1. Why have we adopted this policy?

 

The personal information (hereinafter "information") you entrust to us is essential to our business relationship with you. We know how valuable it is, and we are committed to doing everything we can to protect it.

 

This privacy policy (the "Policy") describes our practices for protecting your information and privacy. Our goal is to be transparent with you. This Policy applies to the use and disclosure of any information collected, and to the manner in which the Clinique de Podiatrie Montarville (hereinafter the "Clinic", "we", "us", "our") collects such information.

 

This Privacy Policy, which should be read in conjunction with the website Terms of use, describes our practices regarding the collection, use, processing, disclosure and retention of the personal information of our patients, visitors and users.

 

By using our cliniquedepodiatriemontarville.com website (the "Website") or any of our services, you agree that we may collect, use, process, disclose and retain your personal information in accordance with the terms described herein. If you do not agree to comply with and be bound by this policy, you may not visit, access or use our website or services, or share your personal information with us.

 

1.1 Persons responsible for the protection of personal information

 

If you have any questions about this policy, you can write to our Privacy Officer at one of the following addresses:

 

Clinique de Podiatrie Montarville

1455 rue Roberval

Saint-Bruno-de-Montarville (Qc)

J3V 3P8

E-mail: rprp@cliniquedepodiatriemontarville.com

 

You can also contact us as indicated in section 12 below, if you have any questions.

 

2. What type of information we may collect and from whom

2.1. What information we may collect

 

Identifying information

• Your name

• Date of birth

• Contact information

• E-mail address

• Occupation

• Weight, height, shoe size

 

Other information 

• Reason for visiting the clinic

• Information on services rendered

• Transaction and payment information

• Language and communication preferences

• Information about people other than yourself (emergency contact, family doctor, name of your pharmacy, medical specialist, person who refers you to the clinic)

 

*If you provide us with information about another person, we will assume that you are authorized to do so and that you have obtained that person's consent to its collection, use or disclosure for the purposes set out in this policy.

 

Information about your health and lifestyle

• Current and past health status

• Surgeries

• Allergies

• Medication list

• Your physical activity habits

 

Information on digital interactions (websites, applications, text messaging)

• Device information (e.g. IP address, VPN, proxies, device type and operating system)

• Information about your approximate location that is generated using your IP address when you visit our website 

• Browsing preferences and habits, such as the pages you visit and use. For more details, please consult the website's Terms of use.

 

IMPORTANT: We limit the collection of your information to what is necessary to help us serve you better.

 

2.2. From whom we may collect your information

 

We may collect your information directly from you when you communicate or interact with us or when you update your preferences and settings. We may also collect your information indirectly from other sources. When required, we obtain your consent.  

• healthcare partners (pharmacist, family physician, physiotherapist, etc.)

• available registry (Dossier Santé Québec)

• content generated by the use of our website. For more details, please consult our Digital Data Policy.

 

3. How we use and share your information and with whom

​

3.1 How we use and disclose your information

 

We use and disclose your information to:

a. identify you, update your information

b. provide you with services

c. communicate with you using the contact information you have provided to us (by mail, e-mail, text message, phone calls)

d. conduct our day-to-day business 

e. prevent, detect and control fraud, as well as unauthorized or illegal activities (cyber threats)

f. conduct data analysis to improve our services, and design new services (see your right to opt-out in section 5.2).

g. manage risk and comply with laws and regulations

h. to use and disclose certain information where we are permitted to do so by law (see section 4).

i. for any other purpose permitted by law.

 

Please note that we do not use the information we collect to draw inferences or interpretations of any kind.

 

3.2. To whom we may disclose your information

 

It is sometimes necessary to share your information with others for legitimate purposes. This may include, for example, mandatory communication with a partner for the manufacture of foot orthotics, laboratory analysis or as required by law to protect your interests in the event of fraud. At all times, we are committed to limiting information to that which is strictly necessary, and to obtaining your consent when required.

 

We ensure the integrity, security and confidentiality of your information. Under no circumstances do we sell customer lists to third parties.

 

We may share your information with:

• a person acting on your behalf or at your request, such as a caregiver, guardian or parent

• a product insurer

• an insurer or agent acting on our behalf

• a merchant, a partner with whom we do business to offer optional products and services, a payment system, a payment card network, a clearing or settlement system

• third parties, if we need to disclose your information in connection with legal proceedings

• a regulatory or governmental authority or self-regulatory organization iii

• a person authorized to obtain it by law

• as described below, service providers we use to perform certain tasks such as the manufacture of foot orthotics, the collection and/or laboratory analysis of samples, the taking of medical images, etc.

 

3.3. Service providers

 

We select our service providers with great care. They fall into the following categories

• technology services (applications, data center, data storage and backup, hosting services, maintenance and support services)

• professional services

• banking services

 

All suppliers who have access to your information sign a confidentiality agreement with us and agree to use your information only for the purposes stated in the agreement and to provide them with the same level of protection we offer.

 

3.4 Complying with legislation, responding to legal requests, preventing harm and protecting our rights

We may disclose your personal information when we believe such disclosure is authorized, necessary or appropriate, including:

• to respond to requests from public and governmental authorities, including public and governmental authorities outside your country of residence 

• to protect our business

• to comply with legal proceedings

• to protect our rights, our privacy, our security, our property, yours or that of third parties

• to enable us to pursue available remedies or limit the damages we may suffer

• in accordance with applicable laws, including laws outside your country of residence.

 

3.5 Business transactions

 

We may share, transfer or disclose, strictly in accordance with this Policy, your personal information in the event of a sale, transfer or assignment, in whole or in part, of the Clinic or our assets (for example, as a result of a merger, consolidation, change of control, reorganization, bankruptcy, liquidation or any other business transaction, including in connection with the negotiation of such transactions). In such a case, we will inform you before your personal information is governed by another privacy policy.

 

4. When we need your consent

 

We use your information only with your consent or as permitted by law. We obtain your consent to collect, use and disclose your information:

• when we need to use your information for a purpose different from those for which you have already given your consent

• during certain specific interactions with us, such as the completion of online forms.

 

However, we do not obtain your consent for every interaction with you. For example, if you have a file at the clinic, we may consider that you consent to our contacting you for a courtesy call.

 

In addition, we do not obtain your consent in certain situations provided for by law, in order to :

• conforming to a court order or other binding request

• investigate a breach of a law

• prevent, stop or detect fraud

 

5. Your rights and how to exercise them

​

5.1. Right to accept or refuse to provide your information

 

Your information belongs to you. Subject to legal, commercial or contractual requirements, you have the right to withdraw your consent to the collection, use or disclosure of information. However, certain information is essential for us to provide you with certain products and services. If you refuse to provide it, it may be difficult, if not impossible, to establish or maintain a business relationship with you or even to offer you some of our products. For example, if you do not wish to provide information about your health condition (e.g. kidney problems, allergies, medication list), we will not be able to offer you the care for which it is essential.

 

As a person concerned, you may exercise the rights set out below by completing the form available here and sending it by e-mail or post to the attention of our Privacy Officer at the contact details provided in section 1.1 of this policy:

 

●   You have the right to be informed of the personal information we hold about you and to request a paper copy of the documents containing your personal information, subject to the exceptions provided by applicable law;

●   You have the right to have the personal information we hold about you rectified, amended and updated if it is incomplete, equivocal, out of date or inaccurate;

●   You have the right to withdraw or change your consent for the clinic to collect, use, disclose or retain your personal information at any time, subject to applicable legal and contractual restrictions.

●   You have the right to ask us to stop disseminating your personal information and to de-index any link attached to your name that provides access to this information if such dissemination contravenes the law or a court order;

●   You have the right to file a complaint with the Commission d'accès à l'information, subject to the conditions set out in the applicable law;

 

In order to process your request, you may be asked to provide appropriate identification or to identify yourself in some other way. We will process your request as quickly as possible.

 

We encourage all our patients to keep their personal information with us up to date. Decisions regarding the various services we can offer our patients may depend on the accuracy of this data. It is therefore essential to ensure that we have an accurate picture of your situation.

 

5.2. Right to refuse to allow us to use your information for certain purposes

 

You may refuse to allow us to use your personal information or withdraw your consent for the following purposes:

 

a) Collecting and using your digital information on our website

 

With your consent, we may collect your digital information (e.g. device and browsing data) using optional cookies or other similar technologies when you visit our website. This information allows us to measure and analyze traffic to improve your browsing experience. You may refuse the collection of this information by clicking on "Cookie preferences" at the bottom of our website. For more details, consult the website's Terms of use.

 

How to withdraw your consent

 

You may refuse the use of cookies on our website at any time (5.2 a)). To find out how to do this, please consult our website terms of use.

 

What you will continue to receive once you have withdrawn your consent

 

You will continue to receive:

• Regulatory notices that we are required by law to send to you.

 

5.3. Right to access your information

 

You may request access to the information we hold about you, except where restricted by law.

 

How to access your information

 

To consult your information, you must make a request in writing to the following address

 

Montarville Podiatry Clinic

Privacy Officer (RPRP)

1455 rue Roberval

Saint-Bruno-de-Montarville (Qc)

J3V 3P8

 

Email: rprp@cliniquedepodiatriemontarville.com

 

We will process your request within 30 days, or longer if required by law. We will inform you if the delay is longer than 30 days.

 

5.4. Right to have your information corrected

 

You can and must correct inaccurate information about yourself. In order to provide you with quality service, it is essential that your information be accurate and complete. To this end, we rely on you to help us maintain the quality of the information we hold by informing us of any changes. To make a request, please contact us by phone, e-mail or mail at the following coordinates:

 

Clinique de Podiatrie Montarville

1455 rue Roberval

Saint-Bruno-de- Montarville (Qc)

J3V 3P8

 

Tel: (450) 441-4333

E-mail: info@cliniquedepodiatriemontarville.com

 

6. How we keep your information secure

​

6.1. Time-limited retention

 

We retain your information, in physical or digital format, for as long as necessary to fulfill the purposes for which the information was collected, or as long as required or permitted by law. The purpose, nature and sensitivity of the information have been taken into account in determining retention periods.

 

The clinic is subject to numerous legal obligations regarding the retention of personal information. In general, to meet these obligations, information relating to your customer profile (such as your name, address, date of birth) will be retained for the duration of your relationship with us and for a period of seven years following the end of that relationship. In addition, we will retain your transactional information for seven years after completion. Certain exceptions may apply and require longer retention periods, for example in the case of disputes or claims. In such cases, your information may be retained for up to ten years. When your information is no longer required, we will endeavour to destroy it securely.

 

6.2. Places of storage

 

The clinic, its service providers and other third parties to whom your information is disclosed under this policy may operate outside Quebec and Canada. Your information may therefore be used and stored securely in other provinces and countries. In some cases, your information may be subject to the laws and access rights of authorities in foreign countries, including the United States.

 

6.3. Information security program

 

We make every effort to protect your information against loss, theft, unauthorized access, use or disclosure, and against any other breach of security. We have implemented a security program to keep pace with constantly evolving threats to information security. The measures adopted in our security program are :

• encrypted data

• protecting infrastructures by means of secure access to our premises and secure locations for our equipment, etc.

• limiting the people who have access to your information. This means that only employees who need to consult your information in the course of their work have access to it.

• manage passwords and set up firewalls.

 

You have a role to play in protecting your information. We ask you never to divulge your passwords, codes and personal identification numbers. Our employees do not have this information and will not ask you for it. Avoid transmitting information in any e-mail.

 

Despite the measures described above, we cannot guarantee the absolute security of your personal information. If you have reason to believe that your personal information is no longer secure, please contact our Privacy Officer immediately using the contact details set out in section 1.1 above.

 

7. What other terms and conditions accompany this policy

 

This policy is supplemented by the website terms of use, which explain how we use cookies and similar technologies when you visit our website. This policy does not diminish your rights under these regulations.

 

8. How we may change this policy

 

We reserve the right to modify this policy at any time in accordance with applicable law. If we make any changes, we will post the revised Privacy Policy and update the update date in the footer of the Privacy Policy. If you do not agree to the new terms of the Privacy Policy, please do not continue to use our website and services. If you choose to continue to use our website or services after the new version of our policy becomes effective, your use of our website and services will be governed by the new version of the policy.

 

9. Links to third-party websites

 

From time to time, we may include on our website references or links to websites, products or services provided by third parties ("Third Party Services"). These third-party services, which are not operated or controlled by the clinic, are governed by privacy policies that are entirely separate from and independent of our own. We therefore assume no responsibility for the content and activities of these sites. This policy applies only to the website and services we offer. This policy does not extend to third-party services. 

 

10. Limitation of liability

 

The clinic undertakes to take all reasonable steps to ensure a high level of confidentiality and security of personal information in accordance with technological standards appropriate to its sector of activity.

 

Notwithstanding the foregoing, you declare that you understand and acknowledge that no computer system offers absolute security and that there is always a degree of risk involved in transmitting personal information over the public network that is the Internet.

 

You agree that the clinic cannot be held responsible for any breach of confidentiality, hacking, virus, loss, theft, misuse or alteration of personal information transmitted or hosted on its systems or those of a third party. You also waive any claim in this regard, except in the case of gross negligence or wilful misconduct on the part of the clinic. Accordingly, you agree to indemnify and hold harmless the clinic and its officers, directors, affiliates and business partners from and against any and all damages of any kind, whether direct or indirect, incidental, special or consequential, arising out of or in connection with the use of your personal information.

 

In the event of a breach of confidentiality or security of your personal information that presents a high risk to your rights and liberty, such breach will be notified to you as soon as possible, and the clinic will take the necessary measures to preserve the confidentiality and security of your personal information.  

 

11. Individuals under the age of 14

 

In the course of our business, we collect and use personal information from individuals under the age of 14. If you are under 14 years of age, you must not provide us with your personal information without the consent of your parent or legal guardian. If you are a parent or legal guardian and become aware that your child has provided us with personal information without your consent, please contact us using the contact information provided in section 1.1 above to request that we delete that child's personal information from our systems.

 

12. How to contact us with a question or comment

 

To ask a question or send a comment, you can contact us at:

 

Montarville Podiatry Clinic

1455 Roberval Street

Saint-Bruno-de- Montarville (Qc)

J3V 3P8

 

E-mail: info@cliniquedepodiatriemontarville.com

 

September 22, 2023