Privacy Policy

Health Care Medical Group (“HCMG,” “we,” “us,” “our”) is committed to protecting the privacy of personal information and personal health information that we collect, use, and disclose in the course of providing healthcare and assessment services. This Privacy Policy describes our information-handling practices and applies to information collected through our website at hcmg.ca, information collected during the provision of clinical services, and information collected through our forms, telephone, fax, and email channels. HCMG’s information practices comply with the Personal Health Information Protection Act, 2004 (Ontario) (“PHIPA”), the Personal Information Protection and Electronic Documents Act (“PIPEDA”), and the standards of conduct of the regulatory colleges to which our clinicians belong.

HCMG and its individual clinicians are health information custodians within the meaning of PHIPA. Our designated Privacy Officer / Health Information Contact can be reached at privacy@hcmg.ca.

We collect personal information (name, date of birth, address, telephone, email, insurance information) and personal health information (health history, symptoms, assessment findings, treatment plans, progress notes, imaging results, medication information). Through our website, we collect information you provide through online forms and standard analytics data (IP address, browser type, pages visited).

We use information for direct patient care, care coordination, funding and billing, quality improvement, education and training, legal and regulatory compliance, and research (only with express consent).

We disclose personal health information only as permitted or required by law: to other health information custodians involved in your care, to insurers and case managers with your authorization, to legal counsel where authorized, to regulatory colleges, to public health authorities, to law enforcement under judicial order, and in emergencies. We do not sell, trade, or rent personal information.

We rely on your consent to collect, use, and disclose your personal health information for healthcare purposes. Consent may be express or implied. You may withdraw consent at any time, subject to legal and clinical limitations.

We protect personal information using physical, technical, and administrative safeguards, including restricted physical access, encrypted electronic health records, role-based access controls, audit logging, confidentiality agreements, regular staff training, secure destruction at end of retention, and storage on Canadian servers.

Personal health information is retained for at least ten years after the last entry in the patient record (or, for minors, ten years after the patient turns eighteen), in accordance with regulatory college regulations and PHIPA.

You have the right to access your personal health information, request correction, withdraw consent, request a list of disclosures, make a complaint to HCMG, and make a complaint to the Information and Privacy Commissioner of Ontario. Contact our Privacy Officer at privacy@hcmg.ca.

Information and Privacy Commissioner of Ontario 2 Bloor Street East, Suite 1400 Toronto, Ontario M4W 1A8 1-800-387-0073 www.ipc.on.ca

We may update this Privacy Policy from time to time. The current version is always available at this URL.

privacy@hcmg.ca