Notice of Privacy Practices

Notice of Privacy Practices — CADMEN Clinic

THIS NOTICE DESCRIBES HOW PERSONAL HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices (the "Notice") describes how CADMEN Clinic ("we," "us," or "our") may collect, use and disclose your personal health information to provide treatment, obtain payment, and carry out our clinic operations, and for other purposes that are permitted or required by law. As a health information custodian, CADMEN Clinic is committed to protecting your privacy in accordance with Ontario's Personal Health Information Protection Act, 2004 ("PHIPA") and, where applicable, the federal Personal Information Protection and Electronic Documents Act ("PIPEDA"). "Personal health information" or "PHI" is identifying information about you, including demographic information, that relates to your past, present or future physical or mental health or condition, the health care provided to you, or payment for your care. This Notice also describes your rights to access and control your personal health information.

USES AND DISCLOSURES OF PERSONAL HEALTH INFORMATION:

Your personal health information may be used and disclosed by our health care providers, our staff, and others outside of our clinic who are involved in your care and treatment for the purpose of providing health care services to you, to support our clinic operations, to obtain payment for your care, and for any other use authorized or required by law.

TREATMENT:

We will use and disclose your personal health information to provide, coordinate, or manage your health care and any related services. This includes coordinating or managing your care with a third party. For example, your personal health information may be provided to a health care provider to whom you have been referred to ensure the necessary information is available to assess or treat you.

PAYMENT:

Your personal health information may be used to bill or obtain payment for your health care services. This may include providing receipts for your treatments and, where you direct us, submitting information to a health spending account, insurer, or financing provider in order to process a claim or payment on your behalf.

CLINIC OPERATIONS:

We may use or disclose, as needed, your personal health information in order to support the day-to-day operations of our clinic. These activities include, but are not limited to, improving the quality of care, providing information about treatment options or other health-related services, scheduling and sending reminders, developing and maintaining our systems, obtaining professional advice, and conducting audits and compliance activities.

USES AND DISCLOSURES THAT DO NOT REQUIRE YOUR CONSENT:

PHIPA permits or requires us to use or disclose your personal health information in certain situations without your consent. These situations include, among others: as required or permitted by law; for the purpose of obtaining payment for care; to a regulatory College for the purpose of its functions; for public health purposes; where we believe there is a significant risk of serious bodily harm to a person or group; to a successor health information custodian; for certain research that meets the requirements of PHIPA; and to comply with a summons, order, or legal proceeding. We will limit any such use or disclosure to the minimum information reasonably necessary.

USES AND DISCLOSURES THAT REQUIRE YOUR CONSENT:

Other uses and disclosures will be made only with your consent. We rely on your implied consent to use and disclose your personal health information within your "circle of care" for the purpose of providing you with treatment. Uses and disclosures outside your circle of care — for example, for marketing — require your express consent. We will not sell your personal health information. If you provide us with consent for a particular use or disclosure, you may withdraw that consent at any time, in writing, except to the extent we have already acted in reliance on it.

YOUR RIGHTS WITH RESPECT TO YOUR PERSONAL HEALTH INFORMATION:

You have the right to request access to, and a copy of, your personal health information in our records. You have the right to request a correction of your personal health information if you believe it is inaccurate or incomplete; if we deny your request, you have the right to add a statement of disagreement to your record. You have the right to withdraw or withhold your consent to certain uses or disclosures of your personal health information, subject to legal and clinical limits, and to ask us to apply such a restriction (sometimes called a "lock-box"). You have the right to ask how your information has been used or disclosed, and to receive a copy of this Notice. We will respond to written requests within the time required by PHIPA. We will notify you at the first reasonable opportunity if your personal health information is lost, stolen, or accessed by an unauthorized person.

REVISIONS TO THIS NOTICE:

We reserve the right to revise this Notice and to make the revised Notice effective for personal health information we already have about you as well as any information we receive in the future. You are entitled to a copy of the Notice currently in effect. Any significant changes to this Notice will be posted on our website.

COMPLAINTS:

Complaints about this Notice or how we handle your personal health information should be directed to our Privacy Officer at info@cadmenclinic.ca or (416) 551-1137. You also have the right to make a complaint to the Information and Privacy Commissioner of Ontario, who oversees compliance with PHIPA. We will not retaliate against you for filing a complaint. We must follow the duties and privacy practices described in this Notice. If you have any questions about this Notice, please contact us at (416) 551-1137 and ask to speak with our Privacy Officer.