Privacy Policy

Effective Date: August 13, 2026

Website: https://palphysio.ca/

Pal Physio (“we,” “us,” or “our”) is committed to protecting the privacy, confidentiality, and security of your personal and health information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website, book an appointment, or receive physiotherapy and related clinical services from our practice in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and relevant provincial health information protection statutes.

1. Information We Collect

We collect information necessary to provide you with safe, personalized physiotherapy care and to maintain an efficient online booking and communication experience.

A. Personal and Health Information

When you request information, schedule an appointment, or undergo treatment, we may collect:

• Contact Information: Full name, phone number, email address, home address, and emergency contact details.
• Health & Medical History: Medical conditions, symptoms, medical history, physician recommendations, imaging results, ongoing treatments, and clinical notes.
• Billing & Payment Details: Insurance provider details, policy/claim numbers, billing address, and payment method details (processed securely via PCI-DSS compliant payment gateways).

B. Automated Website Usage Information

When you browse https://palphysio.ca/, our servers automatically collect non-identifiable technical data:

• Device & Browser Data: IP address, browser type, operating system, and language preferences.
• Usage Patterns: Pages visited, time spent on pages, referral URL, and click path.

2. How We Use Your Information

We use the collected information for the following specific purposes:

• Clinical Care: Assessing your physical condition, developing tailored treatment plans, delivering physiotherapy services, and maintaining standard medical records.
• Appointment Scheduling & Management: Confirming appointments, sending reminders via email or SMS, and managing clinic operations.
• Billing & Claims Processing: Submitting claims directly to third-party health insurance providers or processing direct patient payments.
• Communication: Responding to inquiries, providing exercise guidance, or sending administrative updates regarding clinic operations.
• Website Optimization: Analyzing traffic trends to enhance user experience, security, and site functionality.

3. Disclosure of Your Information

We do not sell, rent, or trade your personal or health information. Your information is disclosed only in the following limited circumstances:

• Care Team Collaboration: With your consent, we may share relevant medical information with your primary care physician, specialists, or other authorized healthcare providers involved in your care.
• Third-Party Service Providers: We work with trusted third-party providers (e.g., electronic medical record systems, web hosting platforms, secure booking software) that adhere to strict privacy standards and are legally bound to protect your data.
• Insurance Companies: To bill insurance directly on your behalf, as authorized by your signed consent.
• Legal & Regulatory Obligations: When required or permitted by law, such as complying with a court order, subpoena, regulatory body request, or to protect the safety of patients and the public.

4. Protection and Retention of Data

We employ strict physical, organizational, and technological safeguards to protect your personal and health information against loss, theft, unauthorized access, disclosure, copying, or modification.

• Digital Security: Secure SSL encryption for website traffic, encrypted databases for patient records, multi-factor authentication, and restricted administrative access.
• Physical Security: Secure storage of any physical clinical records in locked areas with restricted access.
• Data Retention: Medical records are retained in compliance with provincial regulatory college standards (e.g., College of Physiotherapists). Once the mandatory retention period expires, records are securely destroyed or permanently anonymized.

5. Cookies and Analytics

Our website uses cookies and similar tracking technologies to improve performance and user experience.

• Essential Cookies: Necessary for basic website functions, such as secure navigation and form submissions.
• Analytics Cookies: Help us understand how visitors interact with our site so we can improve content and accessibility.

You can adjust your web browser settings to block or disable cookies, though some features of the site may not function properly as a result.

6. Your Rights and Choices

As a patient or website user, you have rights regarding your personal and health information:

• Access & Correction: You have the right to request access to your personal health records and request corrections if information is inaccurate or incomplete.
• Withdrawal of Consent: You may withdraw your consent for information processing or communications at any time, subject to legal or contractual limitations and standard medical record retention requirements.
• Marketing Opt-Out: You can opt out of receiving promotional emails or newsletters at any time by clicking the unsubscribe link or contacting us directly.

7. Third-Party Links

Our website may contain links to external third-party sites (e.g., patient portal platforms, social media, external resources). We are not responsible for the privacy practices or content of external websites. We encourage you to review the privacy policies of any third-party site you visit.

8. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our clinical practices, technology, or legal requirements. Updated versions will be posted directly on this page with an updated “Effective Date.”

9. Privacy Officer & Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how your information is handled, please contact our Privacy Officer: