Privacy Policy
Addiction Rehab Toronto (“we,” “our,” or “us”) is committed to maintaining the utmost confidentiality, security, and integrity of all personal and protected health information (PHI) entrusted to us. This Privacy Policy outlines our compliance with the Personal Health Information Protection Act (PHIPA), the Personal Information Protection and Electronic Documents Act (PIPEDA), and other applicable federal and provincial regulations.
We utilize FYIDB, an advanced and secure data management system, to safeguard all client information against unauthorized access, ensuring compliance with industry-leading security standards.
By using our services or visiting our website, you acknowledge that you have read, understood, and accepted the terms outlined in this Privacy Policy.
1. Collection and Use of Personal and Health Information
We collect, process, and store personal and health information solely to:
Deliver personalized addiction treatment services.
Facilitate treatment coordination with healthcare providers.
Comply with legal and regulatory obligations.
Enhance service quality through internal research and analysis.
Respond to emergencies when a client poses a risk to themselves or others, including hospitalization or intervention when necessary.
Information Collection Methods:
We may collect personal and health information through:
Intake and assessment forms.
Direct communication with clients, families, and healthcare providers.
Online forms and website interactions.
Electronic health records.
2. Disclosure of Personal and Health Information
We uphold strict confidentiality policies and do not sell or disclose PHI for commercial purposes. However, PHI may be disclosed under the following circumstances:
Healthcare Providers: To professionals directly involved in a client’s treatment.
Legal and Regulatory Authorities: To comply with mandatory reporting obligations, including suspected abuse, neglect, or credible threats.
Emergency Responders: In urgent situations requiring medical care or when a client is a potential threat to themselves or others.
Third-Party Service Providers: Contractually bound to confidentiality agreements for treatment facilitation.
Clients or Authorized Representatives: Upon verified request.
3. Client Rights Regarding Personal and Health Information
Clients are entitled to the following rights:
Right to Access & Copies: Clients may request access to their health records and obtain copies.
Right to Amendments: Clients can request corrections to inaccurate or incomplete information.
Right to Restriction: Clients may request limitations on how their PHI is used or disclosed, subject to legal constraints.
Right to Confidential Communication: Clients may specify preferred methods of contact.
Right to File a Complaint: Clients may submit concerns if they believe their privacy rights have been violated.
4. Legal Duties and Obligations
As a PHIPA and PIPEDA-compliant organization, Addiction Rehab Toronto is legally obligated to:
Protect PHI through administrative, technical, and physical security measures, including FYIDB-secured data storage.
Grant clients access to their PHI upon verified request.
Use or disclose PHI only in compliance with established legal and ethical standards.
Maintain privacy of PHI by law, including providing clients with information on their rights and legal recourse.
5. Individual Rights and Complaints
Individuals have the right to:
Inspect, copy, and change their PHI: Clients may access their records and request amendments or removal of inaccurate information.
File a complaint: If a client believes their privacy rights have been violated, they may contact the Privacy Officer or file a complaint with the Information and Privacy Commissioner of Ontario.
6. Safeguards for Personal Health Information
We implement industry-leading encryption, restricted access controls, and rigorous auditing protocols to safeguard against unauthorized access, disclosure, or misuse of client information. Our safeguards include:
Physical Protections: Client files are secured behind two locks, stored in locked filing cabinets, and securely shredded when no longer needed.
Organizational Protections: PHI access is limited to staff on a strict “need-to-know” basis.
Technological Safeguards: Password-protected systems, data encryption, and secure backup.
7. Procedures for Client Access and Information Requests
Client Access to Information:
Addiction Rehab Toronto is required by law to provide clients access to their PHI within 30 days of the request, with a possible extension of up to 30 additional days if necessary. Client requests must:
Be made in writing.
Include a completed Receipt of Records form.
Contain the client’s signature, a witness signature, and the date of the request.
Clients will receive a hard copy of their records by mail (with a cost) or in person.
Denying Client Access:
In certain situations, we may deny access to all or part of a health record, including when:
Legal privilege restricts disclosure.
Disclosure may result in serious harm to the client or others.
It would reveal the identity of a confidential informant.
Clients will be informed of the denial and their right to file a complaint with the Information and Privacy Commissioner of Ontario.
8. Third-Party Requests and Transfers
Transfer of Client Records:
If a client is transferring to a new provider, they must:
Sign a consent form with the new provider for release of information.
Alternatively, sign a Release of Information form directly with us.
Original records are never transferred. Only copies are shared.
Third-Party Requests:
For lawyers, insurance companies, employers, or other third parties, clients must provide written consent for PHI disclosure. Verbal requests will not be accepted. Requests must include:
The name, address, and contact details of the requesting party.
The full name, address, and date of birth of the client.
A detailed description of the information requested.
9. Permitted or Mandatory Disclosure Without Consent
We may release PHI without client consent when:
Required by law (e.g., reporting child abuse to CAS).
Court orders or subpoenas are issued.
Police investigations require PHI, provided they present a valid court order.
To prevent significant harm to the client or others.
10. Website Data Collection
Cookies:
Our website uses cookies to enhance user experience. Cookies are small data files stored on your device that remember your preferences. You can disable cookies through your browser settings, but this may affect site functionality.
Embedded Content:
Articles on our website may include embedded content (e.g., videos, images). Embedded content behaves as if you have visited the original website and may collect data, use cookies, and track interactions.
Comments and User Data:
When visitors leave comments, we collect the data shown in the comment form, along with the visitor’s IP address and browser user agent string for spam detection. Approved comments display the user’s profile picture publicly.
11. Data Retention
We retain PHI for at least 10 years from the date of last contact, as per Canadian Medical Protective Association (CMPA) recommendations.
Website comments and metadata are retained indefinitely. Registered website users can see, edit, or delete their personal information at any time (except usernames).
12. Contact Information
For privacy-related inquiries, requests, or complaints, please contact:
Privacy Officer
Addiction Rehab Toronto
4 Warrendale Court, Etobicoke, ON M9V 1P9
Phone: +1-855-787-2424
Email: lazar@addictionrehabtoronto.ca
13. Updates to This Policy
We periodically review and update this Privacy Policy to reflect changes in legal, regulatory, and operational requirements. The most current version will always be accessible on our website:
https://addictionrehabtoronto.ca
