may share your personal information with potential purchasers, where this is necessary, or the new owners of the business or company.

8. Overseas transfers of personal data

From time to time, we may transfer your personal data to parties outside of Canada, e.g. to our group companies in Australia or to third party service providers with servers located in the United States, Australia, Switzerland, as well as other countries in Europe or Asia. These parties manage your data in accordance with our instructions and for the purposes set out in this Privacy Notice.

Where we do so, we ensure a similar degree of protection is afforded to your personal data as in Canada through contractual clauses.

How do we protect your personal data?

We care about protecting your personal data. That's why we take steps to make sure that we have in place appropriate security measures to protect your personal data from being damaged, changed, lost, used in the wrong way, or accessed by people who do not have permission.

In particular, we maintain appropriate physical, organisational and technical measures so as to prevent any loss, misuse, unauthorised access, disclosure, or modification of personal data. This includes access controls, encryption, security audits of our systems and protection of data integrity.

Where we use third party service providers to help provide the Services, we have contracts in place with those third-party service providers which require them to implement security measures to protect the data they hold and have in place appropriate security measures.

However, please remember that you provide personal data at your own risk: unfortunately, no data transmission over the internet is guaranteed to be 100% secure.

How long do we keep your personal data?

We will retain your personal data for so long as we have a valid purpose, and for so long as required to comply with applicable law, establish legal defences and resolve disputes. When determining this retention period we take into account any record retention requirements under law and any limitation periods relevant to legal action.

Cookies

Cookies are used on the website. If you disable or refuse cookies, please note that some parts of the website may become inaccessible or not function properly. We explain our use of cookies further in our Cookie Policy.

C. Your Rights

You have various rights in relation to the personal data which we hold about you. Some of these rights may not always apply, as there are sometimes requirements and exemptions which may mean we need to keep processing the personal data or not disclose it, or other times when the rights may not apply at all. We will always tell you if we think we do not have to comply.

You can exercise your rights by sending us an email at privacy@eucalyptus.vc

We will seek to deal with your request without undue delay, and in any event within any time limits provided for in applicable privacy legislation in your Province (subject to any extensions that may be available to us, which we will always tell you about).

You have the right to access information we hold about you: You have the right to obtain a copy of your personal data from us and obtain other supplementary information from us.

You have the right to make us correct any inaccurate personal data about you: You have the right to request that we correct any inaccurate or incomplete personal data that we hold about you.

You have the right to restrict our processing: You have the right to restrict our processing of your personal data in certain circumstances. This means that you may be able to limit the way that we use your personal data.

You have the right to withdraw consent: Where we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.

D. General Provisions 

Contact us

Your experience with Eucalyptus is important to us. 

If you have any questions, concerns or complaints about this Privacy Notice, or how we handle your personal data, please contact our Privacy Team at privacy@eucalyptus.vc. We always try to respond within a reasonable period.

For customer service related queries, including cancelling your treatment or unsubscribing, please contact our Patient Experience team at hello@myjuniper.ca.

Changes

We reserve the right to change the terms of this privacy notice from time to time, and will notify you of any material changes. We also encourage you to check the website periodically to make sure you are aware of our current privacy notice. 

Last updated: November 2025