Privacy Policy

1. Introduction

Virtual Sleep Clinic ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our telemedicine services, website, and related services.

By using our services, you consent to the practices described in this Privacy Policy. We encourage you to read this policy carefully to understand our practices regarding your personal information.

2. Information We Collect

We collect various types of information to provide and improve our services:

Personal Information

• Full name, date of birth, gender
• Contact information (email address, phone number, mailing address)
• Provincial health card number (e.g., OHIP number for Ontario residents)
• Payment information (processed securely through Stripe)

Health Information

• Sleep concerns and symptoms
• Medical history and current medications
• Allergies and lifestyle factors
• Sleep test results and diagnostic data
• Treatment plans and prescriptions

Technical Information

• IP address and browser type
• Device information and operating system
• Usage data and website interactions

3. How We Use Your Information

We use your information for the following purposes:

Healthcare Delivery

• Providing telemedicine consultations and sleep assessments
• Processing and analyzing at-home sleep test results
• Creating and managing treatment plans
• Communicating with you about appointments and care

Billing and Administration

• Processing payments through Stripe
• Submitting claims to OHIP and other insurers where applicable
• Maintaining accurate medical and billing records

Communication

• Sending appointment confirmations and reminders
• Providing test results and follow-up information
• Responding to your inquiries and support requests

4. Telemedicine Services

Our virtual consultations are conducted through Doxy.me, a secure, HIPAA-compliant telemedicine platform. Doxy.me uses encryption to protect your video consultations. By using our telemedicine services, you acknowledge that:

• Video consultations may be subject to technical limitations beyond our control
• While we take all reasonable precautions, no electronic communication is completely secure
• You are responsible for ensuring a private environment during your consultation

5. Payment Processing

We use Stripe as our payment processor for private-pay consultations and sleep test kit purchases. Stripe is PCI-DSS compliant and maintains industry-leading security standards. We do not store your complete credit card information on our servers. For more information about Stripe's privacy practices, please visit their privacy policy at stripe.com/privacy.

6. Data Storage and Retention

Your personal health information is stored securely in compliance with applicable Canadian privacy laws, including PIPEDA (Personal Information Protection and Electronic Documents Act) and provincial health privacy legislation. We retain your medical records for the period required by law, typically a minimum of 10 years from your last visit, or longer if required by provincial regulations.

7. Disclosure of Information

We may disclose your information in the following circumstances:

• To other healthcare providers involved in your care (with your consent)
• To provincial health insurance programs (e.g., OHIP) for billing purposes
• To our service providers who assist in operating our services
• When required by law or to protect public safety
• With your explicit consent for other purposes

8. Your Rights

You have the right to:

• Access your personal health information
• Request corrections to inaccurate information
• Know how your information has been used and disclosed
• Withdraw consent for certain uses (subject to legal requirements)
• File a complaint with our Privacy Officer or relevant regulatory body

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date. Your continued use of our services after any changes constitutes acceptance of the updated policy.