Introduction
At CardioMetabolic Health Solutions, we are committed to protecting the privacy and confidentiality of our patients' personal health information. This Privacy Policy outlines how we collect, use, and safeguard your data in compliance with Canadian federal and provincial privacy laws (including PIPEDA and relevant health information acts).
Information We Collect
We collect personal information necessary to provide you with high-quality cardiometabolic care. This includes contact details (name, address, phone number), email addresses, government-issued health insurance numbers where applicable, and emergency contact information.
How We Use Your Information
Your information is used to schedule appointments, coordinate care among our multidisciplinary team, communicate health results, process payments, and ensure clinical safety. We may also use anonymized data for internal clinic quality improvement initiatives.
Medical Information and Imaging Data
As a cardiometabolic clinic, we store sensitive health data including medical history, lab results, and diagnostic imaging (such as optional MRI body scans). This data is stored in secure, encrypted medical record systems and is only accessible by authorized clinical staff involved in your care.
InBody and Vital Sign Data
We track body composition via InBody analytics and monitor cardiometabolic vitals. This progress data is a core part of your clinical file and is used to tailor your personalized coaching and pharmacological strategies.
Payment and Billing Information
For elective or privately funded services, we collect necessary billing information. Payment data is processed through PCI-compliant providers. We do not store full credit card numbers in our internal clinical systems.
How We Protect Your Information
We employ multi-layered security measures including encryption, firewalls, and strict access controls. All electronic records are backed up regularly, and paper records (if any) are kept in secured, lockable cabinets.
Sharing Your Information
We do not sell your personal information. We may share your data with your primary care physician or other specialists with your explicit consent or where required by law. Third-party vendors (e.g., EMR providers) are contractually bound to maintain strict privacy standards.
Your Rights and Choices
You have the right to access your health records, request corrections to inaccurate information, and withdraw consent for certain data uses. Please note that withdrawing consent may affect our ability to provide clinical care.
Contact Us
If you have questions about our privacy practices or wish to exercise your rights, please contact our Privacy Officer at info@thrivecardiometabolichealth.com or call +1 (403) 966-5118.