Last Updated: March 2026
Profound Medical Corp. (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, request information, or interact with our products and services.
Information We Collect
Personal Information You Provide
You may voluntarily provide personal information, including:
- Name, email address, phone number, or mailing address
- Information submitted through contact forms, educational resources, or email sign‑ups
- Information provided when requesting product information or customer support
Health‑Related Information
You may choose to share limited health‑related information (for example, general condition interests or treatment questions). This information is:
- Provided voluntarily
- Used only for informational or support purposes
- Not used for diagnosis or treatment
Unless explicitly stated, this website does not collect protected health information (PHI) subject to HIPAA for clinical care purposes.
Automatically Collected Information
We may automatically collect certain technical information, including:
- IP address
- Browser and device type
- Pages visited and time spent on the site
- Cookies and similar tracking technologies
How We Use Your Information
We may use your information to:
- Respond to inquiries or requests
- Provide educational or product‑related information
- Improve website performance and user experience
- Send marketing or informational communications (where permitted by law)
- Comply with legal, regulatory, or safety requirements
HIPAA Notice (Health Information)
Some interactions with Profound Medical Corp. outside of this website (for example, through healthcare providers or clinical programs) may involve protected health information (PHI) regulated by the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
- Information submitted through this public website is generally not considered PHI under HIPAA.
- If you receive services or support subject to HIPAA, your health information will be handled in accordance with our Notice of Privacy Practices, which will be provided separately where applicable.
- We do not use or disclose PHI collected in HIPAA‑regulated contexts for marketing without appropriate authorization.
If you have questions about HIPAA‑regulated privacy practices, please contact us using the information at the end of this policy.
Cookies and Tracking Technologies
We use cookies and similar technologies to operate and secure our website, understand how visitors use our site, and improve content and functionality. For full details on the cookies we use, how we use them, and how you can manage your preferences, please see our Cookie Policy.
Sharing of Information
We do not sell your personal information.
We may share information:
- With trusted service providers who support website operations (e.g., hosting, analytics, email services)
- When required by law, regulation, or legal process
- To protect the rights, safety, or property of Profound Medical Corp. or others
All service providers are required to protect your information and use it only for authorized purposes.
Data Retention
We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the data; the potential risk of harm from unauthorized use or disclosure; the purposes for which we process the data; whether we can achieve those purposes through other means; and applicable legal, regulatory, and contractual requirements.
When personal information is no longer required, we will securely delete or anonymize it in accordance with applicable law.
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you may have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):
Your Rights
You may have the right to:
- Know what personal information we collect, use, and disclose
- Request access to or deletion of your personal information
- Correct inaccurate personal information
- Opt out of certain data sharing (if applicable)
- Not be discriminated against for exercising your privacy rights
Exercising Your Rights
You may submit a request by contacting us using the information below. We may need to verify your identity before fulfilling your request.
We do not sell or share personal information for cross‑context behavioral advertising as defined by California law.
Global Privacy Control (GPC)
We recognize and honor Global Privacy Control (GPC) signals as a valid opt-out request under California law. When we detect a GPC signal from your browser, we treat it as a request to opt out of the sale or sharing of your personal information. You do not need to take any additional action beyond enabling GPC in your browser or through a supported browser extension.
International Users (GDPR / UK GDPR)
If you are located outside the United States, including in the European Economic Area (EEA) or the United Kingdom, your information may be transferred to and processed in the United States or other countries where we or our service providers operate.
Legal Bases for Processing
We process personal information based on:
- Your consent
- Our legitimate interests (such as operating and improving our website)
- Compliance with legal obligations
Your Rights
Depending on your location, you may have the right to:
- Access your personal information
- Request correction or deletion
- Restrict or object to processing
- Withdraw consent at any time
- Request data portability
- Lodge a complaint with a data protection authority
To exercise these rights, please contact us using the details below.
Data Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect your information. While no system can be completely secure, we take appropriate steps to reduce risk.
Children’s Privacy
This website is not intended for children under 13 years of age. We do not knowingly collect personal information from children.
Note: In the European Economic Area and United Kingdom, the applicable age threshold is 16 years. If we learn that we have collected personal information from a child under the applicable age, we will take steps to delete that information promptly.
Third‑Party Websites
Our website may contain links to third‑party sites. We are not responsible for their privacy practices or content. Please review their privacy policies independently.
Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated “Last Updated” date.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:
Profound Medical Corp
[email protected]
2400 Skymark Avenue, Unit #6, Mississauga, ON L4W 5K5, Canada