Privacy and security with TELUS Health MyCareᵀᴹ

As of , Babylon Health Canada Inc. operates under the new name, . TELUS acquired Babylon Health Canada Inc in January 2021. This acquisition means that the TELUS Health MyCare service now falls under the robust

TELUS Privacy Management Program Framework

that applies more broadly to the TELUS family of companies.

We have also developed a new TELUS Health MyCare Privacy Commitment that describes the specifics of how we protect your privacy and handle data in the context of the TELUS Health MyCare service. The

TELUS Health MyCare Privacy Commitment

will become effective on .

: Babylon Health Partners is a global leading digital health provider. TELUS entered into a partnership with Babylon Health Partners in 2019 to bring Babylon’s innovative virtual care technology to Canada and supplement access to care for the millions of Canadians without a family doctor. Babylon Health Partners and TELUS Health created Babylon Health Canada to deliver the services in Canada, branded Babylon by TELUS Health.

: In January 2021, TELUS acquired Babylon Health Canada and continues to work closely with our software provider Babylon Health Partners Ltd. to bring innovative digital health tools to Canadians.

TELUS has taken over Babylon’s responsibility for protecting your personal information and respecting your privacy. There is no material change to the handling of your personal health information, but as your personal information will be handled in accordance with the TELUS Health MyCare Privacy Commitment as of July 5th, 2021, it is important that you read and understand the

TELUS Health MyCare Privacy Commitment

. Consultations with Healthcare Practitioners are available in British Columbia, Ontario, and Quebec.

TELUS Health MyCare has overall responsibility for protecting your Personal Health Information, including your Medical Record and other Personal Health Information in the provinces where the Services were offered, and we are directly accountable to you.

In Alberta, your healthcare providers, such as your physician, have overall responsibility for the privacy of your Medical Records and TELUS Health MyCare assists them with that responsibility. More precisely, in Alberta, TELUS Health MyCare collects, uses, and discloses Personal Health Information on behalf of healthcare providers who are ‘custodians’, as defined in the Alberta Health Information Act.

For all other Personal Information collected through the MyCare App, TELUS Health MyCare has overall responsibility across Canada.

TELUS has taken over Babylon’s responsibility for protecting your personal information and respecting your privacy but the service remains essentially the same. There is no material change to the handling of your personal health information, but as your personal information will be handled in accordance with the TELUS Health MyCare Privacy Commitment as of July 5th, 2021, it is important that you read and understand the

TELUS Health MyCare Privacy Commitment

.

We want you to understand how seriously we take your privacy and we have worked hard to provide you with a policy that makes our personal information handling practices transparent.

To access the TELUS Health MyCare App on or after , you will be required to review and agree to new Terms and Conditions and will be asked in the app if you understand the updated Privacy Commitment.

With TELUS’ acquisition of Babylon Health Canada, your medical records transferred from Babylon Partners Ltd. to what is now TELUS Health MyCare. Babylon Partners Ltd. is now our software service provider and in limited circumstances access by their technical support team may be permitted access for the purposes of maintaining, repairing, troubleshooting or upgrading the TELUS Health MyCare software.

If you choose to expressly consent for TELUS to disclose your Personal Information to Babylon Partners Limited for the purposes of improving the performance of the Babylon Partners Limited software technology, they will store and handle it in accordance with their privacy policy.

As of July 5, 2021, a new

TELUS Health MyCare Privacy Commitment

and the associated TELUS Privacy Code will govern your personal information. It is important that you read and understand the TELUS Health MyCare Privacy Commitment.

No. To be clear, no Information from your medical record is shared with the rest of TELUS. Your name, email address, and home address may be shared within the TELUS family of companies and matched to your existing TELUS customer profile (if applicable) to identify other services that you have with the TELUS family. This information may be used to:

You can opt out of receiving marketing messages from us at any time by following the unsubscribe instructions included in each of our marketing messages or by contacting us as set out below.

In most provinces, TELUS Health MyCare has overall responsibility for protecting the privacy of your Medical Records and other Personal Information and we are directly accountable to you.

Consultations with Healthcare Practitioners are available in British Columbia, Ontario and Quebec. TELUS Health MyCare has overall responsibility for protecting your Personal Health Information, including your Medical Record and other Personal Health Information in the provinces where the Services were offered, and we are directly accountable to you.

In Alberta, your healthcare providers, such as your physician, have overall responsibility for the privacy of your Medical Records and TELUS Health MyCare assists them with that responsibility. More precisely, in Alberta, TELUS Health MyCare collects, uses, and discloses Personal Health Information on behalf of healthcare providers who are ‘custodians’, as defined in the Alberta Health Information Act.

For all other Personal Information collected through the TELUS Health MyCare App, TELUS Health MyCare has overall responsibility across Canada.

As of July 5, 2021, a new

TELUS Health MyCare Privacy Commitment

and the associated TELUS Privacy Code will govern your personal information.

TELUS Health MyCare service also falls under the robust

TELUS Privacy Management Program Framework

that applies more broadly to the TELUS family of companies.

The

TELUS Health MyCare Privacy Commitment

, found here, contains the specifics about how we handle your personal information when you engage with the TELUS Health MyCare services and when you use our virtual consultation services. TELUS Health MyCare service falls under the robust

TELUS Privacy Management Program Framework

that applies more broadly to the TELUS family of companies.

We collect only the Personal Information required for us to establish and maintain a responsible healthcare and service relationship with you, to provide services, products, and functionalities of TELUS Health MyCare, to develop and enhance our products and services and to send you relevant information about products and services that may be of interest to you.‬

We collect Personal Information to set up an account for you on the TELUS Health MyCare App so that you can access and use the TELUS Health MyCare health-related services, including:

We also collect other information from you as you use the TELUS Health MyCare Services:

Your Personal Information is encrypted and password-protected in the app.

We understand that data security is a critical issue and we are committed to safeguarding Personal Health Information. We have implemented a comprehensive information security program that includes security controls, as well as, strong administrative, technical and physical safeguards in an effort to protect against unauthorized access, use, loss, modification and disclosure of Personal Health Information.

Our team members must complete privacy and security training before they have access to any Personal Information, and must complete annual privacy and security training for ongoing access to Personal Information.

TELUS Health MyCare ensures that the security policies, procedures and controls of its software provider, Babylon Partners Limited, meet industry and TELUS best practices and are regularly tested.

Please keep in mind that no internet or email transmission is ever fully secure or error free and no security system is impenetrable. We cannot fully guarantee the confidentiality of any information that you provide to us but we can assure you that we will use reasonable and appropriate security controls, reflective of the sensitive nature of Personal Health Information.

It is important for you to play an active role in the protection and safeguarding of your own Personal Information, especially when you are online.

Your Medical Record is stored in data centres in Canada. Your Medical Record will only be accessed from outside Canada in limited circumstances by our service provider’s technical support team, including maintaining, repairing, troubleshooting or upgrading the TELUS Health MyCare software In addition, if you consent to an audio recording of your healthcare consultation, your information may be temporarily stored by our vendor in the US while in transit to permanent storage in Canada.

Personal information collected to validate your identity when you first register will be temporarily stored in the US by our service provider to permit authentication of your identity.

We also use service providers who may access or store other Personal Information in Ireland, the EU, the United States or other jurisdictions.

For continuity of care purposes, we may share Personal Information among your TELUS Health MyCare healthcare practitioners and others who assist in the provision of healthcare to you.

We will not disclose your Personal Information for any purpose other than what has been outlined in our Privacy Commitment or as permitted under applicable law unless we obtain your express consent. We disclose only the limited amount of Personal Information necessary to meet these purposes.

We do not sell your Personal Information to any third parties.

We may share your Personal Information with our service providers who are contracted to perform services or functions on our behalf where they require the information to assist us in serving you. We use contractual controls to protect this information and limit its use to what is necessary for the service provider to perform the service.

No Information from your medical record is shared with the rest of TELUS but your name, email address, and home address may be shared within the TELUS family of companies and matched to your existing TELUS customer profile(s) (if applicable) to identify other services that you have with the TELUS family. This information may be used to:

No, we do not and will not sell your personal information.

Certain features of TELUS Health MyCare request your permission to use GPS technology to collect real-time information about the location of your device so that TELUS Health MyCare can connect you to a pharmacy or another healthcare service in your area.

This service is provided for your convenience only, and your permission for this use is voluntary. This location data is not retained or used for any other purpose.

To change your status with respect to receiving marketing messages or sharing information with Babylon Partners Ltd. in the TELUS Health MyCare app, select . Then select the gear icon in the top right corner and then click the tab. You can then adjust the toggles according to your preference. You can also opt out of receiving marketing messages from us at any time by following the unsubscribe instructions included in each of our marketing email messages.

You can turn off push notifications and the collection of real-time information about the location of your device at any time in your device settings.

No, consultations are no longer recorded. The consultations that have been recorded before December 6, 2021 are stored as part of your Medical Record. You can request access to these recordings by contacting us as set out under the ‘Questions, Complaints and Contact’ section of the TELUS Health MyCare Privacy Commitment, and we will provide the recording within 30 days.

No. While your medical record is not integrated with other TELUS EMRs after each consultation, you have the option to consent to sending your consultation notes to your regular family doctor. Your TELUS Health MyCare doctor will also confirm your consent during your appointment.

Medical Records must be retained in accordance with provincial retention guidelines. In general, for Medical Records, we will follow retention of 16 years from either the date of last entry or from the age of majority of the individual to whom the information relates, whichever is later. Audio recordings during healthcare consultations are retained as part of your Medical Record.

If you wish to access, update and/or correct inaccuracies to your medical records, please contact our Support Team by email at mycare@telus.com or at the address below:

TELUS Health MyCare c/o Privacy Officer 2280 – 510 West Georgia Street Vancouver, BC V6B 0M3

To delete your account through the app, please follow these steps:

Alternatively you can

contact us

for assistance.

It can take a few days to close your account. We’ll email you when the process is complete. At that time, you’ll lose access to all TELUS Health MyCare services, including appointments.

To prevent delays in care, please do not schedule any new appointments while we process your request.

We’ll store data that we have a legal reason to keep, such as medical records. Read

TELUS Health MyCare Privacy Commitment

for further details.

Please contact us at mycareprivacy@telus.com or the address below if:

mycare@telus.com c/o Privacy Officer 2280 – 510 West Georgia Street Vancouver, BC V6B 0M3