Privacy Policy

This Privacy Policy describes how Genevieve Blackburn-M. MD inc., Quebec enterprise number 1177090736, referred to below as the “Clinic,” collects, uses, discloses, retains and protects personal information obtained through its website.

The Clinic is committed to protecting personal information in accordance with applicable Quebec law, including the Act respecting the protection of personal information in the private sector and, where applicable, the Act respecting health and social services information. Private professional practices are among the organizations that may be subject to the latter Act.

1. Personal Information Collected

When you complete the contact or appointment request form, the Clinic may collect the following information:

• your preferred clinic;
• your first and last name;
• your email address;
• your phone number;
• your date of birth;
• the content of your message;
• your consent to the collection and use of this information.

The content of your message may reveal sensitive personal information, including information related to your health, appearance or the care you are seeking.

We recommend that you do not send your health insurance number, complete medical record, medical photographs or detailed medical information through the form.

The form must not be used for a medical emergency.

Minors: the website form is intended for individuals aged 18 and over. The Clinic does not knowingly collect information concerning a person under the age of 14 without the consent of their parent or guardian.

Other methods of collection: the Clinic may also collect information when you:

• book an appointment by phone or in person;
• open a client file or receive a treatment;
• subscribe to our communications, where applicable;
• apply for a position, where applicable.

Depending on the circumstances, this information may include your date of birth, address, purchase and treatment history, as well as medical history relevant to the safe provision of care.

2. How Information Is Used

Information collected is used only to:

• receive and process your request;
• contact you by phone or email;
• provide information about Clinic services;
• arrange an appointment, where appropriate;
• manage the administrative follow-up of your request;
• meet the Clinic’s legal, regulatory and professional obligations;
• protect site security and prevent fraudulent or abusive use.

Information submitted through the form is not used to automatically subscribe you to a newsletter or send you promotional communications. Separate consent would be requested for such use.

3. Consent

By completing the form and checking the relevant box, you consent to the collection, use and, where necessary, disclosure of your personal information for the purposes described in this policy.

You may withdraw your consent to certain future uses or disclosures by contacting the person responsible for personal information protection. Withdrawal of consent may, however, prevent the Clinic from processing or continuing your request.

In Quebec, consent must be clear, freely given, informed, provided for specific purposes and requested separately when it concerns sensitive information. Health information is considered sensitive. By checking the box on the form, you expressly consent to the Clinic collecting and using such information, where applicable, solely for the purpose of processing your request.

4. Access and Disclosure

Access to personal information is limited to team members who require it in the course of their duties, including authorized administrative staff and Clinic professionals.

The Clinic may also disclose certain information to service providers acting on its behalf, including:

• Wix, which is used to host and operate the website and form;
• email service providers;
• IT, technical or cybersecurity service providers.

These providers must use the information only in connection with the services they provide to the Clinic.

The Clinic may also disclose information where permitted or required by law, including to a public authority, court or professional order.

The Clinic does not sell or rent personal information collected through the website.

5. Hosting and Processing Outside Quebec

The Clinic uses Wix to operate its website and receive forms. Information submitted may be processed or stored outside Quebec by Wix and its subcontractors, in accordance with the safeguards set out in their terms of service. The Clinic remains responsible for the information it collects.

6. Cookies

The website may use cookies necessary for its operation, security and the storage of visitor preferences.

Analytics tools may also collect technical information such as IP address, browser type, device used, pages viewed, and the date and time of a visit.

Where required by law, non-essential cookies are activated only after visitor consent has been obtained. Preferences can be changed through the website’s cookie management tool. The Commission d’accès à l’information indicates that consent may, in particular, be obtained through a window allowing visitors to configure cookies.

7. Retention and Security

Information is retained only for as long as necessary to process and follow up on a request, subject to applicable legal or professional obligations.

If a request does not lead to the opening of a clinical file, the information is generally deleted or anonymized no later than 12 months after the last exchange, unless continued retention remains necessary.

Information added to a clinical file is retained in accordance with the rules applicable to medical records.

The Clinic implements reasonable administrative, technical and physical safeguards to protect personal information against loss, theft, unauthorized access, misuse or unauthorized disclosure.

Quebec businesses must manage the retention and destruction of personal information throughout its entire life cycle.

8. Your Rights

Subject to the conditions and exceptions provided by law, you may request:

• confirmation as to whether the Clinic holds information about you;
• access to your personal information;
• correction of information that is inaccurate, incomplete or unclear;
• withdrawal of your consent to certain future uses or disclosures;
• certain computerized information in a structured, commonly used technological format, where that right applies;
• to file a complaint regarding the handling or protection of your information;
• deletion of outdated or unjustified information;
• cessation of dissemination or de-indexing of information concerning you, where permitted by law.

All requests must be submitted in writing to the person responsible for personal information protection. Proof of identity may be required to protect the confidentiality of the information.

9. Privacy Incident

If a privacy incident occurs, the Clinic takes reasonable steps to reduce the risk of harm and prevent a similar incident from occurring again.

If an incident presents a risk of serious harm, the Clinic informs the affected individuals and the Commission d’accès à l’information in accordance with applicable requirements.

10. Person Responsible for Personal Information Protection

To ask a question, exercise your rights or file a complaint concerning the protection of your personal information, you may contact us at:

Genevieve Blackburn-M. MD inc.
Cyril Negrette, General Manager

Quebec enterprise number (NEQ): 1177090736
318 Querbes Avenue
Outremont, Quebec H2V 3W3
Canada
Email: info@drgblackburn.com

Quebec businesses must publish on their website the title and contact information of the person responsible for personal information protection.

Anyone who is dissatisfied with how their request was handled may also contact Quebec’s Commission d’accès à l’information.

11. Governance and Complaint Handling

The Clinic has adopted rules governing the management of personal information. In summary:

• Roles: the person responsible for personal information protection oversees the application of this policy. Only authorized team members have access to information, according to their duties.
• Retention and destruction: information is retained for the periods described above, then securely destroyed or anonymized.
• Training: staff are made aware of personal information protection requirements.
• Complaints: any complaint must be submitted in writing to the person responsible. The Clinic acknowledges receipt of the complaint, reviews it and provides a written response within 30 days. If you are dissatisfied with the response, you may contact Quebec’s Commission d’accès à l’information.

12. Changes to This Policy

The Clinic may update this policy to reflect changes in its practices, the services it uses or applicable legal requirements.

The date of the most recent update appears at the beginning of the policy.