Canadian privacy law compliance and consent standards.
Last Updated: April 9, 2026
Volumetryx Inc. operates volumetryx.ai and complies with Quebec's privacy legislation and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) for commercial activities crossing provincial or international borders.
PIPEDA is built on ten fair information principles that govern how organizations collect, use, and disclose personal information in the course of commercial activity:
Volumetryx has designated a Privacy Officer responsible for overseeing compliance with PIPEDA and related provincial legislation. The Privacy Officer handles all inquiries, access requests, and complaints related to our privacy practices.
We obtain meaningful consent before collecting, using, or disclosing personal information. The form of consent (express or implied) depends on the sensitivity of the information and reasonable expectations of the individual. Consent may be withdrawn at any time, subject to legal or contractual restrictions.
Our core operations involve processing de-identified medical imaging data. Where identifiable information is received from clients, it is promptly de-identified using robust technical and procedural measures. Once de-identified, the data no longer falls under PIPEDA's personal information requirements.
We implement technical, organizational, and physical safeguards proportionate to the sensitivity of the information. These include encryption of data in transit and at rest, role-based access controls, regular security assessments, staff training, and confidentiality agreements with all personnel and service providers.
When personal information is transferred to third-party service providers, we use contractual agreements to ensure a comparable level of protection. We remain accountable for personal information transferred to third parties for processing on our behalf.
Individuals may request access to their personal information held by Volumetryx. Upon receipt of a written request and verification of identity, we will respond within 30 days, providing details of personal information held, how it has been used, and any third parties to whom it has been disclosed.
As a company headquartered in Quebec, Volumetryx complies with Quebec's Act respecting the protection of personal information in the private sector, as modernized by Law 25. This legislation imposes obligations including privacy impact assessments, breach notification, privacy-by-default settings, and enhanced consent requirements that align with and in some cases exceed PIPEDA standards.
In the event of a privacy breach involving personal information, Volumetryx will notify affected individuals and the relevant commissioner as required by PIPEDA and Quebec's Law 25.
We conduct Privacy Impact Assessments for new projects involving personal information, as required by Quebec's Law 25.
For questions, concerns, or requests related to PIPEDA compliance or our privacy practices, please contact our Privacy Officer:
Privacy Officer, Volumetryx Inc.
Volumetryx Inc., Montreal, QC, Canada
contact@volumetryx.ai