Privacy Policy

Last updated: January 16, 2026

Coverly Health (“Coverly,” “we,” “us,” “our”) provides a platform that helps match Registered Massage Therapists (including Locum RMTs) with locum coverage and permanent RMT positions at clinics (the “Services”). We are headquartered in British Columbia, Canada.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit our website, create an account, use in-app messaging, post or apply to opportunities, or make/receive payments through the Services.

1) Privacy laws that may apply

Our privacy practices are designed to meet British Columbia’s Personal Information Protection Act (PIPA), including the expectation that collection, use, and disclosure are for purposes a reasonable person would consider appropriate in the circumstances. (BC Information and Privacy Commissioner)

Depending on how the Services are used—especially where personal information is processed across provincial or international borders—PIPEDA (Canada’s federal private-sector privacy law) may also apply, including principles relating to transfers to service providers for processing. (Privacy Commissioner of Canada)

2) What we mean by “personal information”

“Personal information” is information about an identifiable individual. It can include contact information, account identifiers, professional details, communications, and payment-related details.

3) What we collect

A. Information you provide

If you are an RMT Applicant (including a Locum RMT), we may collect:

  • Account & contact: name, email, phone number, city/province
  • Professional profile: registration/licence details (if provided), modalities, experience, availability, preferences, travel radius, desired opportunities
  • Application materials: resume/CV, cover notes, work history, references (if you provide them)
  • Support and communications: support requests and other information you provide to us

If you are a clinic or clinic representative, we may collect:

  • Clinic & contact: clinic name, location(s), contact person, email, phone
  • Posting & operational details: role details, scheduling needs, compensation/fee split ranges (if you include them), onboarding requirements
  • Support and communications: support requests and other information you provide to us

B. In-app messaging data

When you use in-app messaging, we collect and process:

  • message content you send/receive,
  • participants,
  • time/date stamps, and
  • attachments/files (if enabled).

Important: Coverly is not intended to collect or store patient/client health information. Please do not share patient/client personal or health details in messages.

C. Payments and billing

If you make or receive payments through the Services, we may collect and process:

  • transaction details (amount, date/time, currency, transaction status),
  • Coverly account identifiers associated with the transaction,
  • billing contact details (such as name and email),
  • receipts/invoices, and
  • fraud-prevention and dispute information (where applicable).

Payment card or banking credentials are typically handled by our third-party payment processor(s). We may receive a tokenized reference, limited card details (e.g., last four digits), and status information from the processor.

D. Information we collect automatically (cookies and similar technologies)

When you use our website/app, we may collect:

  • device and browser information,
  • IP address and general location signals,
  • pages viewed, clicks, and actions taken,
  • cookie identifiers and similar technologies.

E. Information from third parties

We may receive information from:

  • service providers that support payments, fraud prevention, or identity verification (if used),
  • clinics or RMTs (e.g., confirmations related to a placement),
  • publicly available or regulatory sources where permitted (e.g., to verify professional status, if you provide identifiers).

4) How we use personal information

We use personal information to:

  • Provide the Services (accounts, profiles, postings, applications, matching, messaging)
  • Facilitate connections between clinics and RMT Applicants for locum coverage and permanent roles
  • Process payments and manage billing, refunds, chargebacks, and transaction records
  • Communicate with you (service messages, confirmations, support)
  • Maintain safety and platform integrity (fraud prevention, security monitoring, misuse detection, policy enforcement)
  • Improve and develop the platform (including analytics and troubleshooting)
  • Comply with legal obligations and respond to lawful requests

5) Consent and your ability to withdraw consent

Where we rely on consent, you can withdraw consent by giving us reasonable notice. We will inform you of the likely consequences of withdrawing consent (for example, we may not be able to provide parts of the Services). (BC Laws)

6) How matching and profiles work

Coverly is designed to help clinics and RMTs connect. Depending on your settings and actions:

  • Your RMT profile may be shown to clinics (for example, when you apply, or if you opt into being discoverable).
  • Clinic postings and clinic profile details may be shown to RMT Applicants.
  • We may use automated tools to recommend matches based on information you provide (for example, availability, location, and preferences).

You control which opportunities you apply to, and clinics control hiring decisions.

7) When we disclose personal information

A. Between users (core platform function)

  • If you are an RMT Applicant, we disclose your application/profile details to the clinic(s) you apply to or otherwise choose to share with through the Services.
  • If you are a clinic, we disclose your posting and clinic details to RMT Applicants who view or apply.

Clinics and RMTs are independent parties. Once you share information with another user, their handling of that information is governed by their own practices, professional obligations, and policies.

B. To service providers (processors)

We may share personal information with vendors who help us operate the Services, such as:

  • cloud hosting and infrastructure,
  • analytics providers (including Google Analytics),
  • communications providers (email/SMS/notifications),
  • customer support tools,
  • fraud prevention tools (if used), and
  • payment processors (to complete transactions).

They are authorized to access personal information only as needed to provide services to us and must protect it.

C. For legal, safety, and business transactions

We may disclose personal information where necessary to:

  • comply with law, regulation, court orders, or lawful requests,
  • protect the rights, safety, and security of users, Coverly, and the public, or
  • support a corporate transaction (e.g., financing, merger, acquisition), subject to appropriate safeguards.

8) Cookies and Google Analytics

A. What cookies are

Cookies are small text files (or similar technologies) stored on your device that help websites function, remember preferences, and understand how visitors use a site. (Privacy Commissioner of Canada)

B. Types of cookies we may use

  • Strictly necessary cookies: required for core functions like login/session management and security.
  • Functional cookies (if enabled): remember preferences (e.g., language).
  • Analytics cookies: help us understand usage and improve performance.
  • Payment-related cookies (if applicable): may be set by our payment processor(s) to support checkout, fraud prevention, and authentication.

C. Google Analytics

We use Google Analytics to understand how visitors interact with our site and to improve performance and user experience.

Google states that Google Analytics 4 does not log or store IP addresses (and describes how IP addresses are dropped for EU users before logging via EU domains/servers). (Google Help)

D. Your choices

You can control cookies through:

  • Browser settings: most browsers let you delete or block cookies (some features may not work properly if cookies are disabled)

We aim to provide information and choices consistent with meaningful consent expectations. (Privacy Commissioner of Canada)

E. Cookie details list

Because cookie names can change as we update features and vendors, we maintain a current cookie list here: https://coverlyhealth.ca/cookies-used-site

9) In-app messaging acceptable use and safety

Coverly offers in-app messaging so clinics and RMT Applicants can communicate about opportunities.

A. Do not share sensitive information

You agree not to send through in-app messaging:

  • Patient/client personal or health information (including names, contact details, conditions, treatment details, or appointment notes)
  • Payment card information (full card numbers, CVV codes, or unmasked banking details)
  • Government-issued IDs (unless Coverly specifically requests this through a secure verification flow)
  • Passwords or authentication codes

If you accidentally share sensitive information, contact us at: privacy@coverlyhealth.ca

B. Respectful, lawful communication

You agree not to use in-app messaging to:

  • harass, threaten, stalk, or abuse others,
  • discriminate or promote hate or violence,
  • send spam, scams, or misleading content,
  • impersonate another person or clinic, or
  • upload malware or attempt to compromise the Services.

C. Moderation and enforcement

To maintain trust and safety, we may use automated tools and/or human review to detect spam, fraud, security issues, or policy violations; investigate reports; and take action (including warnings, content removal, account limits, or suspension) where appropriate.

D. Reporting concerns

You can report problematic messages by contacting privacy@coverlyhealth.ca

E. No emergencies

Coverly Health messaging is not monitored for emergencies. If someone is in immediate danger, contact local emergency services.

10) Where personal information is stored and cross-border processing

We operate from Canada, but some service providers may process information outside Canada.

Canadian federal privacy guidance explains that PIPEDA does not prohibit cross-border transfers for processing, and organizations remain accountable for personal information handled by service providers. (Privacy Commissioner of Canada).

11) Safeguards

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information, such as access controls, encryption in transit where supported, and vendor/security controls. No method of transmission or storage is completely secure, but we work to protect personal information against unauthorized access, use, and disclosure.

12) Retention

We retain personal information only as long as necessary for the purposes described in this Privacy Policy, and as required or permitted by law (including accounting and tax requirements). You may request account deletion, subject to lawful retention requirements (for example, transaction records).

13) Your rights and requests

You may request:

  • access to your personal information we hold, and
  • correction if it is inaccurate or incomplete.

You may also withdraw consent where we rely on consent (see Section 5). (BC Laws)

To make a request, contact us using the details below.

14) Marketing communications (CASL)

If we send commercial electronic messages (e.g., product updates or promotions), we will do so in line with Canada’s Anti-Spam Legislation (CASL), including consent (where required), identification information, and an unsubscribe mechanism. (CRTC)

You can unsubscribe at any time using the link in the message or by contacting us.

15) Children

The Services are intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us and we will take appropriate steps.

16) Third-party links

Our website may include links to third-party websites or services. Their privacy practices are governed by their own policies.

17) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date shows when changes were made. If changes are material, we may provide additional notice through the Services or by email.

18) Contact us (Privacy Officer)

Privacy Officer: Colleen Johnson, CEO
Email: privacy@coverlyhealth.ca

If you have concerns, please contact us first and we’ll work to resolve them. You may also contact: