At MD Connected Ltd. (“MDC”), we are committed to protecting your privacy and safeguarding your personal information. The purpose of this Privacy Statement is to inform you about the types of Personal Information MDC (as follows, “we or “us”) collects, uses and discloses in connection with the MDC website (the MDC Platform”). It explains how we use and disclose that information, the choices you have regarding such use and disclosure, and how you may correct that information.
We show our commitment to your privacy, by complying with the laws and regulations under applicable privacy laws in Canada, and specifically the Personal Information Protection and Electronic Documents Act (Canada) and the Personal Health Information Protection Act (Ontario) and the regulations thereunder. From time to time, we may make changes to this Privacy Statement. The Privacy Statement is current as of the last revised” date which appears at the top of this page. We will treat Personal Information in a manner consistent with the Privacy Statement under which it was collected, unless we have your consent to treat it differently.
The following topics will be covered in this Privacy Statement:
Personal Information” is any information that is identifiable with you, as an individual. This information may include but is not limited to your name, contact information, information that relates to your physical or mental health, including information that consists of the health history of your family, information related to the providing of healthcare to you, including the identification of a person as a provider of healthcare to you, and MDC usernames and passwords. Personal Information, however, does not include your name, business title or business address and business telephone number in your capacity as an employee of an organization.
We will always collect your Personal Information by fair and lawful means. We may collect Personal Information from you directly and/or from third parties, where we (and/or those third parties) have obtained your consent, or as otherwise required or permitted by law.
We will keep the Personal Information that we collect either at the MDC offices or our service providers data centres in Canada.
We identify the purposes for which we use your Personal Information at the time we collect such information from you and obtain your consent, in any case, prior to such use. We generally use your Personal Information for the following purposes (the “Purposes”):
Generally, we will only make disclosures of Personal Information to such persons for which you provide your consent. Notwithstanding the foregoing:
We generally obtain your consent prior to collecting, and in any case, prior to using or disclosing your Personal Information for any purpose. You may provide your consent to us either orally, electronically or in writing. The form of consent that we seek, including whether it is express or implied, will largely depend on the sensitivity of the personal information and the reasonable expectations you might have in the circumstances. In limited circumstances, we may rely on a third party to obtain your consent to the sharing of your personal information with us. You may withdraw your consent by providing us notice. You may expressly instruct that your personal health information not be used or disclosed for healthcare purposes without your consent.
We ensure that all affiliates and other third parties that are engaged to perform services on our behalf and are provided with Personal Information are contractually required to observe the intent of this Privacy Statement and our privacy practices.
We will use, disclose or retain your Personal Information for as long as necessary to fulfill the purposes for which that Personal Information was collected and as permitted or required by law.
If you make a written request to review any Personal Information about you that we have collected, used or disclosed, we will provide you with any such Personal Information to the extent required by law. We will make such Personal Information available to you in a form that is generally understandable, and will explain any abbreviations or codes.
We will ensure that your Personal Information is kept as accurate, complete and up-to-date as possible. We will not routinely update your Personal Information, unless such a process is necessary. We expect you, from time to time, to supply us with written updates to your Personal Information, when required.
At any time, you can challenge the accuracy or completeness of your Personal Information in our records. If you successfully demonstrate that your Personal Information in our records is inaccurate or incomplete, we will amend the Personal Information as required. Where appropriate, we will transmit the amended information to third parties having access to your Personal Information.
We will attempt to respond to each of your written requests not later than 30 days after receipt of such requests. We will advise you in writing if we cannot meet your requests within this time limit. You have the right to make a complaint to the Privacy Commissioner of Canada and/or the Information and Privacy Commissioner of Ontario in respect of this time limit.
We will not charge any costs for you to access your Personal Information in our records or to access our privacy practices without first providing you with an estimate of the approximate costs, if any.
We may request that you provide sufficient identification to permit access to the existence, use or disclosure of your Personal Information. Any such identifying information shall be used only for this purpose.
We have implemented physical, organizational, contractual and technological security measures to protect your Personal Information from loss or theft, unauthorized access, disclosure, copying, use or modification. The only employees, who are granted access to your Personal Information, are those with a business need-to-know’ or whose duties reasonably require such information.
All comments, questions, concerns or complaints regarding your Personal Information, this Privacy Statement or our privacy practices, should be forwarded to our Privacy Officer at the following email address : firstname.lastname@example.org