Privacy and Personal Information Protection Policy
Introduction, Purpose, and Scope
- This policy explains how the collection, use, disclosure, and retention of personal information are carried out within the Centre de santé chiropratique Dégelis to ensure compliance with legal requirements relating to the protection of personal information.
Collection, Use, Disclosure, Retention, and Destruction of Personal Information
Collection
- Purposes of Collection. The Centre de santé chiropratique Dégelis collects and uses the personal information necessary to carry out its activities, including:
a. From its patients:
- The file opening date;
- The patient’s name at birth, address, telephone number, date of birth, and gender;
- A brief description of the reasons for each consultation;
- X-rays, if applicable, and the results of all other patient examinations performed or requested by the chiropractor;
- The diagnosis of the patient’s condition;
- A description of the professional services rendered and their date;
- Recommendations made to the patient;
- Notes, correspondence, and other documents relating to the professional services rendered to the patient;
- Financial information relating to the payment of fees.
b. From employees, suppliers, and business associates:
- First name;
- Last name;
- Professional title;
- Business telephone number;
- Cell phone number, if applicable (if provided by the individual);
- Business email address;
- Personal email address, if applicable (if provided by the individual);
- Business mailing address;
- Financial information relating to the payment of salaries or fees.
Centre de santé chiropratique Dégelis may collect any other personal information provided by an individual through the contact form on its website or through an email address from the clinic or chiropractor.
- Centre de santé chiropratique Dégelis uses GOrendezvous services to accept your payments. GOrendezvous collects, uses, stores, discloses, and protects your personal information, including your payment information, in accordance with the most recent version of its Privacy Policy. This personal information may include transaction data, information related to your identity, and information about your online activity. By making a payment, you consent to the collection, use, storage, and disclosure of your personal information by GOrendezvous. You also consent to the transfer of your personal information collected by GOrendezvous outside of Quebec, including to the United States or elsewhere in the world, in a manner consistent with applicable laws. It may also be disclosed in accordance with applicable laws. You have the right to request the destruction and rectification of your personal information collected by GOrendezvous in accordance with the terms of its privacy policy.
- Method and Source of Collection. Personal information is generally collected by the Centre de santé chiropratique Dégelis directly from the individuals concerned and with their consent. The Centre de santé chiropratique Dégelis may collect personal information without the knowledge or consent of the individual concerned in limited circumstances authorized by the Act Respecting the Protection of Personal Information in the Private Sector.
Communication
- General. The Centre de santé chiropratique Dégelis does not disclose any personal information it holds to a third party without the consent of the individual to whom the personal information relates unless:
a. The information concerns business contact information, the disclosure of which is reasonable in the course of its activities;
b. The disclosure of the information without notifying the individual concerned is required for the Centre de santé chiropratique Dégelis to comply with its legal obligations;
c. The transmission of information without notifying the person concerned is required to avoid serious harm to the person to whom the information relates.
- Communication to a Centre de santé chiropratique Dégelis provider. Centre de santé chiropratique Dégelis may not communicate personal information to a service provider unless the processing of personal information is governed by an appropriate contract approved by the person responsible for the protection of personal information.
- Disclosure outside Quebec. The Centre de santé chiropratique Dégelis does not generally disclose personal information outside Quebec. In the event that this is the case, and before disclosing personal information outside Quebec (including another Canadian province), the Centre de santé chiropratique Dégelis must ensure that the personal information disclosed will receive adequate protection.
Retention and Destruction
- Computerized personal information held by the Centre de santé chiropratique Dégelis is stored in a database protected by reasonable IT and organizational security measures.
- The Centre de santé chiropratique Dégelis retains the personal information it holds for a period of seven years after its last use unless a different retention period is provided for by law.
- After the retention period expires, personal information is destroyed unless computer limitations require its retention or unless it is transmitted to a person or organization that will use it in an anonymous form for study, research, or statistical purposes.
Security of Personal Information
- The Centre de santé chiropratique Dégelis takes reasonable security measures to protect the personal information under its control.
- Limited Access. Centre de santé chiropratique Dégelis staff members may only access the personal information they need to perform their duties.
- Physical Security Measures. Centre de santé chiropratique Dégelis staff take the necessary measures to protect physical documents containing personal information.
- Technological Security Measures. Centre de santé chiropratique Dégelis staff must comply with the following security measures:
a. Encrypt documents containing lists of personal information;
b. Use a password to access databases containing personal information; and
c. Change passwords regularly.
- Administrative Security Measures. The Centre de santé chiropratique Dégelis implements the following security measures:
a. Any person having access to personal information held by the Centre de santé chiropratique Dégelis must sign a confidentiality agreement;
b. Staff receive information security risk awareness training.
Access to and Rectification of Personal Information
- Personal information collected by the Centre de santé chiropratique Dégelis is accessible at its principal place of business. The individual to whom this information relates may access it upon request online at info@centrechirodegelis.com or by mail.
- The Centre de santé chiropratique Dégelis responds to requests from individuals wishing to access the personal information held by the Centre de santé chiropratique Dégelis by granting them access to this information, correcting it when it is inaccurate or incomplete, ensuring its portability where applicable, destroying it when its retention is no longer necessary, or de-indexing it.
- An individual to whom personal information is held by the Centre de santé chiropratique Dégelis may request that the Centre de santé chiropratique Dégelis:
a. Confirms the existence of the information and provide a copy to them or any person they authorize;
b. Rectify inaccurate, incomplete, or ambiguous information, or information collected, disclosed, or retained in a manner not authorized by this policy or by law;
c. Delete outdated or irrelevant information.
Governance
Privacy Officer
- Dr. Jean-Philippe Bérubé, chiropractor, is responsible for the protection of personal information at the Centre de santé chiropratique Dégelis . He can be contacted at info@centrechirodegelis.com or at the following postal address: 747 7th Street West, Dégelis G5T 1Y9 QC.
Roles and Responsibilities of Staff Members
- All employees of the Centre de santé chiropratique Dégelis are required to comply with this policy, as well as applicable laws, regulations, and contractual obligations when processing, using, or disclosing personal information held by the Centre de santé chiropratique Dégelis.
Complaints
- Any individual may file a complaint regarding the protection of personal information held by the Centre de santé chiropratique Dégelis by contacting the Privacy Officer at the email address or postal address mentioned in paragraph 19 of this policy.
- The Privacy Officer must respond to the complainant within 30 days of receiving a complaint.
Privacy Incidents
Privacy Incident Management Procedure
- In the event of a privacy incident, the Centre de santé chiropratique Dégelis undertakes to:
a. identify the cause of the incident;
b. remedy the incident;
c. reduce the risk of harm being caused; and
d. prevent future incidents of the same nature from occurring.
Privacy Incident Log
- The Privacy Officer maintains a privacy incident log.
Questions
- Any questions regarding this policy should be directed to the Privacy Officer of the Centre de santé chiropratique Dégelis at info@centrechirodegelis.com or at the following postal address: 747 7th Street West, Dégelis G5T 1Y9 QC.
Policy Date: October 12, 2023
Last Modified: May 3, 2025