The purpose of this study is to evaluate the privacy practices of online pharmacy websites in Ontario, Canada, focusing on data sharing with third parties, privacy policies, and the effectiveness of consent mechanisms. To achieve this, we conducted a comprehensive analysis using both automatic and manual network traffic analysis methods. We analyzed the traffic flow of 109 pharmacy websites, assessing the presence of third-party services, the transmission of data to third parties, and the availability and clarity of privacy policies and consent forms. Our study indicates that a significant number of pharmacy websites in Ontario share sensitive health information with third-party entities, such as Google Analytics and Facebook, even without explicit user consent. Additionally, many of these websites lack comprehensive privacy policies and effective consent mechanisms. We aim to create awareness of the limitations of third-party data sharing, the adoption of clearer and more accessible privacy policies, and robust consent mechanisms crucial for protecting the privacy of user data.