Privacy Policy

Overview

Careviv Health Inc. ("Careviv," "we," "us," or "our") operates a doctor–clinic matching and transition platform using structured, explainable matching, initially focused on British Columbia, with a separate pathway for UK-trained GPs considering practice in Canada. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit careviv.ca, submit an inquiry, create an account, use a doctor or clinic portal, communicate with us, or otherwise use a Careviv service that links to this Policy (collectively, the "Services").

This Policy is intended to be accurate even though a separate Matching & AI Notice has not yet been published. It describes current matching and AI practices and the safeguards that apply if AI-assisted interpretation is later used on matching information.

Privacy notice, not blanket consent

This Policy is a notice about our privacy practices; it is not a request for blanket consent to every activity described below. We rely on the authority permitted by applicable law for each purpose. Where consent is required, including for certain optional disclosures, marketing, or non-essential tracking technologies, that consent is separate from this Policy and may be withdrawn subject to legal or contractual restrictions. Declining an optional use will not prevent access to unrelated features.

1. Scope and People Covered

This Policy applies to personal information about identifiable individuals that is under Careviv's control. Depending on the circumstances, Careviv acts as the organization responsible for deciding why and how that information is processed. This Policy applies to:

• Doctors and prospective candidates, including people who contact us before creating an account.
• Clinic owners, clinic representatives, hiring personnel, and other authorized clinic users.
• People who provide professional references or whose information is supplied as part of a recruitment or relocation process.
• Website visitors, people who submit forms or use public tools, and people who communicate with Careviv.
• Limited records from earlier Careviv services, including former directory or patient-list information, where those records are still retained for legal, security, accounting, dispute-resolution, or deletion purposes.
• The Services are not designed to receive patient medical records. Do not upload or send patient-identifying or clinical information through recruitment profiles, documents, messages, or support channels.

2. Information We Collect

The information we collect depends on your relationship with Careviv and the features you use. Scores, rankings, inferred values, and explanations are treated as personal information where they relate to an identifiable or reasonably identifiable person. We may collect:

• Account and contact information: name, email address, telephone number, authentication identifiers, account role, communication preferences, account status, and records of notices, choices, consents, or agreements associated with the account.
• Doctor professional information: biography, photograph, current role and employer, employment history, education, qualifications, certifications, languages, specialty, professional references, registration or licensing information, and years of experience.
• Doctor recruitment and relocation information: preferred provinces or cities, practice and clinic preferences, timeline, family or household priorities you choose to share, eligibility-tool answers, pathway progress, opportunity interests, interview availability, interview acceptance, and onboarding or relocation steps.
• Clinic and opportunity information: clinic identity and location, authorized representatives, services, staffing needs, job postings, compensation or overhead information, schedules, supervision and sponsorship capacity, candidate invitations, interview outcomes, and clinic-authored notes.
• Structured matching inputs: essential, preferred, and flexible requirements; working preferences; location; timing; supervision; languages; and other job-related profile fields used by the matching model.
• Derived and model-related information: normalized values; possible-conflict and missing-information indicators; factor-level alignment labels; eligibility, readiness, and data-confidence results; model version; score or factor explanations; and, if generated, an Alignment Score.
• Review and outcome records: user confirmations or corrections; score or result challenges and human-review records, if created; manual overrides and reasons, if recorded; interview, introduction, offer, start, or other match outcomes, if collected; and feedback provided by doctors and clinics.
• Recruitment records: source or referral information, intake reports, internal notes, relationship owner, candidate or clinic stage, communications, support messages, and follow-up history.
• Documents and verification information: CVs, passports, medical degrees, GMC, CCT and MRCGP evidence, professional registration documents, Enhanced DBS checks, references, document metadata, file hashes, malware-scan results, administrative notes, and document access history.
• Website, device, and activity information: IP address or a hash derived from it, browser and device information, operating system, referring page, approximate location, pages viewed, clicks, portal visits, login and last-seen information, active days, feature use, posting views, messages, document activity, and other security or diagnostic events.
• Communications and content: emails, form submissions, support requests, portal messages, feedback, reviews, and information you provide during calls or meetings.
• Legacy-service information: clinic and provider business information and, where still retained, limited records from prior Careviv services for legal, security, accounting, dispute-resolution, or deletion purposes.

3. Sources of Information

We collect information directly from you; from doctors, clinics, referees, and people who refer or introduce a candidate or clinic; from Careviv staff who create intake reports, notes, assessments, and follow-up records; from authentication, hosting, email, analytics, advertising, security, and other service providers; from cookies and similar technologies; and from public professional sources such as regulator registers, clinic websites, professional profiles, and other lawfully accessible sources. If we obtain your information from someone else, we provide this Policy or another appropriate notice when required by law.

4. Purposes and Lawful Bases

We use personal information only for purposes that a reasonable person would consider appropriate and as permitted by applicable law. Under Canadian privacy law, this may be based on consent, an obvious or reasonable purpose, performance of requested services, or another authorization provided by law. Where UK data protection law applies, our principal purposes and lawful bases are listed below. Service improvement is not blanket permission to train AI models on identifiable profiles.

• Creating and maintaining accounts: account and contact information, authentication identifiers, and consent records. Contract or pre-contract steps and legitimate interests.
• Creating doctor and clinic profiles: professional, opportunity, preference, and visibility information you submit. Contract or pre-contract steps and legitimate interests.
• Checking essential eligibility requirements: province, specialty, supervision, timing, experience, visibility consent, and similar hard requirements. Contract or pre-contract steps and legitimate interests.
• Interpreting or structuring submitted responses: structured profile fields and, if later enabled, AI-assisted extraction from free text you submit for matching. Contract or pre-contract steps and legitimate interests; consent where required for a new AI use.
• Calculating and explaining alignment: confirmed job-related factors, factor labels, eligibility, readiness, data confidence, model version, and any Alignment Score. Contract or pre-contract steps and legitimate interests.
• Surfacing potential matches: location-matched or interest-based candidate lists and hiring-need filters. Clinic lists may be ordered by an explainable fit score from questions both sides answered. That score is not a ranking of physician quality and is not produced by an LLM. Contract or pre-contract steps and legitimate interests.
• Controlling profile and identity visibility: visibility choices, interview acceptance, and staged identity-release records. Consent and contract or pre-contract steps.
• Coordinating introductions: limited professional profiles, invitation records, and, after authorization, identifying contact details. Consent, contract or pre-contract steps, and legitimate interests.
• Supporting human review: assessment inputs, explanations, staff notes, and any override or challenge records. Legitimate interests and legal obligations.
• Managing licensing or relocation readiness: pathway progress, licensing-readiness indicators, and optional household information used only for relocation support. Contract or pre-contract steps and legitimate interests.
• Managing internal engagement and follow-up: portal activity, messages, completed steps, and response status. These signals are used for internal follow-up. They are not part of the mutual Alignment Score or factor-level alignment result. Legitimate interests.
• Evaluating matching quality, detecting errors, misuse, or model manipulation, and conducting fairness or quality testing: assessment outputs, override records, and aggregated outcomes, using the least identifiable information reasonably needed. Legitimate interests. Identifiable production profiles are not used to train a new matching model except as described in section 13.
• Analytics, advertising, and website measurement: device, page, referral, and interaction information, subject to the cookie section. Consent where required; legitimate interests for strictly necessary measurement.
• Credential and document review: identity and professional documents you upload. Contract or pre-contract steps, legitimate interests, legal obligations, and any additional legal condition required for sensitive or criminal-offence information.
• Safety, security, and service integrity: authentication, access logs, malware scanning, and incident records. Legitimate interests and legal obligations.
• Communications: interview, account, security, support, relocation, and service messages. Contract or pre-contract steps and legitimate interests. Marketing is based on consent or another basis permitted by applicable electronic-marketing law.
• Legal, regulatory, and corporate purposes: legal claims, audits, and corporate transactions. Legal obligations and legitimate interests.

5. Doctor Profiles, Clinic Matching, and Identity Release

Careviv uses staged profile sharing so clinics can evaluate potential fit before direct identity and contact information are released. A limited profile is pseudonymized, not guaranteed to be anonymous: a clinic may be able to identify a doctor from a distinctive combination of experience, education, certifications, specialty, location, or other professional details.

• When a doctor chooses "Visible to clinics", location-matched clinics may see a limited professional profile. New profiles stay private until that choice is made. Choosing "Private" removes the profile from clinic discovery, although Careviv staff may continue to use it to provide requested services.
• The limited profile may include a stable internal identifier, headline, biography, years of experience, languages, specialty, target location, relocation timeline and progress, readiness indicators, employment history, education, certifications, and whether the doctor expressed interest in an opportunity. It excludes direct contact information, profile photograph, and professional references before identity release.
• A doctor's name, email address, photograph, and references may be released to a clinic after the doctor accepts that clinic's interview invitation or when Careviv records that an introduction has otherwise been authorized.
• A doctor may initially see a clinic opportunity under a descriptive label without the clinic's direct identity or contact details. When the doctor accepts an interview invitation, the clinic's identity and available contact details may be released to the doctor.
• Current clinic-facing matching results show factor-level explanations — what appears aligned, what may conflict, and what still needs confirmation — rather than a single numeric Alignment Score. Eligibility, readiness, and data confidence are evaluated separately. Relocation pathway progress may be shown and is not a compatibility score.
• Clinics may order candidates by an explainable fit score from questions both sides answered. A clinic may also apply hiring-need filters such as timeline, experience, supervision, or languages. A hard eligibility failure, or a doctor who has not chosen clinic visibility, can keep a pairing from being treated as eligible.
• Matching assessments are generated when a pairing is viewed, from current profile and hiring facts. They are not stored as a separate match table. Correcting a profile changes later assessments. It does not reverse information already lawfully received by a clinic after identity release.
• Explanations use general factor labels, such as that a schedule may differ or still needs confirmation. They are not intended to expose one party's confidential free-text answers to the other party.
• After identifying information is released, the doctor and clinic communicate directly and the clinic is responsible for its own collection, use, retention, and protection of the information it receives. A clinic may have its own privacy notice and legal obligations.
• Doctors can change profile visibility or withdraw from an opportunity. Withdrawal stops future Careviv sharing but cannot reverse information already lawfully received by a clinic.

6. Matching, Factor-Level Alignment, and AI Boundaries

Careviv may use AI-assisted tools to interpret, organize, and normalize information provided by doctors and clinics. Where confirmation is required, proposed structured values are presented for review before they affect matching. A versioned model compares relevant clinic requirements with doctor qualifications, preferences, working conditions, and timing. Current results are factor-level rather than a single numeric Alignment Score.

The current production matching model compares structured profile and hiring fields when a pairing is viewed. It produces eligibility, factor-level alignment, readiness, data-confidence, and an explainable fit score from shared answers, with model version matching.v2. It does not currently send recruitment profiles or matching free text to an LLM. AI-assisted extraction of free-text profile responses is not currently used to calculate matching results. If that changes, Careviv will provide notice and obtain additional consent where required.

Current workflow:

• Doctors and clinics submit structured answers and, where available, free-text responses such as a biography.
• The versioned model compares confirmed job-related structured fields. Missing or unknown information stays unknown and does not silently count as a match.
• Careviv generates factor-level explanations rather than a single numeric Alignment Score. The result summarizes alignment between the information submitted by both sides.
• The result is not a probability of hiring success and does not measure physician quality, clinical competence, licensing eligibility, employment performance, retention, or legal suitability.
• Eligibility is evaluated separately as a hard-requirement check, including specialty, province, required supervision, timing that makes a start impossible, an explicit experience minimum, and clinic-visibility consent. Work-authorisation responsibility, where recorded, is treated as needing confirmation rather than as an automatic pass or fail.
• Readiness covers availability, licensing or relocation progress, and operational ability to start. Data confidence covers completeness, confirmation status, and freshness of hiring facts. These remain separate from mutual alignment.
• Operational engagement — response status, portal activity, messages, or completed steps — is used for internal follow-up. It does not determine mutual fit and is not part of the Alignment Score or factor-level alignment result.
• Doctors and clinics decide whether to communicate, interview, contract, hire, or proceed. Careviv does not make a final hiring or career decision.
• Users may correct relevant profile information in the portal. Later assessments use the updated information. Users may also contact Careviv to request an explanation or human review of a material result. There is not yet an in-product score-challenge workflow.
• Results may change when profile information, clinic information, weights, or model versions change.
• Careviv does not describe the model as statistically validated, bias-free, or objective, or as able to predict successful employment.

7. Information Not Used for Matching

Careviv does not use or infer protected characteristics to rank, recommend, or exclude doctors. The matching model's inputs exclude protected and household attributes. Careviv does not attempt to infer protected information from names, photographs, CVs, locations, or free text.

• Race, colour, ancestry, or place of origin.
• Sex, sexual orientation, gender identity, or gender expression.
• Age, except where a specific lawful professional requirement applies. Careviv does not currently use age as a matching input.
• Religion.
• Marital or family status.
• Disability or medical information.
• Unrelated criminal convictions. DBS or criminal-record information is handled separately for defined verification purposes and does not contribute to general alignment.
• Photographs or names as proxies for protected characteristics.
• Family and household information is used only for optional relocation support. It does not affect the Alignment Score, factor-level alignment, or clinic ranking, and is not shared with clinics without a defined purpose and appropriate authorization.
• Passport and work-authorisation documents are used only for defined eligibility or verification purposes, not for general alignment.
• Language and experience requirements are used only where relevant to the opportunity.
• Careviv does not currently collect optional demographic information for fairness auditing. If that begins, the information will be segregated from matching and unavailable to clinics and routine decision-makers.

8. Credentials, Identity Documents, and Vetting Information

The doctor document portal may collect passports, CVs, medical degrees, registration and certification evidence, Enhanced DBS checks, references, and other requested materials. Enhanced DBS information is criminal-offence information under UK law and receives heightened treatment.

• We use these materials to review identity and professional readiness, support recruitment or relocation steps you request, detect fraudulent or unsafe files, and maintain an auditable record of authorized access.
• Documents are stored in non-public storage. Access is limited to the doctor, authorized Careviv personnel, and service providers needed to host, secure, or scan the files.
• Uploads are subject to file validation and malware scanning. We record metadata and access events, which may include the person who accessed a document, action, time, IP address, and browser information.
• We do not disclose uploaded document files to a clinic, regulator, health authority, or other recipient merely because a profile is visible. If a later recruitment or relocation step requires a document to be sent, we will provide appropriate notice and obtain any direction or authorization required by law.
• These documents are not sent to an LLM unless that use is expressly required, disclosed, and legally reviewed. Careviv does not currently send passports, DBS records, photographs, references, patient information, health information, family details, or complete credential documents to an LLM.
• Please upload a passport, DBS check, or other sensitive document only when Careviv specifically requests it for a current process.

9. How We Disclose Information

We disclose personal information only for the purposes described in this Policy, as you direct, or as otherwise permitted or required by law. Recipients may include:

• Participating doctors and clinics, following the staged matching and identity-release process described above.
• Careviv personnel and contractors who need the information to operate recruitment, support, security, technical, or administrative functions and who are subject to appropriate duties.
• Hosting, authentication, storage, communications, analytics, advertising, security, document-scanning, and technology service providers acting for Careviv.
• Professional advisers, insurers, auditors, financing parties, and prospective purchasers or successors in a proposed or completed corporate transaction, subject to appropriate confidentiality and legal requirements.
• Courts, regulators, law enforcement, health or safety authorities, or other parties when disclosure is required by law or reasonably necessary to protect rights, security, or safety.
• Other recipients when you request or authorize the disclosure.

10. Service Providers and Technology Partners

Careviv remains responsible for personal information it controls. Relevant service providers process information under contractual, confidentiality, security, retention, and deletion requirements appropriate to their role. Careviv does not transfer privacy responsibility to these providers. The list may change as the Services evolve. Current providers include:

• Supabase: database, authentication, and file storage, including secure doctor documents. It may receive account, profile, matching, document, and identifier information. Core application database and secure-document storage are configured in Canada (Canada Central).
• Vercel: website hosting and Vercel Analytics. It may receive page, device, and performance information for marketing pages. Vercel Analytics is not currently gated by the cookie-preferences banner.
• Google Analytics and Google Ads: measurement and advertising on marketing pages, loaded only after the relevant cookie consent. They may receive device, browser, page, referral, and interaction information. They are not used to send Alignment Scores, identity, or recruitment profile text.
• Reddit Pixel: advertising measurement on marketing pages, loaded only after advertising consent. It may receive device, page, and interaction information.
• Resend: transactional email for some public inquiries. It may receive names, email addresses, and message content you submit.
• Postmark: transactional email for some account and invitation messages. It may receive names, email addresses, and service-message content.
• Sentry: error and performance monitoring. It may receive diagnostic logs, truncated request context, and technical identifiers. It should not be used to collect passports, DBS records, or full recruitment profiles.
• ClamAV infrastructure: malware scanning of uploaded documents. It receives file bytes for scanning and related scan results.
• OpenAI: limited AI-assisted functions described in section 12. It may receive the text of a public-assistant message, limited conversation context, review text submitted for moderation, or internal blog-formatting content. It does not currently receive recruitment matching profiles, Alignment Scores, passports, DBS records, or credential documents.
• Providers and their support personnel or subprocessors may process information in Canada, the United States, the United Kingdom, or other jurisdictions. Users can request more information about applicable transfer safeguards by contacting the Privacy Officer.

11. Cookies, Analytics, and Advertising

Careviv and its providers use cookies, pixels, scripts, local storage, and similar technologies. You can open Cookie preferences in the website footer to accept, reject, or withdraw optional analytics and advertising consent. Necessary cookies for authentication, security, and basic site operation are not optional. A stored decision lasts about six months, after which Careviv asks again. Blocking essential technologies may prevent account or portal functions from working.

• Necessary: session, security, and consent-record cookies. Always on. Used to operate the site and remember your cookie choice.
• Analytics: Google Analytics, used to see which marketing pages are useful. Off until you accept analytics. Google Analytics is configured with IP anonymization. Some public planning tools may record a selected province and a tool-result status in analytics events after analytics consent. They are not intended to send identity, Alignment Scores, or document contents.
• Advertising: Google Ads conversion tracking and remarketing, and the Reddit Pixel. Off until you accept advertising. Used to measure which ads lead to enquiries.
• Vercel Analytics may collect marketing-page performance information even before a cookie-banner decision. It is not currently treated as a consent-controlled advertising pixel.
• Default state: until you decide, the cookie banner is shown and Google Analytics, Google Ads, and the Reddit Pixel are not loaded.
• Advertising and remarketing technologies are not loaded inside authenticated portals, doctor or clinic matching pages, document-upload workflows, or UK-relocation tools as advertising pixels. Careviv does not send Alignment Scores, identity, or recruitment profile text in analytics URLs or advertising payloads.
• Where consent is the applicable legal basis, you may withdraw it without affecting processing that occurred before withdrawal.

12. AI-Assisted Features

Some public assistant, review-moderation, and internal content-formatting features may send the text you submit and limited conversation context to OpenAI to generate or screen a response. Do not enter passports, DBS information, patient data, confidential clinic data, or other sensitive personal information into a public AI feature. AI output may be incomplete or inaccurate and should be independently verified.

Recruitment matching profiles, Alignment Scores, and matching free-text fields are not currently sent to an LLM. If Careviv later uses an LLM to extract, normalize, identify gaps in, or explain matching information, the following safety posture applies unless a later notice says otherwise:

• Careviv will not send passports, DBS records, photographs, references, patient information, health information, family details, or complete credential documents to an LLM.
• Names and contact information will be minimized or removed where they are unnecessary for the task.
• An inferred value will not materially affect matching until the user confirms it, once that confirmation step is implemented.
• Explanations will be generated from stored match factors rather than letting an LLM invent reasons.
• Careviv's intention is that third-party AI providers must not train their general models on Careviv profile information. Provider training-disable settings and contract terms have not been independently verified in this Policy and must be confirmed before that statement is treated as an operational guarantee.
• Users can correct inaccurate AI output by updating the relevant information and contacting Careviv. Processing may occur in the United States or other locations used by the provider. Whether the provider retains prompts or outputs, and whether subprocessors receive them, depends on the provider agreement then in force.

13. Model Evaluation and Training

Careviv does not permit third-party AI providers to train their general models on Careviv profile information. Careviv does not use identifiable production profiles to train a new matching model unless it has established an appropriate lawful purpose, completed the required privacy and model-risk assessment, provided advance notice, and obtained consent where required.

Careviv does not currently use interview outcomes, offers, start dates, retention outcomes, decline reasons, or clinic or doctor feedback to calibrate or train a matching model. If that begins, this Policy will be updated first. Any later evaluation dataset would use the least identifiable information reasonably needed and would not treat service improvement as permission to train on identifiable profiles.

14. International Transfers

Careviv is based in British Columbia. Our core application database and secure-document storage are configured in Canada (Canada Central). That does not mean all information remains in Canada. Some service providers or their support personnel may process information in the United States, the United Kingdom, or other jurisdictions, including through subprocessors or onward transfers. Overseas support personnel may be able to access information needed to operate or secure the Services. If an LLM is used, prompts, outputs, or diagnostic logs may be stored outside Canada.

Information in another jurisdiction may be subject to that jurisdiction's laws and lawful-access requirements. Where UK data protection law applies to a restricted transfer, we use an applicable adequacy route, contractual safeguard, or other lawful transfer mechanism and conduct any assessment required by law. You can ask the Privacy Officer for more information about applicable transfer safeguards.

15. Retention and Deletion

We retain personal information only as long as reasonably necessary for the purpose collected, the matching or clinic relationship, security and audit needs, legal obligations, dispute resolution, and enforcement. Careviv has not published a single numeric retention period for every record class. The following schedule uses objective criteria rather than invented periods. Where information may have been used in a decision that directly affects an individual, Careviv may preserve a minimal record of the inputs, model version, result, explanation, and disposition for at least one year where required by British Columbia law.

• Active accounts, profiles, and opportunity records: retained while the account or process is active.
• Inactive, unsuccessful, or withdrawn matching relationships: retained afterwards only as needed for follow-up, placement administration, disputes, security, or legal obligations.
• Alignment Score inputs and outputs, factor explanations, and model versions: currently generated when a pairing is viewed and are not stored as a separate match table. If persistence is added, retention will follow the decision-record rule above.
• LLM prompts and outputs, and provider logs: retained only where the relevant feature is used and only as needed for security, quality, dispute resolution, or the provider's then-current arrangement. Matching profiles are not currently sent to an LLM.
• Score corrections, challenges, human-review, and override records: retained while needed to explain or correct a result and for the decision-record period required by law.
• Clinic and doctor feedback and interview, offer, or start outcomes, if collected: retained while needed to administer the relationship, evaluate service quality without training a new matching model on identifiable profiles, and meet legal obligations.
• Passports and work-authorisation documents: retained only while needed for the active process, verification, security, audit, or a legal requirement. Access may be restricted before final deletion.
• DBS and criminal-record documents: retained only while needed for the defined verification process, security, audit, or a legal requirement, then restricted or deleted.
• Licensing and credential documents, CVs, prior document versions, and document-access records: retained only while needed for the active process, verification, security, audit, or a legal requirement.
• Security and audit logs: retained for the time reasonably needed to investigate misuse or meet legal requirements.
• Analytics and advertising identifiers: retained according to the relevant provider and until analytics or advertising consent is withdrawn, subject to a minimal suppression record.
• Backups: deleted or overwritten on their normal cycle.
• Billing and legal records: retained as required for accounting, tax, and legal claims.
• De-identified or aggregated analytics and any later model-evaluation datasets that cannot reasonably identify a person: may be retained longer.
• A deletion request may not remove information we must retain by law, need to establish or defend legal claims, or must keep to protect another person's rights. We will explain any material exception that applies.

16. Security

We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information, including access controls, private document storage, authentication, transport security, audit logging, file validation, malware scanning, and staff access restrictions. Careviv assesses suspected incidents, preserves relevant evidence where required, and notifies affected individuals and the appropriate authorities when the law requires it. This Policy does not claim encryption-at-rest settings, multi-factor authentication, immutable logs, regional isolation, automated deletion, or a specific security certification. No service can guarantee absolute security. Protect your credentials, do not share accounts, and notify us promptly if you suspect unauthorized access or disclosure.

17. Communications and Marketing

We send service communications needed to administer accounts, inquiries, opportunities, interviews, security, support, and relocation workflows. You may still receive these messages while using the relevant service. Marketing communications are separate: where consent or another lawful basis is required, we follow applicable electronic-marketing requirements. You can unsubscribe through the message link or contact us, and we may keep a suppression record so we do not contact you again for that marketing purpose.

18. Privacy Rights and Choices

Depending on where you live and the applicable law, you may have rights to ask whether we hold information about you and to request access, correction, deletion, restriction, portability, or an explanation of its use. You may also object to certain processing, withdraw consent where processing relies on consent, complain to a privacy regulator, and request human review of relevant profiling. Rights can be subject to identity verification, legal exceptions, and the rights of other people.

You may request access, where applicable, to submitted profile information; normalized, extracted, or inferred values; the current Alignment Score or factor-level result; the main factors that influenced the result; eligibility, readiness, and confidence labels; model version; how the result affected visibility, ordering, or introductions; recipients or disclosure categories; and human-review or override records. Matching assessments are currently generated when a pairing is viewed, so a stored historic score may not exist.

A human reviewer asked to consider a material result must have the authority and information needed to correct an inaccurate result. Requesting review must not be used to disadvantage you. Careviv does not currently provide an in-product review workflow; requests are handled by contacting the Privacy Officer.

• Correct profile information in the portal, or contact us if a field cannot be edited.
• Dispute an inferred value and ask Careviv to correct it.
• Request recalculation after a correction. Later assessments use the updated information.
• Request meaningful human review of a material matching result by emailing the Privacy Officer.
• Withdraw future clinic visibility by choosing "Private", or withdraw from an opportunity.
• Close an account by contacting Careviv.
• Object to certain profiling where applicable law provides that right.
• Marketing: use the unsubscribe method in the message or contact us.
• Cookies: use Cookie preferences in the website footer, or browser or provider controls.
• UK individuals may complain to the Information Commissioner's Office. Canadian individuals may complain to the Office of the Information and Privacy Commissioner for British Columbia or, where applicable, the Office of the Privacy Commissioner of Canada. We encourage you to contact Careviv first so we can investigate.

19. Children and Third-Party Information

Doctor and clinic accounts are intended for adults with legal capacity and are not directed to children. We do not knowingly create recruitment accounts for anyone under 18. Family information is not included in matching.

If relocation preferences include a partner or children, provide only the minimum information needed. Do not include child names, dates of birth, documents, or medical information unless Careviv specifically asks for that information because it is operationally necessary. Structured age bands should be used instead of exact child information for relocation planning. Family information is not shared with clinics without a defined purpose and appropriate authorization. These details are not sent to an LLM.

If you provide information about a referee or another person, you should be authorized to do so and should direct that person to this Policy.

20. Changes to This Policy

We may update this Policy as our Services, providers, or legal obligations change. The effective date shows when the current version took effect. Careviv will provide advance notice and obtain additional consent where required before a material change to the information collected, the purposes of processing, the role of AI, model-training practices, score visibility, profile disclosure, or third-party processing.

A Privacy Policy is a notice. Continued use alone is not treated as consent for a material new use of personal information where applicable law requires an affirmative choice.

21. Contact and Complaints

Contact the Careviv Privacy Officer to ask a question, make a complaint, exercise a privacy right, or request information about service providers or international-transfer safeguards. We may need to verify your identity before disclosing or changing personal information.

• Privacy Officer, Careviv Health Inc.
• Location: Vancouver, British Columbia, Canada
• Email: generalinfo@careviv.ca (subject line: Privacy Request)
• Website: https://www.careviv.ca