Your privacy is our responsibility.

Our public website collects only the information you provide on a form — your name, contact details, preferred visit time, and a brief plain-language note about your reason for visiting. We deliberately do not ask for medical history, lab results, symptoms, or any other protected health information (PHI) on public forms.

Once you are a confirmed patient, additional health information collected during your visits is stored in our staff portal, which is hosted on Canadian infrastructure with access strictly limited to authorized doctors and front-desk staff.

• Encryption of data in transit (TLS) and at rest.
• Role-based access controls: only the doctors and staff who need to see a record can see it.
• Audit logging of every access to your records, retained for the period required by the HIA.
• Virtual visits use a Canadian-hosted video provider under a signed Information Manager Agreement. Visits are not recorded.
• Annual privacy and security training for every member of staff.

You have the right to:

• Access the personal and health information we hold about you.
• Request a correction if anything is inaccurate.
• Withdraw consent for non-essential uses, subject to legal exceptions.
• File a complaint with our Privacy Officer or with the Office of the Information and Privacy Commissioner of Alberta (OIPC).

To exercise these rights, contact our Privacy Officer at clinic@medi-care.ca or call us at (780) 705-3000.