CROSS LINK CARE LTD.
Website Privacy Policy
Last updated: November 9, 2026
1. Who we are and how to contact us
Cross Link Care Ltd. (“CLC,” “we,” “our”) is a British Columbia company offering non-clinical medical-provider navigation and administrative coordination for people exploring care in Mexico. This policy explains how we collect, use, disclose, retain and protect personal information. Privacy Officer: Cross Link Care Ltd., Delta, British Columbia, Canada. Email: info@crosslinkcare.ca. Website: crosslinkcare.ca.
2. Information we collect
For a free consultation request, we collect first and last name, email, optional phone number, preferred contact method and general area of interest. During subsequent communications, we may receive details you choose to share. For contracted clients, we may collect administrative information such as provider preferences, appointment details, correspondence, service agreements and payment records. Please do not enter diagnoses, test results, medical images or medical records into our public consultation form.
3. Why we use information
We use personal information to respond to requests; arrange consultations; research independent providers using non-identifying information where practicable; present preliminary provider and price options; deliver agreed administrative coordination; maintain records; address requests or complaints; protect our website and accounts; and comply with law. We do not use consultation requests as permission to send promotional messages.
4. Medical information and independent providers
CLC does not diagnose, prescribe, assess medical suitability or guarantee treatment or pricing. Patients ordinarily submit clinical records directly to the independent physician or hospital using the provider’s secure channel. If CLC must receive or disclose identifiable health information, we will first explain the purpose, categories of information and intended recipients, obtain appropriate specific authorization, and arrange a suitable secure transfer method. Initial contact consent does not authorize medical-record sharing.
5. Consent and your choices
We explain our purposes when collecting information and obtain consent appropriate to the sensitivity and circumstances, unless collection, use or disclosure is otherwise permitted by law. You may withdraw consent for future use or disclosure, subject to applicable legal or contractual restrictions and reasonable notice. We will explain the consequences if withdrawal prevents a requested service.
6. Service providers and international disclosures
Our website and form submissions are handled through Squarespace, and email notifications and communications through Google Workspace. Information may be stored or processed by these providers or their subprocessors outside Canada and may be subject to laws in those locations. If authorized and necessary, we may share limited information with independent physicians or hospitals in Mexico. Those providers determine their own clinical and privacy practices. We do not sell personal information.
7. Cookies and website activity
Our site uses essential technologies for operation, security and form delivery, including anti-spam protections. We have enabled a cookie banner with Accept all, Decline all and Manage cookies options and restricted non-essential cookies pending visitors’ choices. Visitors can adjust preferences using the Cookie Preferences control. Squarespace Activity Log is turned off. Other necessary technical logs or provider-side processing may still occur. If site integrations change, we will update this notice and applicable choices.
8. Security
We restrict administrative access to authorized personnel and use two-factor authentication for Squarespace and Google Workspace accounts. We limit information collected through the public form and do not request medical files there. We take reasonable steps to protect information, but no internet transmission or storage system can be guaranteed completely secure. Contact us before sending sensitive medical information so we can agree on an appropriate channel.
9. Retention and disposal
For free-consultation inquiries that do not become clients, our standard maximum retention period is 12 months after the last substantive contact, unless continued retention is required or reasonably necessary for legal or business purposes. Where personal information was used to make a decision directly affecting an individual, applicable BC law requires retaining that information for at least one year after the decision. We review relevant Squarespace submissions and email copies for deletion or anonymization; service-provider backup deletion may follow provider cycles. Client contracts, payment records and any separately authorized medical information follow their applicable legal and operational retention requirements. We securely dispose of information when it is no longer needed.
10. Access, correction and complaints
To request access to, or correction of, personal information under our control, or to raise a privacy concern, contact the Privacy Officer at info@crosslinkcare.ca. We may verify identity before disclosing information. We will respond in accordance with applicable legal requirements and explain any lawful limits. You may contact the Office of the Information and Privacy Commissioner for British Columbia at oipc.bc.ca.
11. Updates
We may update this policy to reflect changes in our services, practices or applicable law. We will post the current version with its last-updated date and obtain additional consent where required for new purposes.