Privacy

We will always collect your Personal Information by fair and lawful means. We may collect Personal Information from you directly through your access to our Site or the KidiHealth Platform and/or from third parties, where we have obtained your consent to do so or as otherwise required or permitted by law. For the purposes of this Privacy Statement, Personal Information includes personal health information.

We will keep the Personal Information that we collect either at the KidiHealth offices or at the offices of a service provider in Canada.

We identify the purposes for which we use your Personal Information at the time we collect such information from you and obtain your consent, in any case, prior to such use. We generally use your Personal Information for the following purposes (the “Purposes”):

• to provide or perform any of KidiHealth’s services requested by you;
• to facilitate the delivery of KidiHealth’s services (including matching you with providers in your province, setting appointments and providing reminders of appointments);
• to verify your identity and your age;
• to respond to your inquiries, complaints or requests;
• to advise you about new programs and services that may be of interest to you;
• to collect opinions and comments in regard to KidiHealth’s operations;
• to administer our website;
• in aggregate and anonymized form, to develop consumer profiles, perform customer analysis and identify marketing opportunities and strategies;
• to investigate legal claims;
• such purposes for which KidiHealth may obtain consent from time to time; and
• such other uses as may be permitted or required by applicable law.

We identify to whom, and for what purposes, we disclose your Personal Information, at the time we collect such information from you and obtain your consent to such disclosure.

For example, we may disclose your Personal Information to the health care provider you select to provide you services through the KidiHealth Platform. We may also transfer your Personal Information to third party service providers with whom we have a contractual agreement that includes appropriate privacy standards, where such third parties are assisting us with the Purposes – such as service providers that provide telephone, video or voice communication services support or data storage or processing.

If you are referred to KidiHealth by your family doctor or another health professional, you agree that KidiHealth may access and share the number of Sessions you have participated in and/or the results of your standard assessments with the health professional who referred you to us. Such referees must obtain your consent for us sharing your information at the time they are making the referral, and you will have the right to withdraw that consent at any time through your account settings tab on the KidiHealth Platform. You agree that KidiHealth shall not be liable if your referee failed to acquire proper consents.

Generally, we will only make disclosures of Personal Information to such persons for which you provide your consent. Notwithstanding the foregoing, we may also make disclosures of Personal Information to an acquiror in connection with a transaction involving the sale of some or all of the business of KidiHealth (in which case the use of your personal information by the new entity would continue to be limited by applicable law), or as otherwise permitted or required by law.

In addition, we may send Personal Information outside of the country for the purposes set out above, including for process and storage by service providers in connection with such purposes. However, you should note that to the extent that any Personal Information is out of the country, it is subject to the laws of the country in which it is held, and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies of such other country, pursuant to the laws of such country.

We generally obtain your consent prior to collecting, and in any case, prior to using or disclosing your Personal Information for any purpose. You may provide your consent to us either orally, electronically or in writing. The form of consent that we seek, including whether it is express or implied, will largely depend on the sensitivity of the personal information and the reasonable expectations you might have in the circumstances.

We ensure that all affiliates and other third parties that are engaged to perform services on our behalf and are provided with Personal Information are contractually required to observe the intent of this Privacy Statement and our privacy practices. We use encryption with our service providers, and all data is encrypted at rest.

We may keep a record of your Personal Information, correspondence or comments, in a file specific to you. We will utilize, disclose or retain your Personal Information for as long as necessary to fulfill the purposes for which that Personal Information was collected and as permitted or required by law.

If you make a written request to review any Personal Information about you that we have collected, utilized or disclosed, we will provide you with any such Personal Information to the extent required by law. We will make such Personal Information available to you in a form that is generally understandable, and will explain any abbreviations or codes.

We will ensure that your Personal Information is kept as accurate, complete and up-to-date as possible. We will not routinely update your Personal Information, unless such a process is necessary. We expect you, from time to time, to supply us with written updates to your Personal Information, when required.

At any time, you can challenge the accuracy or completeness of your Personal Information in our records. If you successfully demonstrate that your Personal Information in our records is inaccurate or incomplete, we will amend the Personal Information as required. Where appropriate, we will transmit the amended information to third parties having access to your Personal Information.

We will attempt to respond to each of your written requests not later than thirty (30) days after receipt of such requests. We will advise you in writing if we cannot meet your requests within this time limit. You have the right to make a complaint to the federal Privacy Commissioner in respect of this time limit.

We will not charge any costs for you to access your Personal Information in our records or to access our privacy practices without first providing you with an estimate of the approximate costs, if any.

We may request that you provide sufficient identification to permit access to the existence, use or disclosure of your Personal Information. Any such identifying information shall be used only for this purpose.

We have implemented physical, organizational, contractual and technological security measures to protect your Personal Information from loss or theft, unauthorized access, disclosure, copying, use or modification, including:

• encryption of Personal Information;
• that the only employees who are granted access to your Personal Information are those with a business ‘need-to-know’ or whose duties reasonably require such information;
• premises security;
• deployment of technological safeguards such as security software and fire walls to prevent hacking or unauthorized computer access; and
• internal password and security policies.

All comments, questions, concerns or complaints regarding your Personal Information, this Privacy Statement or our privacy practices, should be forwarded to our Privacy Officer as follows.

E-mail: info@KidiHealth.com with the subject line “Privacy Inquiry”