Privacy policy

Vetta helps people find verified health professionals, and helps professionals find new clients. Some of what people tell us, like the kind of help they're looking for, is sensitive. So we collect as little as we can, and this policy explains all of it.

Who we are

Vetta is a brand of The Bomb Enterprises Inc., and in this policy "Vetta", "we" and "us" mean that company. We're responsible for the personal information described here, and our privacy officer makes sure we follow this policy. You can reach them at privacy@onvetta.com.

This policy covers onvetta.com, the Vetta apps and the emails we send. It follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). It doesn't cover what professionals do with information you give them directly, for example at an appointment. They're responsible for that under the laws and professional rules that apply to them.

What we collect

What we collect depends on how you use Vetta.

If you join the waitlist

• Your email address.
• Your city and province or state, and Google's ID for the place you picked.
• What you're looking for, if you tell us: therapy, a dentist, a physiotherapist, a registered massage therapist (RMT), or "not sure yet".
• If you're a professional, your profession.
• Which of our forms you used, when you agreed to hear from us, and when you unsubscribed, if you do.

If you joined our earlier waitlist for professionals, we also hold the type of work and the city you gave us, and when you joined.

If you nominate a professional

• Your name and email address. We delete them 90 days after you nominate.
• The professional's name, profession and city, and their email address or website.

We email the professional once to invite them to Vetta. That email names you, as Canada's anti-spam law requires for a referral. Nominations are never shown publicly.

If you apply as a professional

• Your name, email address and mobile number.
• Your profession, designation and registration number.
• Your practice: solo or clinic, its name, website and address, whether you see clients in person, virtually or both, your languages, whether you're accepting new clients, how many new clients you can take a month, and your booking link.
• Your headshot and bio.
• Where your clients come from today, and how you heard about Vetta.
• The consents you gave, and when.
• Our review: what we found on your college's public register (the register's web address, what it showed, when we checked and which of our reviewers checked), our decision, and our notes.

If a clinic applies, we also collect the clinic's name, website, phone number and address, and the name, email address and phone number of the person applying for it. For each practitioner it adds, the clinic gives us their name, email address, profession, designation and registration number. If your clinic applied for you, that's where we got your details.

If you have a Vetta account

• Your name and email address, and a password if you use one. We store passwords only in a scrambled form that can't be turned back into the password.
• If you sign in with Google or Apple, what they share with us. See Google user data and Sign in with Apple.
• Your sign-in sessions, with the IP address and the device or browser each one came from.
• If you're looking for a professional: the professionals you pass on, the requests you send and the answers you include with them, your fits, your messages, your notifications and any reports you make. The app keeps the professionals you save, view or block on your device. When you open them, the app asks our servers for their profiles, but we don't store your lists.
• If you're a professional: your profile, the licence documents you upload, the requests you receive, and how you use Vetta, like how quickly you respond to requests and how often you accept them.
• If you turn on notifications in the iOS or Android app, a code that lets us send them to your device.

When you email us

We keep your message and our reply.

Technical information

• Your IP address and details about your device and browser. We use them to keep Vetta secure, to limit abuse and to check that forms are sent by people, not bots (Cloudflare Turnstile).
• Usage statistics we collect ourselves, like how often a feature is used. They never include your name or email address.
• Google Analytics, only if you accept analytics cookies. See our cookie policy.

How we use it

• To run Vetta: create and protect your account, show professionals' profiles, deliver your requests and messages, and send the emails and notifications that go with them.
• To check professionals on their college's public register before their profiles go live, every year after that, and when we get a report about them.
• To set up an approved professional's profile from their application, for them to review.
• To email waitlist members when Vetta opens near them, including early access before the public launch.
• To invite a professional someone nominated, once, and to let the person who nominated them know if they join.
• To count, without names, how many people are waiting and how many professionals have applied in each city. We show these counts publicly only when they're 5 or more.
• To keep Vetta safe: prevent spam, fraud and abuse, look into reports, and enforce our terms.
• To understand how Vetta is used, and improve it.
• To meet our legal obligations.

We don't use your information for anything else unless we tell you first and, where the law requires, ask for your consent.

What you're looking for is sensitive

Telling us you're looking for a therapist, for example, can say something about your health. We treat it as sensitive:

• We use it only to tell you when Vetta opens for that need near you, to show you relevant professionals, and to count demand without names.
• We never send it, or a professional's profession, to advertising platforms. There are no advertising tags on the pages people use to look for a professional.
• Google Analytics never receives it, and our own usage statistics never record it with your name or email address.
• Phone notifications are worded generally, like "New message", so your lock screen doesn't reveal it.

Who can see your information

• Professionals you contact. When you send a request, the professional sees the answers you included with it. For health professions, they see your name and profile picture only after they accept. Then you can message each other.
• Everyone, if you're a professional with a live profile. Your profile is public on Vetta, and search engines can show it: your name, designation, photo, profession, registration number, practice area, bio, languages, services and prices, and whether you're accepting new clients.
• Our team. Only the people who need it to run Vetta, like the reviewers who check applications, can see your information. We look at messages only when one is reported to us, when we need to look into a safety or security problem, or when the law requires it.

We never show a waitlist signup or a nomination publicly.

Who we share it with

We don't sell personal information. We share it only:

• With the service providers below, who handle it for us only to provide their service to us.
• With the professionals and clients you choose to contact, as described above.
• When the law requires it, for example to answer a court order, or when we need to protect someone's safety.
• If Vetta's business moves to another company, for example in a sale or reorganization. That company would have to protect your information as this policy does, and we'd tell you.
• With your consent.

Service providers and where your information is stored

Because of this, your information is stored and processed outside Canada, including in the United States, where courts, law enforcement and national security authorities may be able to get it under the laws there.

When you type a city or address into one of our forms, our server sends what you type to Google Places to suggest matches. Google doesn't get your name or email address with it.

We'll keep this list up to date.

Google user data

If you choose Sign in with Google, Google shares your name, email address and profile picture with us. That's Google's basic profile information, from the openid, email and profile permissions. We don't ask for anything else in your Google account.

• How we use it. Only to create your Vetta account, sign you in, and show your name and profile picture in Vetta, for example to a professional you're in a conversation with.
• How we store it. With the rest of your account, using the providers above, until you delete your account. Google also gives us sign-in tokens. We store them encrypted with your account. They give access to nothing beyond your basic profile, and they're deleted with your account.
• How we share it. We don't sell it and don't use it for advertising. We don't transfer it to anyone except service providers that help us run Vetta, to comply with the law, or with your consent.

Vetta's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

To remove Vetta's access, go to myaccount.google.com/permissions. That stops Sign in with Google for Vetta, but it doesn't delete your Vetta account. To delete your account and what Google shared with us, see Delete your account.

Sign in with Apple

If you choose Sign in with Apple, Apple shares your email address and, the first time you sign in, the name you choose to share. If you pick Hide My Email, Apple gives us a private relay address that forwards our emails to your inbox, so we never see your real address. We use what Apple shares only to create your account, sign you in and show your name in Vetta. You can stop using Sign in with Apple for Vetta in your Apple Account settings. That doesn't delete your Vetta account.

Cookies and analytics

We use a sign-in cookie and a few settings stored in your browser. Google Analytics runs only if you accept analytics cookies, and you can change your mind at any time. We don't use advertising cookies. Our cookie policy lists every one.

Email from us

• Emails about your account or something you did, like an application decision. You'll get these while you use Vetta.
• List emails, like waitlist updates, the invitation to a nominated professional, or news for professionals who asked for it. We send these only with your consent or as Canada's anti-spam law (CASL) allows, and each one has an unsubscribe link that works in one click.

When you unsubscribe, your email address goes on our do-not-email list, so we never send you list emails again by mistake.

How long we keep it

Information we delete can stay in our database backups for up to 30 days before it's gone for good.

Your choices and rights

You can:

• Ask for a copy of the personal information we hold about you. If you have an account, you can also download it yourself: in the Vetta app, open Your account and choose Export my data.
• Ask us to correct anything that's wrong or out of date.
• Withdraw your consent, for example by unsubscribing from a list email. Some things need certain information (we can't keep your account without an email address, for example), and we'll tell you what withdrawing would mean.
• Ask us to delete your information. You can delete your account yourself: see Delete your account.

To make a request, email privacy@onvetta.com from the email address you use with Vetta. We may ask you to confirm it's you. It's free, and we'll answer within 30 days. If we need longer, as the law sometimes allows, we'll tell you why.

If you have a concern, please contact us first so we can try to fix it. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Security

• Everything you send to Vetta travels over encrypted connections.
• Only the people who need information to do their work can see it.
• The licence documents professionals upload are private. Only our reviewers can open them.
• Passwords are stored only in a scrambled form.

No system is perfectly secure. If a breach of your information creates a real risk of significant harm to you, we'll tell you, and we'll report it to the Office of the Privacy Commissioner of Canada, as the law requires.

Children

Vetta is for adults. You must be 18 or older to join the waitlist, nominate a professional, apply or have an account. Parents and guardians can use Vetta to look for help for their children. If we learn we have information from someone under 18, we'll delete it.

Changes to this policy

We'll update this policy when what we do changes, and change the date at the top. If a change affects how we use information we already have, we'll tell you by email or in Vetta before it takes effect, and ask for your consent where the law requires it.

Contact us

Questions, requests and complaints about privacy go to our privacy officer at privacy@onvetta.com.

See also our Terms of use, Terms for professionals and Cookie policy.