Privacy Policy

Dan Carter Productions and Oshawa Community Health Centre

THE PRIVACY POLICY OF DAN CARTER PRODUCTIONS

Effective August 1st, 2008

Introduction

Protecting privacy and confidentiality of information is fundamental to our overall operation and we take it very seriously. We have created this private statement to demonstrate our commitment to protecting the privacy of our customers, partners, potential customers and website visitors.

Privacy Statement

This policy deals only with personal information handled by Dan Carter Productions and its divisions (herein referred to as Dan Carter Productions). Personal information is information about an identifiable individual, excluding business contact information. The following explains how Dan Carter Productions handles personal information. We reserve the right to change this policy and it may be updated periodically. Theses changes may affect our use of your personal information. Accordingly, please check for changes regularly.

Accountability

Dan Carter Productions is accountable for all personal information under its control. Dan Carter Productions privacy officer Paula Beebe is designated as responsible for Dan Carter Productions’ privacy policy. The privacy officer can be reached by:

Email address:
info@dancarter.ca Any questions about Dan Carter Production’ handling of personal information should be directed to the privacy officer. Please see below for more information about the process for referring questions about Dan Carter Productions’s handling of personal information.

Purpose of Personal information

The purpose for which Dan Carter Productions collects personal information will be identified at or before the time the information is collected. Dan Carter Productions may collect personal information for the purposes of:

Purchasing various products or services from Dan Carter Productions
Qualifying prospective clients
Servicing existing clients to serve them better
Processing and administering the above or other purposes as necessary.

Consent

Dan Carter Productions seeks consent for all personal information we collect, use and disclose through information provided to individuals prior to collection, or at the time of collection.

If you have voluntarily provided information, you have consented to the collection, use and disclosure of your personally identifiable information as described in this privacy policy. Dan Carter Productions will not use personal information for any purpose other than that for which you consented. Should Dan Carter Productions require personal information for a new purpose, we will contact you to seek consent for that new use.

Limits for Collecting, Using, Disclosing & Keeping Personal Information

Dan Carter Productions does not collect, use or disclose personal information of individuals except when individuals give consent and provide the information on a voluntary basis. There may be occasions where more specific personal information is necessary for us to proceed with a request for information, or provide you with a product or service. In such cases, we will provide you with a description on the information we need. In all cases, Dan Carter Productions limits the amount and type of information collected to only the personal information that is required to provide the individual with the requested information, product, or service. We collect only information that is voluntarily provided by you and undertake that such information will be kept strictly confidential.

Dan Carter Productions does not sell or trade any personal information with third parties. Dan Carter Productions may transfer information to service providers where information processing is outsourced by Dan Carter Productions in the course of its normal business practices. Where personal information is transferred to a service provider for processing, we require the service provider to respect this Privacy Policy and we will restrict them from using or disclosing personal information transferred to them for any purpose other than the provision of services to us.

Any personal information that Dan Carter Productions retains is kept in such a manner as to ensure its security and confidentiality at all times.

Safeguarding Personal Information

Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot ensure or warrant the security of any information you transmit to us or receive from us electronically. This is especially true for information you transmit to us via e-mail. We have no way of protecting that information until it reaches us. Once we receive your transmission, we make our best efforts to ensure its security on our servers.

Accuracy of and Access to Personal Information Collected

Dan Carter Productions makes every effort to keep personal information as accurate, complete, current and relevant as necessary for the identified purposes. Dan Carter Productions does not routinely update personal information.

Dan Carter Productions makes readily available to individuals our Privacy Policy and related procedures for managing personal information. We provide access to the Privacy Policy and related procedures to individuals on Dan Carter Productions’s website and in written form. Any questions about the handling of personal information by Dan Carter Productions can be raised with our privacy officer.

At the written request of an individual, he or she may view or edit their personal information as collected by Dan Carter Productions. Dan Carter Productions will inform them of what it is being used for and, in cases where it has been disclosed, to whom it has been disclosed.

To make a request, please send a letter, email or fax addressed to our Privacy Officer at the address indicated above. In your request, please include the following information: Name, contact details, the nature of your request, including whether you wish to view and/or edit information or inquire regarding use and/or disclosure.

Dan Carter Productions will reply to your request in no later than thirty days after receipt of the request, or if we are not able to respond by this period, we will send you a notice of extension. If we are not able to disclose all the personal information we hold on you, we will give you a reason for our inability to do so, unless prohibited by law.

Questions

Any questions or comments about Dan Carter Productions handling of personal information should be directed to our privacy officer.

Privacy Policy of Oshawa Community Health Centre

1) Objective & Scope of Policy

Oshawa Community Health Centre is committed to respecting your privacy and has developed a Privacy Statement, in accordance with the new Federal Privacy Act, to inform you of our policy and practices concerning the collection, use and disclosure of personal information.

This policy statement governs personal information collected from and about individuals who are or may become clients, members or donors and those individuals outside of Oshawa Community Health Centre with whom we work. This policy does not cover aggregated data from which the identity of an individual cannot be determined. Oshawa Community Health Centre retains the right to use aggregated data in any way that it determines appropriate.

In the event of questions about: (i) access to your personal information; (ii) Oshawa Community Health Centre’s collection, use, management or disclosure of personal information; or (iii) this policy statement; please contact:

Privacy Office
Oshawa Community Health Centre
115 Grassmere Ave.
Oshawa, Ontario
L1H 3X7
E-mail:privacyofficer@ochc.ca
Telephone:(905) 723-0036

2)The Collection, Use and Disclosure of Personal Information

This policy pertains to:

  1. clients (any individual who may or has used the Oshawa Community Health Centre services),
  2. members (any person who is or who submitted an application to become a member of Oshawa Community Health Centre), and
  3. donors (any person who has made a contribution or donation to the Oshawa Community Health Centre).

“Personal information” means any information, recorded in any form, about an identified individual, or an individual whose identity may be inferred or determined from such information.

Your provision of personal information to Oshawa Community Health Centre means that you agree and consent that we may collect, use and disclose your personal information in accordance with this Privacy Policy. If you do not agree with these terms, you are requested not to provide any personal information to Oshawa Community Health Centre. Unfortunately, certain services can only be offered if you provide personal information to Oshawa Community Health Centre. Consequently, if you choose not to provide us with any required personal information or request to withdraw consent, Oshawa Community Health Centre may not be able to offer you those services.

At anytime a client may withdraw their consent to use their personal health information by making a formal request to their provider or to the privacy officer which would be documented and added to their record. In addition, the client’s name will be recorded on a master list indicating withdrawal of consent.

Clients also have the right to instruct that a part of their personal health information not be shared with other providers or external agencies. This is referred to as the lockbox provision. Procedures dealing with the “Lock Box” provision are detailed below in 2.1 “Lock Box” Provision.

Oshawa Community Health Centre uses the personal information provided verbally or in writing by clients, members, or donors in order to:

  • Provide clients with health and health related services and programs;
  • Manage our relationship with clients;
  • Manage our relationship with members and donors;
  • Meet any legal or regulatory requirement; and
  • Such other purposes consistent with the foregoing purposes.

Oshawa Community Health Centre’s use of personal information is limited to these purposes, Oshawa Community Health Centre does not sell, trade, barter or exchange for consideration any personal information it has obtained. Unless permitted by law, no personal information is collected about a client, member or donor without first obtaining the consent of the individual to the collection, use and dissemination of that information.

Personal information will be collected, to the extent possible, directly from the individual concerned. In order to meet client needs, personal information provided by clients may be shared between personnel of the various service areas of Oshawa Community Health Centre. In the event of a client being incapable of giving consent, effort will be made to obtain consent from a substitute decision maker.

Where a client is transferred to another health care provider not working for or with Oshawa Community Health Centre, the client’s written consent will be obtained prior to disclosing the client’s personal information.

Oshawa Community Health Centre may disclose personal information of clients, members or donors to organizations or individuals that perform services on behalf of Oshawa Community Health Centre. Using contractual or other arrangements, Oshawa Community Health Centre shall ensure that agents, contractors or third party service providers, who may receive personal information in the course of providing services to Oshawa Community Health Centre, agree to use such information solely for the purposes of providing services to Oshawa Community Health Centre and under the instruction of Oshawa Community Health Centre and, with respect to that information, to act in a manner consistent with the relevant principles articulated in this policy.

Please note that there are circumstances where the use and/or disclosure of personal information may be justified or permitted or where Oshawa Community Health Centre is obliged to disclose information without consent. Such circumstances may include:

  • Where required by law or by order or requirement of a court, administrative agency or other governmental tribunal;
  • Where Oshawa Community Health Centre believes, upon reasonable grounds, that it is necessary to protect the rights, privacy, safety or property of an identifiable person or group;
  • Where it is necessary to permit Oshawa Community Health Centre to pursue available remedies or limit any damages that Oshawa Community Health Centre may sustain; or
  • Where the information is public.

Where obliged or permitted to disclose information without consent, Oshawa Community Health Centre will not disclose more information than is required.

2.1 “Lock Box Provisions”

If a client instructs a provider not to release a part of his/her health information to another service provider, the provider must advise the other service provider or agencies that some relevant information has been withheld at the direction of the client.

Procedure to lock:

  1. A client may verbally, or in writing, ask their provider to “lock” specific and/or all of their personal health information from other service providers. It is preferred that the client provide the request in writing regarding which information and which provider/agency the information is to be withheld from as to ensure proper diligence. It should be pointed out to the client that in doing so their quality of health care may be affected.
  2. The client’s primary provider will complete a “Lock Box” form with all appropriate details and insert into client’s chart.
  3. The client’s chart will be marked on the outside front cover that it contains “locked” information.
  4. If information is “locked” from internal providers/staff, the primary provider who completed the “Lock Box” form is responsible to inform those “locked out” staff.

Procedure to change/revoke lock by client:

  1. Instructions to change/revoke locked information must be directed to the primary provider in writing.
  2. Provider will document in progress notes and written of client will be kept in progress notes of chart.
  3. Marking on outside of client’s chart will be removed/revised if applicable.

Procedure to unlock on request by third party:

  1. Requests for locked information must be directed to the primary provider in writing.
  2. The primary provider will explore the matter of the “locked” personal health information with the individual and seek his/her consent to access the locked information.
  3. Written consent will be obtained and placed in the client’s chart prior to any information being released.

If the provider believes that disclosure is necessary to eliminate or reduce significant risk of serious bodily harm to person or persons, he/she must: Disclose the personal health information to the third party. Note the disclosure and circumstances surrounding it in client’s chart and, if appropriate, informs the client that disclosure has occurred.

3) Accurate Information

Oshawa Community Health Centre endeavours to ensure that any personal information provided by it’s Clients and Members and in its possession is as accurate, current and complete as necessary for the purposes for which Oshawa Community Health Centre uses that data. Information contained in files that have been closed is not actively updated or maintained.

4) Retention

Oshawa Community Health Centre retains personal information as long as Oshawa Community Health Centre believes it is necessary to fulfill the purpose for which it was collected and properly disposed of when personal information is no longer used or needed as pertains to our document retention chart.

5) Security

Oshawa Community Health Centre endeavours to maintain adequate security with respect to its offices and information stored at it facilities so as to prevent any loss, misuse, unauthorized access, disclosure, or modifications of personal information. If personal information of a client has been lost, stolen, improperly disclosed or had unauthorized use the individual(s) will be notified.

Oshawa Community Health Centre further protects personal information by restricting access to it to those employees that the management of Oshawa Community Health Centre has determined need to know that information in order that Oshawa Community Health Centre may provide its services. Oshawa Community Health Centre has strict policies in regards to confidentiality of information for both employees and volunteers.

6) Access to Personal Information

Oshawa Community Health Centre permits access to and review of personal information held and owned by Oshawa Community Health Centre about an individual by the individual concerned. All requests must be supplied in writing and sufficient information is required to confirm the identity of the person making the request before granting access or making corrections to personal information. Appropriate Oshawa Community Health Centre staff will be present during the review to address any issues that may arise.

If an individual believes any personal information concerning that individual is not correct, that person may request an update of that information by sending a request to the Privacy Officer. Oshawa Community Health Centre reserves the right not to change any personal information but will append any alternative text the individual concerned believes appropriate. An individual may also request that Oshawa Community Health Centre delete an individual’s personal information from Oshawa Community Health Centre’s system and records. However, due to technical constraints and the fact that Oshawa Community Health Centre backs up its systems, personal information may continue to reside in Oshawa Community Health Centre’s systems after deletion. Individuals, therefore, should not expect that their personal information would be completely removed for Oshawa Community Health Centre systems in response to an accepted request for deletion.

Clients may have access to their health information by requesting the information from their provider in writing. Oshawa Community Health Centre will endeavor to provide the information in question within a reasonable time and no later than 30 days following the request.

Procedure to access Personal Information:

  1. The client submits the request in writing to the provider detailing the following:
    1. A description of what information or records is requested.
    2. The signature of the client.
    3. The signature of a witness to the authorized person’s signature
    4. The date the written request was signed.
  2. The written request shall be placed in the client’s chart.
  3. A notation shall be made in the client’s record stating:
    1. What information or records were disclosed
    2. When the information or records were disclosed
    3. By whom the information or records were disclosed>
  4. Before records are copied, each page must be numbered.

Oshawa Community Health Centre reserves the right to decline access to personal information where the information requested:

  1. Would disclose the personal information of another individual or of a deceased individual;
  2. Is subject to solicitor-client or litigation privilege;
  3. Could reasonably result in:(i) serious harm to the treatment or recovery of the individual concerned; (ii) serious emotional harm to the individual or another individual; or (iii) serious bodily harm to an individual;
  4. May harm or interfere with law enforcement activities and other investigative or regulatory functions of a body authorized by statute to perform such functions
  5. Is not readily retrievable and the burden or cost of providing would be disproportionate to the nature or value of the information; or
  6. Does not exist, is not held or cannot be found by Oshawa Community Health Centre

Where information will not or cannot be disclosed, the individual making the request will be provided with the reasons for non-disclosure.

Where information will be disclosed, Oshawa Community Health Centre will endeavor to provide the information in question within a reasonable time and no later than 30 days following the request.

7) Amendment of Oshawa Community Health Centre Practices and this Policy

This statement is in effect as of January 1, 2004. Oshawa Community Health Centre will review and revise its privacy practices and this Policy Statement as part of a yearly review. In the event of any amendment, an appropriate notice will be communicated to Clients, Members and Donors in an appropriate manner. Policy changes will apply to the information collected from the date of the revised Policy Statement as well as to existing information held by Oshawa Community Health Centre.

8 ) Handling Inquiries or Complaints

Any questions, comments or complaints about our privacy policies and procedures are to be directed to our Privacy Officer, Mr. Brian Joyce, at the contact information provided in section 1 of this policy statement. The Oshawa Community Health Centre’s Privacy Officer will make all efforts to address concerns however, if the client is not satisfied with the response, he/she may contact the Information and Privacy Commissioner in writing at 2 Bloor Street East, Toronto, Ontario M4W 1A8.

9) In Summary

When you provide Oshawa Community Health Centre with personal information, you consent and agree to the following:

  • The collection, use and disclosure of personal information from or about you as described in Section 2 and to your right to access and correct data as described in Section 6.
  • Your acceptance of the risks concerning the transmission of information to Oshawa Community Health Centre as described in Section 5.
  • The amendment of this Policy Statement as described in Section 7.

Last revision: January 2008

Tags: , ,