Privacy

Privacy Policy

Last updated 22 September 2026 · basalclinic.ca

Basal ("we", "us") is an Ontario company operated by 1001459892 Ontario Inc. This policy explains what information we collect, why, where it lives, and your rights. We wrote it to be read.

Two kinds of information, two laws

Personal health information — your intake answers, your chart, prescriptions, lab results, and messages with your clinician — is governed by Ontario's Personal Health Information Protection Act, 2004 (PHIPA). Under PHIPA, the nurse practitioner who provides your care is the health information custodian of your record. Basal and its staff act as the custodian's agents: we may only use your health information to support your care and the administration of it, under a written agreement with the custodian.

Everything else — your account email, payment details, website use, and messages to our support inbox — is governed by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect, and when

• The eligibility check on our website is anonymous. It asks your province, age, height, weight, conditions, and safety questions. It is calculated in your browser and is not stored unless you choose to leave an email address at the end, in which case we keep only that email and your eligibility result.
• Waitlist and contact forms collect the email address and message you provide.
• Your patient account and intake (once you start care) collect your legal name, date of birth, contact details, Ontario health card number, government photo identification, medical history, medications, allergies, pharmacy choice, and your consents. This is personal health information.
• Payment is processed by our payment provider; we do not store full card numbers.
• Website analytics, if any, are privacy-preserving and cookie-free. We do not use advertising trackers on pages where health information is entered.

Where your information lives

Your health record is kept in a clinical records system with data residency in Canada. Form submissions from our public website (waitlist, clinician applications, contact) are handled by a third-party form service that may process data outside Canada; we never ask for health information on those forms. Email is provided by Google Workspace under its Canadian data-region settings where available.

Who can see it

• Your nurse practitioner and, if you agree, a covering nurse practitioner.
• Basal staff, only as agents of the custodian and only to support your care, billing, and support requests. Access is logged.
• Your pharmacy (the prescription you direct us to send) and the laboratory (the requisition you take to them).
• Service providers bound by contract: the clinical records system, the fax service, the payment processor.
• Anyone you ask us to share it with, in writing — for example, your family doctor.
• Where the law requires it.

We do not sell your information. We have no financial relationship with any pharmacy, laboratory, or drug manufacturer, and we never share your information with one for marketing.

How long we keep it

Health records are retained for the period required of nurse practitioners by the College of Nurses of Ontario (generally at least ten years after your last interaction, or ten years after you turn 18). Waitlist emails are deleted on request or when no longer needed.

Your rights

• To see your record and receive a copy, usually within 30 days.
• To ask us to correct it.
• To withdraw consent for uses that aren't required by law or necessary to provide care (which may mean we can no longer treat you).
• To be told if your information is lost, stolen, or accessed without authority. We notify affected patients and, where required, the Information and Privacy Commissioner of Ontario.
• To complain — to us first, and to the Information and Privacy Commissioner of Ontario at any time.

If Basal is ever sold

If the clinic or its business is transferred to a successor, your record may transfer to a successor custodian so that your care can continue. You will be notified and may request that your record be transferred to another clinician of your choice instead.

Contact

We will update this policy as the service grows and will date every change above.