Privacy & Trust Statement

Rx Assist helps pharmacies move inbound prescriptions from fax or upload into structured fields, classify each medicine against the live Kroll patient profile, and run the matching Kroll path under pharmacist supervision. It is not a dispensing system, not a prescribing engine, and not a replacement for professional judgment.

• Receive and classify inbound documents through RxConnect and upload paths
• Extract and present prescription fields for verification
• Compare medicines to live Kroll Active Rxs and propose a path
• Automate repetitive Kroll steps, then await pharmacist verification

The pharmacy (or pharmacy professional in independent practice) is the custodian of personal health information. OneRx provides the Services as a service provider / information manager supporting that custodian.

If you are a patient of a pharmacy that uses Rx Assist, please direct privacy questions about your health information to that pharmacy. We assist custodians in responding to access and correction requests as required.

Depending on how the pharmacy uses the Services, Rx Assist may process:

• Account and authentication details for authorized pharmacy users (via the OneRx portal)
• Inbound prescription images or PDFs (fax or upload) and extracted fields
• Classification outcomes, confidence signals, and workflow status
• Technical logs needed to operate, secure, and support the Services

Patient identity for dispensing remains in Kroll and the pharmacy’s systems of record. Assist reads live profile context to classify and automate; it does not replace the pharmacy’s charting or billing systems.

• To provide OCR, verification, classification, and supervised automation features
• To display source documents beside extracted fields for pharmacist review
• To improve reliability, safety boundaries, and support quality
• To investigate incidents and respond to custodian or regulator requests

We do not sell personal health information. We do not use prescription content for advertising.

A core privacy and safety property of Rx Assist is the hard-stop before clinical completion. The Services may prepare Kroll work and then await pharmacist verification. Fill, Dispense, Transmit, and Adjudicate are never automated by Rx Assist.

We retain information for as long as needed to provide the Services, meet legal and professional obligations, resolve disputes, and enforce agreements. Custodians remain responsible for retention rules that apply to their own records in Kroll and related systems.

• Access limited to authorized pharmacy users and need-to-know OneRx personnel
• Encryption in transit and at rest for Service components under our control
• Monitoring, least-privilege access, and privacy/security training for OneRx staff
• Contractual and technical controls with subprocessors that support the Services

No system can guarantee perfect security. If you believe a security or privacy incident has occurred, contact us promptly using the details at the end of this Statement.

Some supporting services — for example email delivery, error monitoring, or customer-support tooling — may operate outside Canada. Where that is the case, OneRx applies layered safeguards: contractual privacy commitments, tightly scoped access, encryption, and restrictions on secondary use. Pharmacy custodians are informed of cross-border arrangements where their applicable legislation requires it.

Rx Assist operates alongside systems the pharmacy already uses — including Kroll, RxConnect, and the OneRx portal. Those systems are governed by their own terms and privacy policies. OneRx is not responsible for the privacy practices of services we do not operate.

We may update this Privacy & Trust Statement to reflect changes to the Services, our practices, or our legal obligations. The effective date and version shown at the top indicate the most current version.

For questions, concerns, or requests regarding this Statement or our handling of information, please contact our Privacy Officer:

• Email: admin@myonerx.ca
• Support: support@myonerx.ca
• OneRx Inc., Edmonton, Alberta, Canada

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (1-800-282-1376, www.priv.gc.ca) or the privacy regulator in your province.