Medcan (“Medcan”, “we”, “us”, “our”) values privacy and is committed to protecting the privacy of our clients’ personal information, including personal health information. This Privacy Notice tells you about the ways in which we collect, use, disclose and otherwise manage personal information.
The privacy practices described in this Privacy Notice will be followed by all healthcare providers and staff at Medcan.
“Personal information” means information about an identifiable individual and includes personal health information.
We may collect personal information from our clients directly, from their employers or from other third parties. For example, we may collect:
We may collect, use or disclose personal information as set out below and as otherwise required or permitted by law. Personal information may be collected, used and disclosed before, during and after your visit to Medcan.
In general, we may collect, use and disclose your personal information for the purposes of determining suitability for, planning and delivering health care services including digital health solutions provided by authorized third parties accessible through myMedcan. In the course of providing these health care services, your personal information may be shared with health information custodians involved in your care (e.g. another physician or health care practitioner, an allied health professional or member of your clinical care team, a public hospital, pharmacy, laboratory, or ambulance service), unless instructed otherwise by you.
We may also share your personal information for the purposes of contacting your family or a potential substitute decision maker.
We may collect, use and disclose your personal information for the purposes of facilitating and/or collecting payment for our services. Where applicable, certain personal information may be disclosed to your employer for the purposes of coordinating payment from them.
Medcan may conduct or participate in research and analysis in which case your personal information, including personal health information, may be analyzed in de-identified form. The results of this research and analysis will not be disclosed or otherwise published in a manner that could identify an individual. Any additional testing for research or analysis purposes that involves the collection, use or disclosure of information that could identify an individual will involve a separate informed consent process.
We may collect, use and disclose personal information for the purposes of risk management, security or otherwise to improve the quality of the Medcan services, including the evaluation and monitoring of those services. For example, we may record incoming and outgoing phone calls for training, documentation and quality assurance purposes. We may also conduct video recording for security purposes via the use of cameras located in public areas of our clinic such as reception and clinic entrance and exit locations.
We or our service providers may disclose your personal information where required or permitted by law. For example, we may provide your personal information in response to a search warrant or other legally valid inquiry or order. We may also disclose personal information for certain proceedings and to investigate or prevent actual or suspected loss or harm to persons or property.
We may transfer any information we have about you in connection with a proposed or completed merger or sale involving all or part of Medcan or as part of a corporate reorganization or other change in corporate control.
Your personal information will be maintained by Medcan in Canada or by our service providers in Canada or the United States. We use third parties to provide various services on our behalf. For example, we may use service providers to store our data, authorize and process payments, provide services, record telephone calls, process test results and send email communications. When we transfer personal information to service providers, we take reasonable steps to ensure that your personal information is protected from loss, theft or unauthorized access, use, modification and disclosure.
Medcan believes that securing your personal information is a very important part of our job. We have implemented reasonable administrative, technical and physical safeguards in an effort to protect against loss, theft or unauthorized access, use, copying, modification, disclosure and disposal of personal information in our custody and control.
You may be able to access some of your health record through myMedcan. You may also ask to see your health record or make a formal written request to see and/or obtain a copy of your record. We will endeavour to respond to a formal access request within 30 days. If necessary, we will provide written notice of the reason for any time extension and the length of the extension.
We may deny or restrict your access to your health record in very limited circumstances (e.g., if the information is subject to legal privilege, it is reasonable to believe that disclosure would result in a risk of serious bodily harm to you or another person, if a provincial or federal act prohibits disclosure).
If you believe your record to be inaccurate or incomplete, you may request that the record be corrected. We will make the correction if you demonstrate that the information is inaccurate or incomplete for the purposes for which the information is being used. We may not correct the record if it was not originally created at Medcan and we do not have sufficient knowledge, expertise or authority to correct it; or if the record consists of a professional opinion or observation made in good faith about you.
At your request, we will provide written notice to third parties who received the incorrect information about the correction, to the extent reasonably possible and if the correction could reasonably be expected to have an impact on your ongoing health care or benefits.
Medcan may revise its privacy practices and this Privacy Notice from time to time. We will post a copy of the current Privacy Notice on the Medcan website at medcan.com. In addition, you may request a copy of the Privacy Notice currently in effect at any time by contacting us.
We collect the IP (Internet protocol) addresses of all visitors to our websites (including medcan.com and www.mymedcan.ca) and other related information such as page requests, browser type, operating system and average time spent on our websites. We use this information to help us understand our website activity, and to monitor and improve our websites. Our websites use a technology called “cookies”. Cookies may let us know who you are, and may help us personalize your experience on our websites. You may set your Web browser to notify you when you receive a cookie or to not accept certain cookies. However, if you decide not to accept cookies from our websites, you may not be able to take advantage of all of the features of our websites. Our websites may also use a technology called “tracer tags” or “Web Beacons”. This technology allows us to understand which pages you visit on our websites. These tracer tags are used to help us optimize and tailor our websites for you and other future visitors to our websites.
If you wish more information, access to your records or you believe that your privacy rights have not been followed as required by law or as explained in this Privacy Notice, you may contact us at the address, email address or phone number below.
VP Legal, CPO
150 York Street, Suite 1500
Toronto, ON M5H 3S5
You may also make a complaint about our information and privacy practices to the Information and Privacy Commissioner at:
Information and Privacy Commissioner/Ontario
2 Bloor Street East, Suite 1400
Toronto, Ontario M4W 1A8
Tel: (416) 326-3333 Toll-free: 1-800-387-0073