Privacy and Personal Information Protection Policy
Clinique Neuro-Outaouais (CNO)
NOTE: Please read this privacy policy in its entirety before using our website. By browsing the CNO website or using our services, you acknowledge that you have read and understood this policy and consent to the processing of your data in accordance with it.
1. Policy Objectives
Respect for privacy is essential to CNO. We are committed to protecting personal information in accordance with current laws (Loi 25 in Quebec and PIPEDA at the federal level). This policy aims to inform users of the reasons and means by which CNO collects and uses their information, using clear language to ensure informed consent.
2. Effective Date
This Policy applies as of September 1, 2023.
3. Procedures for Obtaining Consent
We obtain consent prior to any collection of personal information. This consent may be explicit (verbal, written, or electronic) or implied depending on the context (e.g., browsing the site).
- For health information (sensitive), we always prioritize explicit consent.
- If we wish to use your information for a new purpose, a new consent will be requested.
- Exception: We will not disclose any information without consent unless required or permitted by law (e.g., medical emergency, government request).
4. Purposes of Data Collection
Information is collected for the following purposes:
- Providing our medical services: Processing the data necessary to fulfill our healthcare mission and professional obligations.
- Appointment management: Communicating with you for booking appointments or clinical follow-ups.
- Service improvement: Analyzing interactions with our services (anonymized data) to optimize our care processes.
- Security: Verifying the identity of individuals who contact us by telephone or electronically.
- Legal compliance: Satisfying obligations arising from laws, regulations, or professional orders (Collège des médecins).
5. Personal Information Collected
CNO only collects information necessary for the disclosed purposes:
- Identity and contact details: First name, last name, email address, mailing address, telephone number.
- Health data: Medical history, test results, neurological reports, RAMQ number.
- Identity verification: Information used to access your secure patient account (if applicable).
- Payment data: Information for processing fees not covered by the RAMQ.
- Interactions and navigation: Location data (via IP address), browser type, and pages visited for statistical and security purposes.
- Clinical research: Periodic review of anonymized files to answer medical research questions.
6. Processing Procedures and Security
CNO places the highest importance on security. Although absolute protection is impossible on the Internet, we process your information according to industry standards.
- Your data is protected by physical measures (restricted access to premises) and technological measures (encryption, firewalls).
- Access is limited to employees and professionals who require it to perform their duties.
7. Sharing Information with Third Parties
We do not sell or rent your personal information. Sharing is limited to:
- Cloud storage: Via secure servers located in Quebec City, QC, Canada, which have rigorous privacy policies.
- External processing: Trusted service providers acting according to our instructions (e.g., Myles electronic medical record software by Medfar).
- Legal reasons: If access is necessary to comply with applicable laws.
8. Cookies and Similar Technologies
We use cookies to facilitate your browsing (history, preferences). You can configure your browser to refuse cookies, although this may affect certain site functionalities. Our policy ceases to apply if you leave our site via a link to a third party.
9. Retention and Destruction
Information is retained for as long as necessary for the intended purposes or according to regulatory requirements (e.g., medical record keeping). Once the retention period has expired, the information is securely destroyed or anonymized for statistical purposes.
10. Your Rights (Access, Rectification, and Portability)
- You have the right to request access to your information to verify or correct it.
- Portability: In accordance with Law 25, you may request to receive your information in a structured technological format.
- Limits: We may refuse access if it would disclose the information of a third party or if legal restrictions apply.
11. Person in Charge
For any questions, comments, or complaints regarding this policy, please contact:
Person in Charge of the Protection of Personal Information
