Privacy Policy
We are committed to protecting your personal and health information in accordance with Ontario's PHIPA and federal PIPEDA. This policy explains what we collect, how we use and protect it, and your rights.
Overview
At DECA Health and Wellness, we value the privacy and security of our patients' personal and health information. This Privacy Policy explains how we collect, use, disclose and protect that information.
We handle your personal health information in accordance with Ontario's Personal Health Information Protection Act, 2004 (PHIPA) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA). By engaging our services, you consent to the practices described in this policy.
Information We Collect
We may collect the following types of personal and health information:
- Personal identification: name, address, phone number, email, date of birth and other contact details.
- Health information: medical history, diagnoses, treatment plans, assessment findings and other health-related data.
- Payment information: billing details, insurance information and payment history.
- Demographic information: age, gender and other relevant details where applicable.
We collect this information directly from you when you register as a patient, use our services, complete forms or questionnaires, or contact us by phone, email or our website.
How We Use Your Information
We use your information to:
- Provide appropriate treatment and care;
- Schedule and manage appointments and send reminders;
- Process payments, verify insurance and submit claims;
- Communicate with you about your care, health and appointments; and
- Comply with applicable Ontario health-care laws and professional obligations, including PHIPA, and respond to lawful requests.
Your Consent
We rely on your knowledgeable consent to collect, use and disclose your personal health information for the purpose of providing you with care. This includes sharing information, as needed, among the health-care providers directly involved in your treatment — your "circle of care."
You may withhold or withdraw your consent at any time, subject to legal and professional limits. Please note that withdrawing consent may affect our ability to provide certain services.
How We Protect Your Information
We are committed to safeguarding your information through:
- Encryption of sensitive data during transmission and storage;
- Access controls so only authorized staff, bound by confidentiality, can access records;
- Secure systems that are regularly updated to prevent unauthorized access; and
- Physical security for locations where patient records are stored.
Sharing & Disclosure of Your Information
We do not sell or rent your personal or health information. We may share it only in these circumstances:
- With other health-care providers in your circle of care (e.g., physicians, specialists, other clinicians) involved in your treatment;
- With insurers for billing, claims and coverage verification, with your consent;
- As required by law, such as in response to a court order, subpoena or legal obligation;
- With service providers (e.g., billing or IT support) who are contractually obligated to protect your information; and
- In emergencies, where necessary to protect your life or the health and safety of others.
Your Rights & Choices
Under PHIPA you have the right to:
- Access the personal health information we hold about you;
- Request corrections to information you believe is inaccurate or incomplete;
- Request restrictions on how your information is used or shared (which we will honour where possible);
- Withdraw consent, subject to legal and contractual limits; and
- File a complaint if you believe your privacy rights have been breached.
Data Retention
We retain your personal and health information for as long as necessary to fulfill the purposes described here and to meet our legal and professional obligations. Ontario's regulatory colleges require health records to be kept for a minimum period — generally at least 10 years after your last interaction, or, for a patient who was a minor, until 10 years after they turn 18. Records are securely destroyed once retention requirements have been met.
Website & Cookies
Our website may use basic cookies and analytics to understand how visitors use the site and to improve it. We do not collect sensitive health information through the website. Information you submit through our contact or appointment-request form is used only to respond to your inquiry and coordinate care.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and if the changes are significant we may notify you directly. We encourage you to review this policy periodically.
Contact — Privacy Officer
If you have questions, concerns or requests regarding this Privacy Policy or your personal information, please contact our Privacy Officer:
- DECA Health and Wellness
- 2600 Simcoe St N, Unit 2, Oshawa, ON
- Phone: 905-674-6477 — ask for the Privacy Officer
- Email: decahealthgroup@gmail.com