Privacy Policy
How we collect, use, and protect your personal health information.
Introduction
We Care Rehab Clinic ("we," "us," or "our") is committed to protecting the privacy and confidentiality of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the Personal Health Information Protection Act (PHIPA) and the Personal Information Protection and Electronic Documents Act (PIPEDA).
Information We Collect
We collect the following types of personal information:
- Personal Identification: Name, date of birth, address, phone number, and email address.
- Health Information: Medical history, clinical assessment findings, diagnosis, treatment notes, and progress reports.
- Insurance Information: Extended health benefits, auto insurance, and WSIB claim details for direct billing.
- Appointment Records: Scheduling data, attendance history, and preferred communication method.
How We Use Your Information
- To provide, manage, and document your physiotherapy, chiropractic, and massage therapy treatments.
- To submit insurance claims and process direct billing on your behalf.
- To communicate appointment reminders, cancellations, and follow-up care instructions.
- To comply with regulatory reporting requirements of our professional colleges.
- To improve clinic operations, quality of care, and patient experience.
Consent
We obtain your informed consent before collecting, using, or disclosing your personal health information. You have the right to withdraw your consent at any time, subject to legal or contractual restrictions. Withdrawal of consent may limit our ability to provide certain services.
Disclosure of Information
We will not disclose your personal health information without your consent, except as permitted or required by law, including:
- To other regulated health professionals involved in your care (with your consent).
- To your insurance company for the purpose of processing and paying your claims.
- To comply with court orders, subpoenas, or legal proceedings.
- In emergency situations where disclosure is necessary to prevent harm.
Data Security
We implement appropriate physical, technical, and administrative safeguards to protect your personal information, including secure electronic medical records (EMR), encrypted communications, locked storage for paper files, and restricted access controls for staff.
Retention
We retain your personal health information for a minimum of 10 years from the date of your last visit, or as required by the applicable regulatory body for each health profession. After the retention period, records are securely destroyed.
Your Rights
- You may request access to your personal health information at any time.
- You may request corrections to your records if you believe they are inaccurate or incomplete.
- You may file a complaint with the Information and Privacy Commissioner of Ontario if you believe your privacy rights have been violated.
Website Analytics
Our website uses Google Analytics and Google Tag Manager to collect aggregated, anonymized usage data (pages visited, time on site, traffic sources). This data does not contain personal health information and is used solely to improve our website and marketing effectiveness.
Contact Our Privacy Officer
This policy is reviewed and updated annually. Last updated: 2026.