Privacy Policy
This policy explains what Riverstone Health & Movement collects through this website, why, and what you can do about it. It is written to meet our obligations under the Personal Health Information Protection Act (PHIPA) and PIPEDA.
Information we collect
- What you give us: your name, contact details, and anything you type into a form or booking request, including the reason for your visit.
- Booking details: if you book online, the appointment you selected and the information needed to create your patient record, including date of birth.
- How you found us: when you send a form or book online, we keep a note of what brought you to the site (the advertisement, search engine or website that sent you, and the page you arrived on) with your enquiry. Your browser holds it until then, only if you have allowed analytics or advertising cookies. It tells us which advertising works; it does not record what you read.
- Automatically: standard web server information such as IP address, browser, pages viewed, and the time of your visit.
- How the site is used: anonymous counts of the pages viewed, how far down a page you read, time on the page, and which buttons and links you click, so the website's design can be improved. No cookie is set, and no IP address or personal information is kept with it. It is not collected if you have declined analytics.
- Site search: when a search on this site finds nothing, we keep the words searched, without anything that looks like an email address or phone number, so we can add the pages people look for. They are not linked to you or to the rest of your visit, are not collected if you have declined analytics, and are deleted after 90 days.
Health information
Anything you tell us about your symptoms or health is personal health information. We collect it to provide care and to keep the clinical records regulated health professionals are required to keep. It is stored in our clinical records system, is accessible only to the people involved in your care and clinic administration, and is never sold.
How we use it
- To provide and coordinate your care
- To contact you about appointments, results, and follow-up
- To meet our record-keeping and reporting obligations
- To bill you or your insurer where that applies
Cookies and analytics
This site does not run advertising trackers or third-party analytics. Apart from the anonymous usage counts described above, which set no cookie, we use only the cookies required for the site to function.
Who we share it with
We share personal information only with the service providers who help us run the clinic (our clinical records system, our appointment and messaging platform, our payment processor), and only as far as they need it to do that work. They are bound to protect it. We do not sell personal information.
We may disclose information where the law requires it, or where there is a risk of serious harm.
How long we keep it
Clinical records are kept for the period our regulatory college requires, which is generally at least ten years after your last visit, or ten years past the age of majority for a minor. Enquiries that do not become appointments are kept for a shorter period.
Your choices
- Ask to see your record, or for a copy
- Ask us to correct something that is wrong
- Withdraw consent for non-essential contact at any time
- Ask a question or make a complaint about how we handled your information
Contact us by phone at (905) 555-0142 or in person at 240 Riverwood Lane.
Changes
If this policy changes, the current version will always be on this page.
This is a starting draft prepared for Riverstone Health & Movement. Please have it reviewed against how your clinic actually operates, and by a professional where appropriate before relying on it.