Data Rights & Protection

Data Collection and Processing Practices

At SST Pharma Holdings, we place the utmost importance on the lawful and transparent collection and processing of personal data in accordance with applicable Canadian privacy regulations. As a platform delivering comprehensive pharmaceutical, medical, and supplement information, our methods of data collection include direct user-provided information, automated tracking via cookies and other technologies, and data submitted through electronic correspondence, such as inquiries to our contact email. The information we may obtain includes names, email addresses, device information, and interaction records with our web pages; all data is used exclusively for the provision, maintenance, enhancement, and monitoring of services tailored to patients, healthcare professionals, and the general public. We rigorously assess every processing activity to ensure its necessity for delivering accurate, up-to-date health content and engaging user experiences, while adhering to consent and legitimacy requirements. SST Pharma Holdings does not collect sensitive health data unless explicitly permitted or mandated by law, and we ensure that all processing is proportional to the stated purposes. Personal data is securely stored on protected servers with restricted managerial access, and robust organizational and technical safeguards are in place. Data access within our company is strictly limited to authorized personnel, and all third-party partners are required to maintain equivalent standards of data protection. Personal data is retained only as long as necessary for operational and legal purposes, with systematic procedures for secure disposal. We maintain clear records of processing activities, uphold the principle of data minimization, and regularly audit our systems to safeguard your personal information.

Legal Basis for Data Handling and User Consent

Our data processing activities are grounded in legitimate legal bases as established by prevailing Canadian laws and regulations, reflecting principles outlined in the GDPR and Canadian data protection statutes. Whenever we seek to collect identifiable personal information, we provide clear notifications outlining the context, necessity, and intended uses for that data. Explicit user consent is obtained for the processing of non-essential or sensitive data types, and users are given straightforward mechanisms to withdraw such consent at any time without prejudice to their access to core content. For automated data processing such as analytics and cookies, we employ an opt-in system where feasible, and all such purposes are disclosed through easily accessible website notices. We do not engage in unsolicited direct marketing or disclose personal information to unrelated third parties without your prior permission. In circumstances where data processing is required to fulfill contractual obligations, comply with a legal duty, or protect vital interests, this is clearly communicated to our users. We guarantee that the collection and use of personal data for analytics, service improvements, or communication with users always aligns with user expectations and stated policies. Consent records are maintained for compliance purposes, and procedures are in place to promptly update or rectify consents as required by law. In the event that data is to be used for purposes not previously communicated, we will seek fresh consent before proceeding. Our practices reflect the right of individuals to control their personal data and have full transparency regarding its use.

International Data Transfers and Storage Security

SST Pharma Holdings operates globally, with its administrative office located at 1 Riverside Drive, Perth WA 6000, Australia, while primarily serving Canadian residents. All personal data collected through sst-holding.com is stored and processed in secure data centers designed to comply with Canadian data protection requirements, as well as applicable international data standards. When personal information must be transferred to or accessed from outside Canada, we ensure that such transfers are safeguarded by legally binding agreements that mandate appropriate levels of data protection in accordance with Canadian laws. Transfers are only conducted when absolutely necessary for our operational needs or service maintenance, and users are informed accordingly. Rigorous risk assessments and due diligence are carried out before partnering with any overseas processor or storage provider. Access controls, network encryption, and privacy-by-design protocols are consistently applied to prevent unauthorized or unlawful access, alteration, or disclosure of user data. We cooperate with legal authorities as required under Canadian law while taking steps to ensure confidentiality and integrity of all personal information. Continuous security reviews, employee training programs, and rapid incident response frameworks are embedded into our operational culture to ensure proactive protection of user data. If you require further information or have concerns regarding cross-border data transfers, you may contact our Data Protection Officer at [email protected] for clarification.

User Rights and Access Requests

Every user of SST Pharma Holdings possesses enforceable rights regarding the accessibility, accuracy, and use of their personal data as stipulated by Canadian privacy regulations. Users can request to access, rectify, update, or delete their personal information at any time by contacting our data administrator at [email protected]. Requests are promptly acknowledged and processed in accordance with statutory timelines. You also have the right to withdraw previously granted consent, to request data portability, or to restrict processing in specific circumstances where permitted by law. In cases of automated decision-making or profiling, which may be employed for analytics, users have the right to request human intervention and to contest such decisions. Our policies ensure that no user is penalized or denied access to essential website content on the basis of data rights exercised. Guidance regarding rights and processes for submitting complaints to the Office of the Privacy Commissioner of Canada, should users be dissatisfied with our resolution, is available upon request. Clear explanations are provided for any limitations or exceptions to access or deletion, for example, when retention is mandated by law or necessary for legal claims. All user rights requests are meticulously recorded, reviewed, and fulfilled in strict accordance with Canadian law. Users may also request to receive comprehensive summaries regarding the scope, logic, and likely consequences of data processing operations affecting them. We uphold a commitment to empowering our users with knowledge and control over their personal data throughout their engagement with our platform.

Transparency, Accountability, and Data Breach Notification

SST Pharma Holdings maintains the highest standards of accountability and transparency in all aspects of our personal data management. We make our data practices, categories collected, intended uses, and all related privacy measures easily accessible to users through this dedicated policy page and on request. Our internal record-keeping systems ensure that every aspect of data processing is documented and can be traced for compliance or review purposes. Regular privacy audits and impact assessments are carried out by our data management team, and findings are acted upon to continuously improve our controls. In the unlikely event of a data breach involving personal information, affected users will be promptly notified in accordance with Canadian breach notification requirements. Such notifications will outline the nature and extent of the breach, possible consequences, and recommended steps for mitigation. Reports will also be made to the Office of the Privacy Commissioner of Canada, as appropriate. Internal procedures for investigating, mitigating, and preventing security incidents are robust, and all staff are obligated to adhere to strict confidentiality obligations. For any questions regarding our accountability measures, users are encouraged to contact Adeline Morley, the website owner, at [email protected] or at 1 Riverside Drive, Perth WA 6000, Australia. We are committed to full cooperation with privacy authorities and to providing users with assurances that their data is managed responsibly and securely.