Privacy Policy
Your Privacy Matters to Us
Protecting the privacy and security of patient health information is our highest priority. This Privacy Policy explains how we collect, use, share, and protect personal health information (PHI) and personal data through our Scriberly Canada CPOE portal, specifically designed for Canadian healthcare users.
What is Personal Information?
Personal Information refers to any data that can identify an individual, either directly or indirectly. In the context of healthcare and our CPOE portal, this includes, but is not limited to:
- Personal Health Information (PHI): This is any information related to an individual’s physical or mental health, healthcare provision, or payment for healthcare services. Examples include medical history, prescription records, diagnoses, test results, treatment plans, and health conditions.
- Identifying Information: Such as names, addresses, dates of birth, health card numbers, phone numbers, email addresses, and other identifiers that can be linked to a specific patient.
- Sensitive Information: Information that requires heightened protection due to its confidential nature, including biometric data, genetic information, and any other details that reveal the individual's health status.
Protecting Personal Information is essential to maintain trust and comply with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial health information statutes.
Information We Collect
We collect patient health information necessary to support prescription orders and clinical care, including patient identifiers, medication history, allergies, and other relevant clinical data obtained from information repositories and healthcare providers. We also collect user role information and technical data to ensure secure access.
Use of Information
The information is used to authenticate users, enable accurate prescription order management, facilitate communication between LTC or Retirement homes and pharmacies, maintain service functionality, and comply with legal and regulatory requirements.
Legal Compliance
Our application complies with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), Ontario’s Personal Health Information Protection Act (PHIPA), Alberta’s Health Information Act (HIA), and applicable provincial legislation. We enter into appropriate agreements with healthcare organizations to ensure compliance when handling PHI.
Sharing of Information
PHI is shared only with authorized healthcare providers, pharmacies, and third-party service vendors under strict confidentiality agreements. In cases of business reorganizations such as mergers or acquisitions, information may be transferred with proper authorization. Disclosure may also occur if required by law or legal process.
Security Measures
We implement physical, administrative, and technical safeguards including encryption (SSL/TLS), secure data centers, firewalls, multi-factor authentication, audit logging, and regular staff training to protect data against unauthorized access, alteration, or loss.
User Rights
Users may request access to or correction of PHI through their healthcare provider. Users can update personal account information directly via the portal. For residents of Europe, data processing may occur outside Europe, including Canada and the U.S.
Data Retention
Personal information and PHI are retained only as necessary to provide services, fulfill legal obligations, or resolve disputes. After retention periods expire, data is securely deleted or anonymized to prevent reconstruction.
Opt-Out and Consent
Users and visitors may opt out of marketing communications and restrict use of their information; however, some restrictions may impact service availability or functionality. We confirm any changes that may affect service access before proceeding.
Changes to This Policy
We may update this Privacy Policy to reflect changes in practices, legal requirements, or operational needs. Updated policies will be posted on the portal, and continued use signifies acceptance.
Contact Information
For questions, concerns, or requests regarding privacy, please contact:
Privacy Officer
Email: info@scriberlycanada.ca
© Copyright Scriberly Canada - All rights reserved