PRIVACY POLICY This document describes BRAMPTON CLINICS general privacy policy and information practices. To review our privacy policy with respect to information received about you during your visits to our web site, BRAMPTON CLINICS To review our privacy policy with respect to the BRAMPTON CLINICS Patient Portal, please review this document as well as the BRAMPTON CLINICS Patient Portal Terms of Use Agreement. Personal Health Information Protection Act, 2004 The Personal Health Information Protection Act, 2004 (PHIPA) is Ontario’s health-specific privacy legislation. It regulates the manner in which personal health information is collected, used, and disclosed within the health care system. Personal health information is identifiable information about an individual which relates to: - Physical or mental health of the individual, including family health history; - Providing of health care to the individual, including the identification of a person as a provider of health care to the individual; - Payments or eligibility for health care in respect of the individual; - Donation by the individual of any body part or bodily substance or which is derived from the testing or examination of any such body part or bodily substance; - The individual’s health number; or - Identification of an individual’s substitute decision-maker. The Collection and Use of Personal Health Information We collect personal health information about you either from you directly or from a person acting on your behalf. The information that we collect may include your name, date of birth, address, personal and family health history, records of your visits BRAMPTON CLINICS and the care that you received. You may enter, modify, and correct your personal health information via the BRAMPTON CLINICS Patient Portal. You may also obtain access to or request a correction to your record of personal health information by contacting BRAMPTON CLINICS Staff. We may use your personal health information in order to deliver patient care, administrate health care services, receive payment for your treatment and care, research, compile statistics, fundraise, meet legal requirements, and fulfill other purposes permitted or required by law. Your personal health information may be disclosed to physicians, health care professionals, and staff directly involved in your care. We are also required to disclose patient information to several organizations, such as the Ministry of Health. The Safeguards We have instituted appropriate safeguards in our efforts to ensure that patients’ personal health information is protected. Our Privacy Policy governs the manner in which all our employees access and manage patient information. Our employees are required to sign a confidentiality agreement and our physicians are bound by the rules and guidelines instituted by the College of Physicians and Surgeons of Ontario with respect to privacy and confidentiality. Physical safeguards, such as facility access controls, workstation security, and mobile device security requirements, are in place in order to protect patient records. Our patient information system uses passwords and a firewall to protect the system from inappropriate accesses and from Internet users. The security capabilities of the patient information system are also upgraded on an ongoing basis. In addition, the BRAMPTON CLINICS Patient Portal account is password protected, and confidential patient information available through this portal is secured through encryption technologies. If your personal health information is stolen, lost, or accessed by unauthorized persons, we will notify you at the first reasonable opportunity. Questions and Concerns If you have any questions or concerns regarding our information and privacy protection practices, or if you feel that your privacy rights have been violated, please contact BRAMPTON CLINICS staff. If you feel your privacy rights under PHIPA have been violated, you may also submit a written complaint to the Information and Privacy Commissioner of Ontario at the following address: 2 Bloor Street East, Suite 1400 Toronto, ON M4W 1A8 Modification to Privacy Policy We reserve the right to change our Privacy Policy. A revised Privacy Policy will apply only to data collected subsequent to its effective date. Any revisions will be posted at least 10 days prior to its effective date.