Privacy, AI & Data Protection Policy
Effective Date: June 1, 2026
Our Commitment
Ecotone Health Insurance Inc. (“Ecotone,” “we,” “our,” or “us”) is committed to protecting your privacy and safeguarding the personal information entrusted to us.
This Privacy, AI & Data Protection Policy explains how we collect, use, disclose, store, protect, and manage personal information in connection with our websites, insurance products, benefit plans, advisory services, and related communications.
This policy applies to all Ecotone-operated websites and products, including:
-
ecotonehealth.ca;
-
mytip.ca, including The Industry Plan;
-
legacy-plan.ca, including The Legacy Plan;
-
One by Ecotone and related Ecotone benefit solutions;
-
any future Ecotone-operated websites, landing pages, forms, digital tools, or client communications.
Ecotone complies with the Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial
privacy requirements, and the rules and expectations of the insurance regulators and councils in the provinces where Ecotone is licensed to conduct business.
Ecotone Health Insurance Inc. is incorporated in Saskatchewan and authorized to conduct insurance business in Saskatchewan, Alberta, British Columbia, and Ontario.
Personal Information We Collect
We collect personal information only for reasonable business, insurance, administrative, legal, and regulatory purposes.
Depending on your relationship with Ecotone, we may collect information directly from you, your employer, association, advisor, insurer, third-party administrator, claims administrator, or authorized representative.
This may include:
-
name, mailing address, email address, phone number, and date of birth;
-
province of residence and eligibility information;
-
employer, association, membership, or group affiliation details;
-
dependent and beneficiary information, where applicable;
-
insurance application, enrollment, renewal, and cancellation information;
-
coverage details, policy information, certificate numbers, and plan selections;
-
claim-related information needed to administer or support coverage;
-
communications with Ecotone, including emails, forms, call notes, and service inquiries;
-
information needed to comply with legal, regulatory, insurer, or administrator requirements.
We only collect the information reasonably necessary for the purpose identified.
How We Use Personal Information
We use personal information to:
-
confirm eligibility for coverage;
-
provide quotes, enrollment support, and policy service;
-
administer, manage, and service benefit plans;
-
communicate with you about your plan, application, renewal, coverage, billing, claims, or account status;
-
support claims administration and coordination with insurers or third-party administrators;
-
respond to inquiries, complaints, access requests, or service issues;
-
maintain accurate business and compliance records;
-
meet legal, regulatory, licensing, insurer, and contractual obligations;
-
improve our internal processes, client service, website experience, and communication systems;
-
send relevant plan education, renewal notices, service updates, and marketing communications where permitted by law.
If we need to use your personal information for a new purpose that is not reasonably connected to the original purpose, we will request your consent unless otherwise permitted or required by law.
Consent
By applying for coverage, requesting a quote, submitting information through our websites, communicating with Ecotone, or using our services, you consent to the collection, use, and disclosure of your personal information as described in this policy.
You may withdraw consent, subject to legal, contractual, insurer, administrator, and regulatory limitations. Please note that withdrawing consent may affect our ability to provide quotes, maintain coverage, administer benefits, process service requests, or support claims.
Use of Artificial Intelligence
Ecotone uses artificial intelligence tools responsibly to support business productivity, drafting, research, workflow design, marketing, education, and general administrative efficiency.
Ecotone does not intentionally enter client personal information, private health information, claims information, banking information, application details, policy records, certificate numbers, or other sensitive client data into public or general-purpose AI tools.
When AI tools are used, Ecotone takes reasonable steps to ensure that:
-
client personal information is not used in prompts or uploaded files;
-
information is anonymized, generalized, or de-identified where possible;
-
AI is used to support human work, not replace professional judgment;
-
AI-generated content is reviewed by a person before being used for client-facing, compliance, insurance, or advisory purposes;
-
AI is not used as the sole basis for eligibility, underwriting, claim, cancellation, or coverage decisions;
-
sensitive client records remain within approved business systems, insurers, administrators, or secure service providers.
Ecotone may use AI to help create educational content, website copy, workflows, marketing concepts, internal process documents, summaries, and non-client-specific business materials.
Ecotone does not sell client information, train AI systems using client files, or permit client information to be used for unauthorized AI model training.
Automated Decision-Making
Ecotone may use digital forms, CRM systems, automation tools, and workflow rules to help organize leads, applications, reminders, onboarding, renewal notices, and service communications.
These tools may help route information, trigger follow-ups, or identify next steps. However, Ecotone does not rely on fully automated decision-making to make final decisions about insurance eligibility, underwriting, claim payment, cancellation, or coverage entitlement.
Final coverage, eligibility, underwriting, and claim decisions are subject to the applicable insurer, policy documents, plan rules, third-party administrator requirements, and licensed representative review where applicable.
Storage, Data Residency, and Service Providers
Ecotone uses secure business systems and third-party service providers to operate its websites, CRM, email, enrollment, administration, payment, claims, document, and communication processes.
Where practical, Ecotone prioritizes Canadian-based systems, Canadian data storage, and service providers with strong privacy and security safeguards.
Some approved service providers may process or store information outside Canada or may be subject to the laws of another jurisdiction. Where this occurs, Ecotone takes reasonable steps to ensure that personal information is protected through contractual, administrative, technical, and organizational safeguards.
Ecotone remains responsible for personal information transferred to service providers for processing.
Payment and Banking Information
Ecotone does not collect or store client banking information directly on its own websites.
Payment information, banking information, credit card information, withdrawals, and premium collection are handled securely by authorized third-party administrators, payment processors, insurers, or approved service providers acting on behalf of Ecotone or the applicable plan.
Disclosure of Personal Information
Ecotone may share personal information only when reasonably necessary and permitted or required by law.
This may include sharing information with:
-
insurers and insurance carriers;
-
third-party administrators and claims administrators;
-
licensed advisors or representatives involved in servicing your coverage;
-
service providers that support Ecotone’s business systems, communications, websites, forms, CRM, document storage, or administration;
-
healthcare professionals, pharmacies, dental offices, or providers where needed to verify coverage or support claims;
-
authorized representatives, including legal representatives, guardians, executors, or individuals with Power of Attorney;
-
employers, associations, or group sponsors where required for eligibility, billing, or plan administration;
-
government, tax, legal, law enforcement, or regulatory authorities when required or permitted by law.
Ecotone does not sell, rent, or trade personal information.
Safeguarding Personal Information
Ecotone maintains administrative, physical, and electronic safeguards designed to protect personal information from unauthorized access, loss, theft, misuse, disclosure, copying, modification, or disposal.
These safeguards may include:
-
password-protected systems;
-
access controls and role-based permissions;
-
secure cloud-based business systems;
-
confidentiality obligations for personnel and representatives;
-
secure document storage and transmission practices;
-
limited access to information based on business need;
-
reasonable review of vendors and service providers;
-
internal privacy and confidentiality practices;
-
secure disposal or deletion of information when no longer required.
While no system can guarantee absolute security, Ecotone takes privacy and confidentiality seriously and uses reasonable safeguards appropriate to the sensitivity of the information.
Privacy Breaches
If Ecotone becomes aware of a privacy breach involving personal information under its control, we will take reasonable steps to contain, investigate, assess, and respond to the breach.
Where required by law, Ecotone will notify affected individuals, regulators, insurers, administrators, or other appropriate parties.
Ecotone maintains records of privacy incidents and breach assessments as required by applicable privacy laws.
Retention of Personal Information
Ecotone keeps personal information only as long as reasonably necessary for the purposes for which it was collected, or as required for legal, regulatory, tax, insurance, claims, audit, contractual, or business recordkeeping purposes.
When personal information is no longer required, Ecotone will securely delete, anonymize, or dispose of it using reasonable methods.
Accuracy of Information
Ecotone makes reasonable efforts to keep personal information accurate, complete, and up to date for the purposes for which it is used.
You are responsible for advising Ecotone of changes to your contact information, eligibility status, dependents, address, payment details, or other information that may affect your coverage or communications.
Access and Correction
You may request access to your personal information or ask us to correct inaccurate or incomplete information.
Requests must be made in writing to Ecotone’s Privacy Compliance Officer. We may require proof of identity before releasing or correcting information.
Ecotone will respond to access and correction requests within 30 days, unless an extension is permitted by law.
In some cases, access may be limited or denied where permitted or required by law, including where the information contains references to another individual, is subject to legal privilege, relates to an investigation, or cannot be disclosed for legal, security, or commercial reasons.
Marketing Communications
Ecotone may send newsletters, plan education, renewal reminders, service updates, and marketing communications to individuals who have requested information, applied for coverage, become clients, joined a plan, or otherwise provided consent where required.
You may unsubscribe from marketing emails at any time using the unsubscribe link or by contacting us directly.
Please note that even if you unsubscribe from marketing communications, Ecotone may still send necessary service, renewal, billing, claims, administrative, or legal communications related to your coverage or account.
Website Data, Analytics, and Cookies
Ecotone websites may use cookies, analytics tools, pixels, tags, and similar technologies to improve navigation, measure engagement, understand website traffic, assess marketing performance, and improve user experience.
This information may include browser type, device type, pages visited, time spent on pages, referral source, approximate location, and interactions with website content.
You may manage or disable cookies through your browser settings. Some website features may not function properly if cookies are disabled.
Continued use of Ecotone websites indicates consent to these practices, where permitted by law.
Links to Third-Party Websites
Ecotone websites may contain links to third-party websites, insurers, administrators, payment processors, booking tools, social media platforms, or other external resources.
Ecotone is not responsible for the privacy practices, security, content, or policies of third-party websites or platforms. You should review the privacy policy of any third-party website before providing personal information.
Disclaimer and Licensing
The information on Ecotone websites is provided for general informational purposes only and does not constitute an offer to buy or sell insurance products outside the provinces where Ecotone is licensed.
Ecotone Health Insurance Inc. is incorporated in Saskatchewan and authorized to conduct insurance business in Saskatchewan, Alberta, British Columbia, and Ontario.
Life, accident and sickness, health, dental, travel, critical illness, disability, and related insurance products, including The Industry Plan, The Legacy Plan, One by Ecotone, and other Ecotone solutions, are offered through Ecotone Health Insurance Inc. and its licensed representatives, subject to licensing, insurer approval, plan availability, and applicable law.
Coverage, eligibility, premiums, exclusions, limitations, waiting periods, renewal terms, and plan availability are subject to the terms of the applicable policy, plan documents, insurer rules, administrator requirements, and underwriting guidelines.
Website content, summaries, illustrations, examples, and marketing materials are not a contract of insurance. In the event of a discrepancy, the official policy documents, benefit booklet, insurer contract, certificate, or administrator records will govern.
Plan details may change without notice.
Accessibility
Ecotone strives to make its digital content accessible and usable for all clients and website visitors.
If you experience difficulty accessing our websites, forms, documents, or digital content, please contact us so we can provide assistance or an alternate format where reasonable.
Questions, Complaints, and Contact
If you have questions about this policy, wish to access or correct your personal information, want to withdraw consent, or have a privacy concern or complaint, please contact:
Privacy Compliance Officer: Eric Biehn
Ecotone Health Insurance Inc.
P.O. Box 198
Humboldt, SK S0K 2A0
Email: eric@ecotonehealth.ca
Phone: 1-844-ECOTONE (326-8663)
Ecotone will review privacy complaints and respond in a reasonable manner. If you are not satisfied with our response, you may have the right to contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy or insurance regulator.
Policy Updates
Ecotone may update this Privacy, AI & Data Protection Policy from time to time to reflect changes in our services, systems, legal obligations, technology, privacy practices, AI use, or regulatory requirements.
The updated version will be posted on our website with a revised “Last Updated” date.
.png)