Privacy Policy

1. Introduction

HealMaze Inc. is committed to protecting your privacy and the security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with Alberta's Health Information Act (HIA), the Personal Information Protection Act (PIPA), and applicable federal privacy legislation.

2. Information we collect

2.1 Personal health information. Health information necessary to provide medical care, including medical history, symptoms, medications, allergies, and treatment records.

2.2 Personal information. Your name, date of birth, Alberta Personal Health Card number, contact information, and address for identification and billing purposes.

2.3 Technical information. Information about your device and internet connection to ensure secure telehealth services.

3. How we use your information

• Healthcare delivery: to provide, coordinate, and manage your medical care through our telehealth platform.
• Alberta healthcare billing: to process claims under the Alberta Health Care Insurance Plan (AHCIP) for eligible insured physician services, and to bill for uninsured services where applicable.
• Quality improvement: to monitor and improve the quality of our healthcare services while maintaining your confidentiality.
• Legal compliance: to comply with Alberta healthcare regulations, HIA requirements, and other applicable laws.

4. Data storage and security

• Canadian storage: we contract with information managers that store health information on servers located in Canada, consistent with HIA requirements.
• Encryption: health information is protected in transit and at rest using accepted encryption standards.
• Access controls: access to health information is limited to personnel involved in your care.
• Ongoing review: we review our administrative, technical, and physical safeguards on an ongoing basis.

5. Information sharing and disclosure

• Healthcare providers: your information may be shared with other providers involved in your care, including specialists to whom you are referred.
• Alberta Health Care Insurance Plan (AHCIP): we share billing information required to process claims for eligible insured physician services, and with Alberta Health Services where required for healthcare-system coordination.
• Legal requirements: we may disclose information when required by law, court order, or regulatory authority.
• No sale of information: we never sell your personal or health information to third parties for marketing.

6. Your privacy rights

• Access: you have the right to access your health information and request copies of your medical records.
• Correction: you may request corrections to inaccurate or incomplete records.
• Consent: you may withdraw consent for certain uses of your information, subject to legal and healthcare requirements.
• Complaints: you may file privacy complaints with our Privacy Officer or the Alberta Information and Privacy Commissioner.

7. Health Information Act compliance

• Custodianship: the physicians providing care at HealMaze act as custodians of health information under Alberta's Health Information Act. HealMaze Inc. supports the physicians' HIA obligations through operational, administrative, and technical arrangements.
• Information managers: we contract with information managers under written agreements consistent with HIA requirements for the processing and storage of health information.
• Breach notification: we follow HIA requirements for notifying affected individuals and authorities in the event of a privacy breach.

8. Data retention

We retain health information according to College of Physicians & Surgeons of Alberta guidelines and Alberta Health Services requirements. Generally, adult health records are retained for 10 years after the last date of service, or longer if required by law or for ongoing care.

9. Website and technology

Cookies: our website uses essential cookies only, for functionality and security. No tracking or marketing cookies are used.

Third-party services: we use only HIA-compliant third-party services for essential healthcare-delivery functions.

10. Privacy Officer

Contact our Privacy Officer at healmaze@gmail.com.

11. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or applicable privacy laws. Significant changes will be communicated via our website or direct communication.