CareVibe Medical Clinic Inc.
Privacy Policy
Last Updated: June 1, 2026 | Effective: June 1, 2026
At CareVibe Medical Clinic Inc., your privacy is important to us. This Privacy Policy explains what information we collect when you visit www.adhdcare.ca, book an appointment, or use our services — and how we use, protect, and share it. Please read this policy carefully. By using our website or services, you agree to the practices described below.
We are a Health Information Custodian under Ontario's Personal Health Information Protection Act (PHIPA) and a privacy-responsible organization under BC's Personal Information Protection Act (PIPA). Both laws give you meaningful rights over your personal information.
At CareVibe Medical Clinic Inc., your privacy is important to us. This Privacy Policy explains what information we collect when you visit www.adhdcare.ca, book an appointment, or use our services — and how we use, protect, and share it. Please read this policy carefully. By using our website or services, you agree to the practices described below.
We are a Health Information Custodian under Ontario's Personal Health Information Protection Act (PHIPA) and a privacy-responsible organization under BC's Personal Information Protection Act (PIPA). Both laws give you meaningful rights over your personal information.
1. Who We Are
CareVibe Medical Clinic Inc. is a federally incorporated Canadian corporation operating a virtual ADHD assessment and management clinic serving adults (18+) in Ontario and British Columbia. Our services are delivered entirely online through our website and secure video platform.
Business Name: CareVibe Medical Clinic Inc.
Website: www.adhdcare.ca
Privacy Email: info@adhdcare.ca
Provinces Served: Ontario and British Columbia
Business Name: CareVibe Medical Clinic Inc.
Website: www.adhdcare.ca
Privacy Email: info@adhdcare.ca
Provinces Served: Ontario and British Columbia
2. Information We Collect
We collect two types of information: information you give us directly, and information collected automatically when you use our website.
2.1 Information You Provide Directly
When you book an appointment, register as a patient, or contact us, you may provide:
2.2 Information Collected Automatically
When you visit www.adhdcare.ca, our website may automatically collect:
This technical data does not identify you personally. It is used to improve our website and understand how visitors find and use our services.
2.3 Information We Do NOT Collect
2.1 Information You Provide Directly
When you book an appointment, register as a patient, or contact us, you may provide:
- Full name, date of birth, email address, and phone number
- Province of residence and mailing address
- Medical and psychiatric history, current medications, and health concerns
- ADHD symptom questionnaire responses
- Government-issued photo ID — for identity verification purposes only
- Payment information — processed securely through Stripe/Moneris (we never store raw card numbers)
- Communications you send us — emails, portal messages, or voicemails
2.2 Information Collected Automatically
When you visit www.adhdcare.ca, our website may automatically collect:
- IP address and approximate geographic location (city/region level only)
- Browser type, device type, and operating system
- Pages visited, time spent on pages, and referring website
- Cookie and session data — see Section 8 (Cookies) for details
This technical data does not identify you personally. It is used to improve our website and understand how visitors find and use our services.
2.3 Information We Do NOT Collect
- We do not collect sensitive information (racial or ethnic origin, political opinions, religious beliefs) unless directly relevant to your care and provided by you
- We do not collect information from children under 18 — our services are for adults only
- We do not purchase, rent, or obtain personal information from third-party data brokers
3. How We Use Your Information
We use your personal information only for legitimate purposes:
We will never: sell your personal information, share it with advertisers, use it for marketing without your consent, or use it for any purpose unrelated to your care or the operation of our clinic.
Purpose | Legal Basis |
Providing ADHD assessment, diagnosis, and medication management | Treatment — your consent and our professional duty of care |
Booking and managing your appointments | Contractual necessity and your consent |
Sending appointment reminders and clinical communications | Your consent at registration |
Processing payments and issuing receipts | Contractual necessity |
Verifying your identity before care is provided | Legal obligation (CNO/BCCNM standards) and patient safety |
Sending prescriptions to your pharmacy | Treatment — required for your care |
Meeting mandatory reporting and regulatory obligations | Legal obligation |
Improving our website and understanding visitor behaviour (anonymized) | Legitimate business interest |
Responding to your inquiries | Your request / consent |
We will never: sell your personal information, share it with advertisers, use it for marketing without your consent, or use it for any purpose unrelated to your care or the operation of our clinic.
4. How We Share Your Information
We do not sell or rent your personal information. We share it only in the following limited circumstances:
4.1 Your Healthcare Team (Circle of Care)
With your knowledge, we may share relevant health information with other providers directly involved in your care — such as your family physician or pharmacist — to support coordinated, safe treatment. This is standard practice in healthcare and is permitted under PHIPA and BC PIPA without requiring separate consent.
4.2 At Your Request
If you authorize us to share your records with a third party (e.g., an insurance company, employer, or another provider), we will do so using our Consent to Disclose Personal Information Form (ADM-003A).
4.3 Service Providers (Third-Party Vendors)
We use a small number of trusted Canadian service providers to operate our clinic. These providers access your information only to perform services on our behalf and are bound by strict confidentiality agreements:
We aim to keep all patient health data on Canadian servers. If any vendor stores data outside Canada, we will update this policy and notify you.
4.4 When Required by Law
We may disclose your personal information without consent when required by law, including:
We will notify you of any mandatory disclosure where it is safe and legally permitted to do so.
4.1 Your Healthcare Team (Circle of Care)
With your knowledge, we may share relevant health information with other providers directly involved in your care — such as your family physician or pharmacist — to support coordinated, safe treatment. This is standard practice in healthcare and is permitted under PHIPA and BC PIPA without requiring separate consent.
4.2 At Your Request
If you authorize us to share your records with a third party (e.g., an insurance company, employer, or another provider), we will do so using our Consent to Disclose Personal Information Form (ADM-003A).
4.3 Service Providers (Third-Party Vendors)
We use a small number of trusted Canadian service providers to operate our clinic. These providers access your information only to perform services on our behalf and are bound by strict confidentiality agreements:
Provider | Purpose |
Juvonno | EMR, scheduling, video appointments, secure messaging, payments |
Stripe / Moneris | Payment processing — tokenized; no raw card data stored by us |
Tilda webhosting | Website hosting and analytics |
IONOS and zoho email | Secure email communications |
We aim to keep all patient health data on Canadian servers. If any vendor stores data outside Canada, we will update this policy and notify you.
4.4 When Required by Law
We may disclose your personal information without consent when required by law, including:
- Mandatory reporting obligations — suspected child abuse or neglect (Ontario Children's Aid Society; BC Child Protection Line 1-800-663-9122)
- Court order or subpoena
- Public health reporting obligations under provincial legislation
- Preventing serious bodily harm — if we believe disclosure is necessary to protect your safety or the safety of another person (PHIPA s.40; BC PIPA s.18)
We will notify you of any mandatory disclosure where it is safe and legally permitted to do so.
5. Data Storage and Security
5.1 Where Your Data Is Stored
5.2 Security Measures
Despite our best efforts, no method of electronic transmission or storage is 100% secure. If you have concerns about the security of your information, please contact us at info@adhdcare.ca.
- All health records are stored in Juvonno — a Canadian-hosted, PHIPA-compliant Electronic Medical Record with AES-256 encryption
- Video appointments use Juvonno's secure, Canadian-hosted, end-to-end encrypted video platform
- Payment data is tokenized through Stripe/Moneris — raw card numbers are never stored by CareVibe Medical Clinic Inc.
- We do not store personal health information on personal cloud storage (Google Drive, iCloud, Dropbox) or U.S.-based servers
Your health data stays in Canada. All clinical platforms used by CareVibe Medical Clinic Inc. store data on Canadian servers. |
5.2 Security Measures
- End-to-end encryption for video appointments and secure messaging
- Multi-factor authentication on all clinical platforms
- Role-based access — only authorized staff can access patient records
- PCI-DSS Level 1 compliant payment processing
- Regular security reviews and vendor assessments
Despite our best efforts, no method of electronic transmission or storage is 100% secure. If you have concerns about the security of your information, please contact us at info@adhdcare.ca.
6. How Long We Keep Your Information
We retain your personal health information for as long as required by law:
When records are no longer required, they are destroyed securely — electronic records are permanently deleted using secure wipe protocols, and any paper records are cross-cut shredded.
Record Type / Province | Retention Period |
Health records — Ontario patients | Minimum 10 years from date of last entry |
Health records — BC patients | Minimum 16 years from date of last entry |
Website analytics data (anonymized) | Up to 26 months (standard analytics retention) |
Payment records | 7 years (CRA requirement for business records) |
General inquiries and emails (non-clinical) | 2 years, or until resolved |
When records are no longer required, they are destroyed securely — electronic records are permanently deleted using secure wipe protocols, and any paper records are cross-cut shredded.
7. Your Privacy Rights
Under PHIPA (Ontario) and BC PIPA, you have the following rights regarding your personal information:
Right to Access
You may request a copy of your personal health information held by CareVibe Medical Clinic Inc. at any time. Send a written request to [clinic email]. We will respond within 30 days. A reasonable administrative fee may apply.
Right to Correction
If you believe your health information is inaccurate or incomplete, you may request a correction. We will respond within 30 days and either make the correction or provide written reasons for declining.
Right to Withdraw Consent
You may withdraw consent to certain uses of your personal information at any time, subject to legal and contractual restrictions. Note that withdrawing consent may affect our ability to provide care. Contact us at [clinic email] to discuss.
Right to Know About Disclosures
You have the right to know who has accessed your health record. You may request a record of disclosures by contacting us at [clinic email].
Right to File a Complaint
If you believe your privacy rights have been violated, you may:
– Toll-free: 1-800-282-1376
Right to Access
You may request a copy of your personal health information held by CareVibe Medical Clinic Inc. at any time. Send a written request to [clinic email]. We will respond within 30 days. A reasonable administrative fee may apply.
Right to Correction
If you believe your health information is inaccurate or incomplete, you may request a correction. We will respond within 30 days and either make the correction or provide written reasons for declining.
Right to Withdraw Consent
You may withdraw consent to certain uses of your personal information at any time, subject to legal and contractual restrictions. Note that withdrawing consent may affect our ability to provide care. Contact us at [clinic email] to discuss.
Right to Know About Disclosures
You have the right to know who has accessed your health record. You may request a record of disclosures by contacting us at [clinic email].
Right to File a Complaint
If you believe your privacy rights have been violated, you may:
- Contact our Privacy Officer first: info@adhdcare.ca
- If you remain unsatisfied, you may file a complaint with the Office of the Privacy Commissioner of Canada:
– Toll-free: 1-800-282-1376
8. Cookies and Website Analytics
Our website (www.adhdcare.ca) may use cookies and similar tracking technologies to improve your browsing experience and understand how visitors use our site.
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and understand visitor behaviour.
Types of Cookies We Use
You can control cookies through your browser settings at any time. Disabling essential cookies may affect your ability to use our booking system.
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and understand visitor behaviour.
Types of Cookies We Use
Type | Purpose | Can You Opt Out? |
Essential cookies | Required for the website to function (e.g., booking system, security) | No — required for site to work |
Analytics cookies | Help us understand how visitors use our site (anonymized data only) | Yes — via browser settings or cookie banner |
Marketing/ad cookies | We do not use advertising cookies or serve ads on our website | N/A — not used |
You can control cookies through your browser settings at any time. Disabling essential cookies may affect your ability to use our booking system.
9. Google Ads and Analytics
CareVibe Medical Clinic Inc. may use Google Ads to promote our services and Google Analytics to understand website traffic. Both services collect anonymized data about website visits.
We do not use Facebook Pixel, TikTok tracking, or other social media advertising trackers on our website.
- Google Analytics collects anonymized, aggregated data — it does not identify you personally
- We do not use Google Ads remarketing (following individual users across websites)
- Google Ads healthcare advertising complies with Google's healthcare advertising policies — we do not target based on health conditions
- You can opt out of Google Analytics tracking at: tools.google.com/dlpage/gaoptout
- You can manage your Google ad preferences at: adssettings.google.com
We do not use Facebook Pixel, TikTok tracking, or other social media advertising trackers on our website.
10. Children's Privacy
CareVibe Medical Clinic Inc. provides services to adults (18+) only. Our website is not directed at children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us immediately at info@adhdcare.ca so we can delete it.
11. Links to Other Websites
Our website may contain links to external websites (e.g., CNO, BCCNM, health resources). These websites have their own privacy policies. CareVibe Medical Clinic Inc. is not responsible for the privacy practices of any third-party websites. We encourage you to review the privacy policy of any external site you visit.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will:
Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.
- Update the "Last Updated" date at the top of this policy
- Post a notice on our website for at least 30 days
- Notify registered patients by email if the changes affect how we use their health information
Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.
13. Contact Us — Privacy Questions
If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal information, please contact our clinic:
If you are not satisfied with our response, you may escalate your complaint to:
Email: info@adhdcare.ca Website: www.adhdcare.ca We will acknowledge your inquiry within 2 business days and provide a full response within 30 days. |
If you are not satisfied with our response, you may escalate your complaint to:
Ontario Information & Privacy Commissioner of Ontario www.ipc.on.ca 1-800-387-0073 | British Columbia Office of the Information & Privacy Commissioner for BC www.oipc.bc.ca 250-387-5629 |