At Cryos, we place great importance on protecting the personal information of our customers, employees, and representatives. In accordance with the Act respecting the protection of personal information in the private sector, we are committed to maintaining the confidentiality of personal information collected in the course of our business activities. Our privacy policy is designed to inform you about our practices regarding the collection, use, disclosure, retention, and protection of your personal information. By providing us with your personal information, you agree to the terms of this policy and authorize us to process your information in accordance with it.

1. Consent

1.1 Commitment to Privacy

We are committed to protecting the privacy of our users. We collect and use personal information only with their explicit consent and in compliance with applicable laws.

1.2 Acceptance of the Terms of Our Policy

By accessing our website, https://patient.cryos.com, https://patient.cryos.com/fr/, or by providing us with personal information, you accept the terms of our privacy policy. This includes your consent to the collection and use of your personal information in accordance with this policy.

1.3 Right to withdraw consent

You have the right to withdraw your consent at any time. However, this is subject to certain legal or contractual restrictions. We will inform you of the possible consequences of such withdrawal, such as the inability to provide certain products or process certain requests. Your decision to withdraw consent will be recorded in our records.

You may withdraw your consent, in particular:

1.4 Exceptions to the Requirement for Consent

In certain exceptional circumstances, we may collect, use, or disclose personal information without first obtaining your consent. This may occur in situations where legal, medical, or security requirements make obtaining your consent impossible or impractical. These situations include, but are not limited to:

2. Collection of Personal Information

2.1 We collect personal information through various means, such as:

Web forms

Direct communications

Digital technologies

Other

2.2 We may also collect information through third parties, such as:

These providers may be located in Canada, the United States, or Europe.

2.3 We may use advanced technologies to collect personal information, including to identify, locate, or profile our customers (for example, to create consumer profiles). However, we are committed to protecting our customers’ privacy:

We are committed to being transparent about our use of these technologies and to respecting our customers’ privacy choices.

3. Types of Personal Information Collected

3.1 We collect various types of data, including but not limited to:

Identification Data

Professional information (B2B)

Technical data

Sensitive data

No health or biometric data is collected on patient.cryos.com.

3.2 Children’s Privacy

We do not knowingly collect or solicit personal information from children under the age of 14. By using our website, you represent that you are at least 14 years old. If you are under 14, please do not attempt to send us any personal information. If we discover that we have inadvertently collected personal information from a user under the age of 14, we will attempt to immediately delete that information from our files and records. We also encourage minor users of the website who are 14 years of age or older to ask their parents or guardians for permission before sending any information about themselves over the Internet.

If you believe that a child under the age of 14 has provided us with personal information, please contact us using the contact information provided in the following section.

4. Use of Personal Information

4.1 We use your personal information for a range of essential activities:

4.2 We offer various options to allow you to control and limit the collection of your personal information. These options include:

It is important to note that some of these options may limit your access to certain features of our services.

5. Sharing and Disclosure of Personal Information

5.1 The personal information collected by our organization is accessible to specific categories of our staff and certain partner organizations, for the purpose of providing our products and services effectively. For example:

We ensure that this information is used exclusively for the stated purposes and in compliance with confidentiality requirements.

Transfers of personal information outside of Quebec may occur to Canada, the United States, or Europe, with appropriate contractual and technical measures in place to ensure an adequate level of protection.

6. Links to Other Websites

6.1 Our website may contain links to third-party websites

When you follow these links, you leave our website. The information exchanged at that time is no longer subject to our privacy policy. We recommend that you review the privacy statements of the other websites you visit before providing any information.

7. Security of Personal Information

7.1 Security Measures for the Protection of Personal Information

To ensure the security and confidentiality of personal information, Cryos implements rigorous security measures, including:

These measures are designed to protect personal information from unauthorized access, use, or disclosure, and to maximize its integrity and confidentiality.

Although we do everything possible to protect your personal data, it is important to keep in mind that no method of transmission over the Internet or electronic storage is 100% secure. We therefore cannot guarantee its absolute security.

7.2 Commitment of staff and the board of directors

Every employee, director, volunteer, independent contractor, or ad hoc advisor serving on our board committees agrees to respect the personal information we collect. Furthermore, these individuals agree to maintain the confidentiality of information specific to our activities and not to disclose it or use it for personal gain or for the benefit of others. This commitment takes effect upon the employee’s, director’s, volunteer’s, independent contractor’s, or ad hoc advisor’s appointment and continues indefinitely.

8. Retention and Destruction of Personal Information

We will retain your personal data only for as long as necessary for the purposes set out in this privacy policy. We will retain and use it to the extent necessary to comply with our legal obligations, to resolve disputes, and to enforce our legal policies.

Personal information is retained:

The destruction of information may be carried out:

We will also retain usage data for internal analysis purposes. This data is generally retained for a shorter period, unless it is used to enhance security or improve the functionality of our website, or if we are legally required to retain it for a longer period.

9. Your Rights

9.1 Recognition and Respect for Your Rights

As part of our privacy policy, we recognize and respect the fundamental rights of individuals whose personal information we hold. These rights include:

Subject to applicable laws, upon receipt of a written request from an individual and after verifying their identity, we will inform the individual if we hold personal information about them and provide them with that information.

Requests may be submitted via email and will be processed within a maximum of 30 days.

We may deny an individual access to their information in accordance with applicable laws, in which case we will provide a reason for our denial.

10. Policy Updates

This policy may be updated to reflect changes in our practices or legal requirements. Changes will be posted on our website. We encourage you to review this privacy policy regularly to stay informed of any changes.

11. Contact

Any requests or questions regarding this privacy policy may be sent to the person responsible for data protection at the following address:

Effective date of the policy: September 14, 2023
Last updated: May 7, 2026