Effective Date: September 1, 2019
ELLERCA collects information from you (or “your”) and about you, both directly from you, our nurses, and from third parties, such as your physician or your other health care providers, when you, our nurses, or such third parties use and access our applications for mobile devices (the “App”), our website http://www.ellerca.com/ http://360care.ca (the “Site”), or any of our platforms available on the App or the Site (the “Platforms”, and collectively with the App and the Site, the “Services”) or otherwise communicate with us. Personal Information (“Personal Information”) is as defined in and governed by the Canadian Personal Information Protection and Electronic Documents Act (“PIPEDA”).
Personal Information includes Personal health information (“Personal Health Information”). For convenience, Personal Health Information is as defined in Ontario’s Personal Health Information Protection Act (“PHIPA”). If other applicable personal health information protection legislation in other Canadian jurisdictions provides a broader definition of personal health information than PHIPA, then that legislation applies.
Under PHIPA, an “Agent” is broadly defined as a person who, with the authorization of a Custodian, acts for or on behalf of the Custodian in respect of Personal Health Information.
Under PHIPA, a “Health Information Network Provider” is defined as a person that provides services to two or more Custodians to enable the Custodians to use electronic means to disclose Personal Health Information to one another. A Health Information Network Provider may or may not be an Agent. Please ask us for a copy of our plain-language description of the services that we provide to the Custodians, which includes a general description of the safeguards we have put in place to protect against unauthorized use and disclosure, and to protect the integrity of the Information.
ELLERCA is a Health Information Network Provider – meaning that we enable your Custodians, through the Services, to use electronic means to disclose your Personal Health Information to one another. Ellerca may also be an Agent of the Custodian nurses that we employ to provide services to you.
“Account” means the account of a User (as defined below) who has a registered account.
“Health Care Provider” means any health care provider who provides health care services to you through the Services or who otherwise uses the Services for your diagnosis, treatment or other benefit, including our nurses.
“Non-identifying Information” means information that cannot be used to contact or identify you and is not linked to any Information that can be used to contact or identify you. It can include passively collected information about your activities and the activities of your Health Care Providers within the Services, such as usage data, but only to the extent that information is not linked to your Information.
“Patient” means a User who registers with ELLERCA with respect to receiving health care services and may therefore and for that purpose have access to the Services. You may become a Patient through your use of the Services.
“User” means an individual or other person who registers with ELLERCA and creates an Account, including any Custodians and Patients.
Information is collected in three ways:
3.1 Information You Provide
You provide Information to Ellerca when you register as a User, create a Patient profile, or communicate with us by email, phone, video conferencing, the App, the Site, any of the Platforms or postal mail:
– When you register as a User or create a Patient profile. In order to use the full complement of the Services, you must register with Ellerca. When you register for the Services, you become a User with an Account. Your Information is recorded through our online registration. At the time of registration, we collect Information, which may include (but not be limited to) the following:
– Once you become a Patient with an Account, additional Information that you provide (including via videoconference with a Health Care Provider) is stored as part of your profile. This may include: health insurance information, scheduled appointments, selected Health Care Providers, documents and Information that you or your selected Health Care Provider or other regulated health provider entity may upload, your medication adherence, and any other Information you or relevant third parties providing services to you choose to include.
– Otherwise through the Services. If you are not a User, we may nevertheless collect Information you provide us with through the Services, such as contact information.
3.2 Information Obtained From Your Use Of The Services
When you visit our Site, use our App or any of the Platforms, or otherwise use the Services, the following Information may also be collected:
3.3 Information We Get From Other Users
We collect information relating to your communication with other Users or your Health Care Providers, including any documents they may upload to the Services. This includes, but is not limited to, your medical history and any other Information (including personal health information) that you disclose to a Health Care Provider (including our nurses) and medical documents containing, amongst other things, medical records relating to you (“Medical Document”). For example, if a nurse conducts a mental health assessment with you, the Information they collect will be added to your file on the Services.
The Services are intended for use by individuals eighteen (18) years of age or older and have the capacity to form legally binding contracts under applicable law. ELLERCA does not knowingly collect, either online or offline, Information from individuals under the age of 18. At this time, the Services are intended for residents of Canadian provinces and territories.
ELLERCA and its Agents may use your Information for the following purposes:
ELLERCA also collects, uses and discloses Information as identified at the time of collection, or as permitted or required by applicable law, including for any other purpose for which we have your consent.
ELLERCA assumes that your registration of an Account constitutes implied consent for the above purposes, all of which are of the essence of the Services, unless expressly instructed otherwise. If you do not consent, or if you withdraw your consent, the Services may not be available to you or your Health Care Providers.
The Services allows you to view manage appointments, track your medications and medication adherence, and communicate with Health Care Providers (including by videoconference), while enabling the Health Care Providers to manage the process more efficiently.
The Information we collect allows Health Care Providers to, among other things, view your health history, electronically transmit Medical Documents, and input health information in connection with the health care services they have provided to you.
You consent to our using aggregate, Non-Identifying Information collected via cookies and similar technologies to use in statistical analysis to help us track trends and analyze patterns in the use of the Services. You also consent to ELLERCA using any of your data in aggregate form for research or other purposes, including disclosure to third parties.
We do not share Information with companies, organizations and individuals outside ELLERCA unless the following circumstances apply or as otherwise permitted or required by law:
We may share aggregate, Non-Identifying Information publicly and with our partners. For example, we may share Information publicly to show trends about the general use of ELLERCA’s services.
We may disclose and transfer Information in connection with a financing of our business, merger or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of ELLERCA or its affiliates or as part of a corporate reorganization or change in corporate control.
You acknowledge and agree that if you request that your Information be removed from the database created by the Services, it may not be possible to completely delete all Information due to technological and legal constraints. In addition your Health Care Providers may have retained copies of your Medical Documents and other medical information, simply by extracting them from the records in the said database in accordance with their own privacy policies and the requirements of their regulators and applicable law. ELLERCA does not have control over Health Care Providers (other than any Health Care Providers who are employees of ELLERCA) or other service providers in possession of your Information.
ELLERCA will take reasonable steps to ensure that the information about you is as accurate, complete, and up to date as is necessary to minimize the possibility that inappropriate information may be used to make a decision about you. However, we cannot be responsible for errors in the records caused by you, your Health Care Providers, or other Users you authorize to have access to your Information.
We implement commercially-reasonable administrative, technical and physical security measures to protect your Information. These include the following:
Information about our policies and practices relating to the management of Information are available to the public, including:
12.1 Accessing And Updating Your Information
You may access or update your Information by logging into your Account and accessing your Account settings.
To access, change or remove Information not accessible through your Account settings or profiles, contact our User Care team at: firstname.lastname@example.org . In some cases, we may not be able to reasonably accommodate your request to remove or modify your Information, in which case we will let you know, and tell you why. For example, we cannot change the records made by Health Information Custodians because those records are subject to their own regulatory regime.
12.2 Cancelling Your Account
If you have registered with ELLERCA and prior to any transactions, decide to deactivate your Account, you may contact our User Care team at email@example.com and request deactivation. Except for the retention of such information as is required by law, your Information will be removed from the Platform.
If a transaction has occurred, the history from that transaction will remain, including but not limited to medical notes or documents, communication between and among Patient, physician or other Health Care Provider, and your appointment history.
We will retain your Information if we believe it may be necessary to prevent fraud or future abuse. We may also retain your Information and Non-Identifying Information for business purposes, such as analysis in the aggregate, Account recovery, auditing our records, enforcing our rights and obligations under our agreements or if required by law. To the extent permitted by law, ELLERCA disclaims any liability in relation to the deletion or retention (subject to the terms herein) of Information or any obligation not to delete the information.
ATTN : Privacy Officer
5925 Airport Road, Suite 200
Mississauga ON L4V 1W1
ELLERCA will receive and respond to complaints or inquiries about our policies and practices relating to the handling of Information, and will investigate all complaints. If a complaint is found to be justified, ELLERCA will take appropriate measures to respond. We will inform Patients who make inquiries or lodge complaints of other available complaint procedures, including to the Privacy Commissioner of Canada or the information and privacy commissioners of the Provinces in which such Patients live, as applicable.