Privacy Policy & Information Practices

This document outlines how MDBilling.ca Limited and its affiliated websites collects data from users on this website, and how it uses such information, and the scope of the discretion such users have as to the collection, correction, transmission, retention or use of the information. It is the policy of MDBilling.ca Limited and all its affiliates to keep any information gathered through the use of this website strictly private. As such, user’s information shall not be disclosed or shared with unauthorized third parties except in the manner provided for by this privacy policy and the law. We at MDBilling.ca Limited are committed to openness and integrity which has helped us to maintain lasting business relationship with our customers, and the privacy policy outline has been instrumental in that regard. Whenever words like “MDBilling.ca”, “we” or “us” are used in this private policy, they refer to MDBilling.ca Limited and its affiliates.

A. PERSONALLY IDENTIFIABLE INFORMATION.
Once a user visits our sites, he/she has the opportunity to contact MDBilling.ca Limited staff for purposes including but not limited to inquiries on any of our products that you may want to purchase or may already have. Whilst submitting all kinds of inquiries, users may be asked to submit information that can be used to identify them, and this might include a name, phone number or email address. MDBilling.ca Limited would like to stress that such information is to be received in strictest confidence and will not be sold to or disclosed to or shared with third parties or any other unauthorized person except in the manner that is provided in this privacy policy.

However, MDBilling.ca Limited retains the right to inform users about any change in their administrative policy that may affect the information on users that is stored in our database. MDBilling.ca Limited may be required to disclose users’ information in compliance with a lawful court order or any governmental regulatory requirement. We may also disclose information to our lawyers in connection to any legal proceedings or in line with the business practices that are geared towards quality control and maintaining sound systems operation.

MDBilling.ca Limited may use contact information provided to contact the user about any aspect of their account, or about a product that in our judgment we think might interest a particular user, or to inform the users about an impending downtime or upgrade, or invite the user to a service related survey. Should you decide to stop receiving such notifications from us, you may proceed to edit your preferences accordingly.

Whereas MDBilling.ca Limited is not currently anticipating any changes in its corporate status, should we be subject to a successful takeover bid, or a merger, or significant portion or our assets are alienated or sold to a third party, MDBilling.ca Limited may disclose, transfer or sell to the surviving or acquiring entity respectively. Personally identifiable information collected online remains subject to promises made in the Privacy Policy.

B. SUBMISSION OF USERS’ DATA.
MDBilling.ca Limited provides a system whose functionality necessitates intake and retention of clinical and personal information of individuals which is provided or entered by such subscribers. The system will only retain information that is provided entered or imported by subscribers or their duly constituted agent(s). The clinical and personal information provided or entered by a subscriber remains the property of such subscriber and MDBilling.ca Limited will not share, sell or otherwise make available such information to unauthorized person. Any disclosure to a third party shall only be made with the consent of the subscriber.

C. CONTROL OVER SUBSCRIBERS’ DATA.
Any data provided or entered by the subscriber belongs to such subscriber and as such, the subscriber has control over who has access to such information. Only users approved by the subscriber will have access to the data. Safeguard measures to ensure authorized access include the use of a username and a password. The subscriber has the obligation of keeping the password and username safe as well as making sure that any person who has access to view such private information is permitted to do so.

D. MONITORING OF SYSTEMS USAGE.
We at MDBilling.ca Limited may use the information on subscribers for our internal purposes including but not limited to, preparation of billing information and monitoring of server and system performance.

We may also display advertisements on this site using the aggregate and anonymous information that we have gathered through this site. We may use such aggregate information to display tailored advertisements that are targeted to the kind of audience that a subscriber belongs to. This does not in any way negate our pledge not to share personally identifiable information with any person without the subscribers consent.

E. TRANSACTIONAL INFORMATION.
Subscribers may sometimes be required to enter sensitive information appertaining to complete a transaction through this site. Such information may include credit card information or bank account details. It is our policy at MDBilling.ca Limited to secure information submitted that way in accordance to industry standards and proprietary measures. MDBilling.ca Limited is compliant with Payment Card Industry, an industry standard regarding credit card data. For more information on PCI standards, please visit https://www.pcisecuritystandards.org/ .

F. CHANGES IN THE PRIVACY POLICY.
MDBilling.ca Limited reserves the right to make changes, and/or review all the covenants contained in this agreement without prior notice to users and/or subscribers. Significant efforts will be made to make available any changes to this privacy policy, and the subscribers will be notified by mail of any such changes.

Whilst we at MDBilling.ca Limited will take all reasonable measures to ensure the integrity of sensitive data submitted in the manner provided for by the terms of service and the privacy policy, as well as any other agreements that may be reached between us, we shall proceed to contact the subscribers in the event that we cannot guarantee such integrity. In such an event we shall contact the subscriber by email or any other appropriate means. We shall also post the privacy agreement on our website in a manner that the policy can be easily accessed.

G. USE OF COOKIES.
Information may also be collected through the use of cookies, which are small files stored by the browser to enhance privacy as well as to facilitate smooth web navigation. MDBilling.ca Limited encourages subscribers to enable cookies on their browsers, but stresses that any information collected through the use of cookies is treated as private data and will not be disclosed to third parties.

H. DATA RETENTION.
We reserve the right (but do not undertake) to reject, suspend, alter, remove or delete Data or to disclose to the relevant authorities any Data if it breaches our terms and conditions or it is necessary to protect us or others or where we have reasonable grounds for believing that a criminal act has been committed) or if we are required to do so by law or appropriate authority, without notice.

Upon termination of your account you will lose all access to the Service and any portions thereof. After a period of time, at MDBilling.ca discretion, we will delete any data stored in or as a part of your account(s).

I. GOVERNING LAW AND HIERARCHY.
This privacy policy agreement will be governed by the laws that are currently in force in Canada, as well as the laws that are applicable In the event that this privacy Policy is in conflict with the Terms of Use for this website, the Terms of Use shall prevail.


Frequently Asked Questions


WHERE DOES MDBILLING.CA GET PERSONAL HEALTH INFORMATION?
MDBilling.ca receives personal health information (PHI) through care providers, typically physicians, who are requesting services on behalf of their patients. It also collects PHI through hospitals and clinics who coordinate the provision of services. Collectively in this context, physicians, hospitals and clinics are referred to as Health Information Custodians (HICs).

HOW DOES MDBILLING.CA USE PERSONAL HEALTH INFORMATION?
MDBilling.ca uses the personal health information it collects to submit medical billing information to the Ministry of Health and Long Term Care and other Insurace Payers.

TO WHO DOES MDBILLING.CA DISCLOSE PERSONAL HEALTH INFORMATION?
MDBilling.ca does not disclose Personal Health Information (PHI) unless required or permitted to by law. MDBilling.ca shares PHI based on implied consent, which allows Health Information Custodians (HICs) to disclose your PHI to another custodian for the purposes of providing or assisting medical billing purposes.

WHAT SAFEGUARDS ARE IN PLACE TO PROTECT PERSONAL HEALTH INFORMATION?
MDBilling.ca aggressively protects personal health information to ensure it is protected at all times. MDBilling.ca employs the following safeguards to protect personal health information:

  • All PHI is hosted in secure, access controlled facilities.
  • All information is encrypted while “at rest” (stored in a database) and “in transit” (being viewed in MDBilling.ca software over the internet).
  • MDBilling.ca uses software access controls to limit access to its software solutions to authorized users.
  • MDBilling.ca software solutions audit all user access to PHI.
  • MDBilling.ca has conducted a Privacy Impact Assessment (PIA).
  • WHAT POLICIES DOES MDBILLING.CA HAVE IN PLACE TO ENSURE PERSONAL HEALTH INFORMATION IS PROTECTED?
    MDBilling.ca adheres to a rigid privacy policy to ensure personal health information is protected. This policy includes the following:

  • All staff are aware of the purposes for which PHI is collected and trained on their legal obligations to protect PHI.
  • MDBilling.ca ensures that that third-parties acting on behalf of MDBilling.ca are contractually obligated to protect PHI to the same standard that MDBilling.ca adheres to.
  • MDBilling.ca has staff to monitor security on a scheduled basis to detect for any possible breaches in security.
  • MDBilling.ca will report any security incident to the affected health information custodian, should they occur.
  • MDBilling.ca has a privacy officer who is responsible for managing compliance with privacy requirements, and implements best practice as it relates to privacy software features and requirements.
  • PHI is not used or disclosed for purposes other than those for which it was collected.
  • PHI is retained only as long as necessary for the fulfillment of the purposes above, and as required by law.
  • MDBilling.ca works with health information custodians to ensure that the data in its custody is as accurate, complete and up-to-date as possible.
  • CAN PATIENTS WITHDRAW CONTENT TO DISCLOSE PERSONAL HEALTH INFORMATION?
    Patients may withdraw consent at any time. Patients also have the right to restrict access to all or part of their personal health information. In either case, this is done by notifying the relevant health information custodian (usually, the patient’s physician) who is a user of the MDBilling.ca software.

    CONTACT US
    Subscribers may contact us to make enquiries or to the accuracy of their personally identifiable information and to request the update, correction or deletion of such information should they wish to do so. Any query, comments or concerns can be sent to us by email: privacy@mdbilling.ca or by postal mail at the following address:

    Attn: Chief Privacy Officer
    1235 Bay Street, Suite 700
    Toronto, Ontario
    M5R-34K