Privacy Policy

Existing privacy policy, saved review copy

The owner requested reuse of the currently published Privacy Policy. Its policy text and original dates are reproduced below for this private rebuild. This save does not publish a replacement or independently verify the operational safeguards described in that policy.

How We Fulfill These Legal Obligations

• Administrative Safeguards: Appointing a Privacy Officer, training staff, enforcing confidentiality, and conducting privacy audits.
• Technical Safeguards: Encryption, secure servers, password protection, and access logs.
• Physical Safeguards: Locked filing systems, access-controlled environments, and secure shredding of documents.

a. Personal Information

When you contact us, book an appointment, or sign up for communications, we may collect:

• Name
• Email address
• Phone number
• Service preferences
• Medical history or health-related information relevant to treatment

b. Automatically Collected Information

Our website may collect non-identifiable data such as:

• IP address
• Browser and device details
• Pages visited
• Date and time of access
• Referring websites
• General geographic location

With Your Consent

We will collect, use, and disclose your PHI only with your explicit written or verbal consent for:

• Providing you with healthcare services
• Coordinating care with other providers
• Billing or payments (if applicable)
• Administrative healthcare operations
• Communicating with you about appointments or services

Permitted Disclosures Without Consent (PIPEDA-Compliant)

We may disclose your PHI without consent in the following specific circumstances:

• Medical Emergencies: If you are in a medical emergency and unable to consent, we may share essential PHI with emergency personnel to ensure you receive appropriate care.
• Imminent Threats: If there is a serious, immediate risk of harm to you or others, we may disclose PHI to law enforcement or health professionals to prevent or reduce the threat.
• Legal Requirements: We may disclose PHI if required by law (e.g., court orders, subpoenas, or child protection legislation). We will attempt to notify you unless prohibited by law.
• Regulatory and Audit Purposes: Information may be disclosed to regulatory bodies or auditors for inspections or investigations.

We always follow the “minimum necessary” standard when disclosing your PHI.

1. Right to Access and Copy

• You may request access to the PHI we hold.
• To exercise: Send a written request to our Privacy Officer.
• Timeline: We will respond within 30 days.
• Fees: A reasonable copying fee may apply.

2. Right to Request Correction

• You may request corrections to inaccurate or incomplete PHI.
• To exercise: Submit a written request detailing the correction.
• If we disagree, we will annotate the record with your request.

3. Right to Withdraw Consent

• You may withdraw consent for future use or disclosure of your PHI.
• To exercise: Submit a written notice to the Privacy Officer.
• Limitations: This may affect the provision of ongoing services.

4. Right to Information

You have the right to:

• Know how your information is used
• Request an accounting of non-consensual disclosures
• Understand your privacy rights and our safeguards

5. Right to Complain