Last revision: August 2, 2021

*Please read ... (the "Terms"). ...

This privacy and personal information protection policy (the "Policy") governs the collection, use and confidentiality of your personal information in connection with your use of the Site including the Service.

This policy may be modified at MédiTest's discretion. All changes made to the policy will take effect on the date of their online publication. Reasonable notice will be sent to any User who already has an account with MédiTest to inform them of any changes to the Policy; however, it is your responsibility to review the Terms from time to time.

Please note that the use of the masculine gender in the Terms is only intended to lighten the text.

By using the Site or (or the Service), you agree that you have read and understood these provisions and that you agree to be bound by the Policy. For any questions relating to the Policy, please contact us by email: info@tontest.ca.

Personal information is a piece of factual or subjective information about an individual that allows them to be identified, located or contacted if the information is used alone or in combination with other information. Personal information may include, but is not limited to: - First and last name; - Home or other physical address; - Email address and/or phone number or other online identifier requiring a username/password; - Provincial health insurance number; - Financial or payment card details; - Date of birth; - Health information (including, but not limited to, medical history, clinic notes, assessments, mental or physical state, treatments); - Photo of you or a part of your body.

MédiTest accesses the personal information you provide via the Site and will make all or part of this personal information available to its doctors, nurses, staff, licensee or authorized third parties, only to the extent that their access is necessary.

The information described below may be shared with MédiTest's hosting provider or another IT service provider. In addition, your personal information may be shared for emergency purposes with a public authority or as part of a law enforcement request or for your health and safety or the health and safety of another person. MédiTest limits access to and use of personal information to that necessary for the purposes described below: - creating and maintaining an account and benefiting from the Service; - confirming your identity, including for billing purposes; - contacting you and personalizing the Service; - conducting market studies to better meet User needs; - monitoring activity on our Site for the purpose of detecting and preventing fraud; - improving the Site and the Service, as well as MédiTest's customer service; - complying with legal and regulatory requirements; - using, copying, keeping, adapting or creating derivative works, transmitting or displaying a photo provided by the User in connection with the Service, without you being identified; - improving machine learning and artificial intelligence software. You can refuse that your photos are used for such purposes by contacting info@tontest.ca; and - sending you electronic newsletters or marketing emails according to your indication when creating your account. You can refuse to receive this correspondence at any time by using the hyperlink included in these communications.

As part of the payment for the Service through the Stripe online payment platform used by MédiTest, your first and last name, physical address, email address and credit card numbers will be collected in accordance with the provisions of Stripe's own privacy and personal information protection policy. Please consult the applicable provisions and ensure that you agree to them.

It is strongly advised not to share your payment information, including credit card numbers, through social media, email or SMS. To protect this data, please transmit this information only through the Stripe online payment platform.

Personal information such as your device's IP address, usual Internet file data, browser name and language, address and frequency of sites visited using different types of cookies and conversion tags or other similar metadata ("Technical Data") may be used and transferred to MédiTest's licensees, subcontractors and hosting partners (these partners are located in Canada and must comply with legislation on confidentiality and data protection relating to personal information collected and used in Canada). MédiTest has also taken reasonable measures to ensure that such Technical Data shared with these individuals are subject to appropriate confidentiality agreements with MédiTest to prevent storage, the

MédiTest applies physical, organizational and technological security measures to protect User's personal information against unauthorized access, disclosure, copying, use or modification, as well as against loss or theft. MédiTest's computer systems, including the systems of the licensor, subcontractors and hosting providers from whom MédiTest purchases hardware, software, uses networks, storage space

and related technologies to ensure the operation and maintenance of the Site and the Service, are password protected and configured to ensure that only those persons who need to access confidential information or Technical Data for the purposes of their functions within MédiTest are authorized to access MédiTest's systems and its secure databases.

Data is stored in a browser and is encrypted via the SSH protocol. The Site's databases are encrypted via the SSL (https) protocol. MédiTest guarantees that access to these databases is limited to its employees, doctors, professionals and the employees of the storage and hosting provider whose access is necessary to operate the Site.

In the event of a breach of MédiTest's security measures resulting in unauthorized access to your personal information, MédiTest undertakes to report such a breach to the Commission d'accès à l'information and to notify you as soon as possible when this report includes a description of the affected personal information if the breach presents any risk to you. In circumstances where a security breach presents a risk to the User, MédiTest will inform you of the measures it intends to take to rectify the problem.

MédiTest does not profile your computer and does not extract any information from your hard drive. Most browsers are configured by default to accept cookies, but you can change the settings to refuse them or limit their effect.

In addition, the Site includes certain social media functions. These functions may notably collect your IP address and leave a cookie to allow a function to be performed. Social media functions and widgets are hosted by a third party. Your interactions with these functions are governed by the privacy and personal information protection policy of the company or entity that provides them.

Cookies can be used to protect access to your account. These cookies maintain session integrity and provide increased security, preventing unauthorized access to your account.

MédiTest will not process personal information for other purposes or in a manner that does not comply with data protection and confidentiality legislation as applied in Quebec. MédiTest will update, change, modify, transfer or delete personal information stored by MédiTest upon written request to info@tontest.ca.

MédiTest will not sell, rent, disclose or share your personal information with third parties, and MédiTest will not use or disclose your personal information for purposes other than those for which it was collected, without your consent and as described in this Policy.

MédiTest must comply with all requests to stop processing your personal information, including your request to stop receiving electronic marketing communications, within a reasonable time following receipt of your written request. Such requests must be made by email to info@tontest.ca.

MédiTest declares having obtained a commitment from each person having access to your personal information to maintain the strict confidentiality of this personal information and to use it only in accordance with MédiTest's instructions.

If you submit a request to MédiTest relating to the deletion of your personal information, MédiTest undertakes to proceed within a reasonable time, subject to any obligation to retain certain personal information to comply with applicable laws (including, but not limited to, medical ethics rules). In such a situation, your personal information will be kept securely in accordance with applicable legislation. If your personal information is inaccurate or has not been updated, it is your responsibility to rectify or update it directly in your account. You can also contact us at info@tontest.ca to inform us of the personal information to be modified or updated. You also have the right to access the information MédiTest holds about you in an easy-to-read format. You can access your information either by logging into your account and consulting your file, or by contacting us to obtain a copy of your information in another format.

If you have questions or concerns regarding this Policy, or if you wish to exercise any of your additional rights mentioned above, we invite you to contact the data privacy officer at info@tontest.ca or at 201-6535, rue des Alpes, Trois Rivières (Quebec) G9C 0L8.

In case of divergence between the English and French versions of this Policy, the French version shall prevail.