YES Medical System is committed to protecting and securing the personal information entrusted to us by clients who use YES Products. We take care in managing personal information that may be shared with us, and have taken steps to support compliance with the provincial health privacy laws that apply.
The personal information we collect will be used in an appropriate and responsible manner. We have established procedures to comply with this Policy and have designated a Privacy Officer, who may delegate responsibilities to one or more employees as needed to oversee the protection of personal information for compliance. We will manage personal information in accordance with applicable Canadian privacy legislation.
2. Identifying Purposes for Collection of Personal Information
YES Medical System may collect personal information through YES Products for the following purposes:
- to convert our clients’ data into a format that is compatible with the use of YES Products.
- to provide support services on a as-needed basis, and assist clients with any technical difficulties they may experience when using a YES product;
- to meet any legal and regulatory requirements that are imposed upon YES Medical System.
YES Products may allow the following information to be collected, use and disclosed by healthcare providers:
a) Name, Address, Contact information (phone number and e-mail address), Demographic information, such as languages spoken, birthdate, gender, Health number.
b) Visits to your healthcare provider (e.g. date of service, healthcare provider, visit type, visit reason, referring provider, payment information); and
c) Health information recorded by health care providers and their staff when providing treatment (e.g. conditions, diagnoses, medications, diagnostic imaging, lab observations, immunizations, treatments, referrals, clinical observations, surgical history and consultations).
We collect your personal information when you contact YES Medical System to directly inquire about YES Medical System and/or YES Products. For example, when you complete any of the contact or inquiry forms on our website, we will collect your name, phone number, e-mail address, city, province, postal code, and any other information that you choose to provide to us.
We use your contact information to contact and correspond with you directly about our relationship, and your use of the website and our products. We may contact you to inform you about our products and services in different ways including by mail, email, telephone, or other means to which you have agreed. We may use your contact information to provide you with information, quote, or products and services that you have requested and to respond to customer service requests.
When you ask for customer support, we collect your name, e-mail address, phone number, and any other information that you choose to provide to us. When you report a problem, concerns or comments regarding the YES Products, we may also collect your name, e-mail address, phone number, and other information that you choose to provide to us. We collect personal information about our clients’ staff when providing them with Services like training or support on our Products. We use this information for the purposes of providing you with any information that you request (e.g. a quote) and for providing you with customer support for our products and services.
We want to learn more about how our customers and prospects who interact with our website. If you submit a request for demo, or form, you opt-in to saving your name, email address and website in cookies. These are for your convenience. These cookies only last until the session is completed.
If you have any questions, please email us at email@example.com.
3. Obtaining Consent for Collection, Use or Disclosure of Personal Information Knowledge
As described above, there are some instances in which individuals provide personal information to YES Medical System. If you install any YES Products, enter into a License and Services Agreement, or use the website, you acknowledge the notices in this Policy and you consent to YES Medical System’s collection, use, disclosure, and retention of your personal information in accordance with this Policy and as otherwise permitted by law. You may withdraw your consent at any time by giving YES Medical System a written request with reasonable notice.
YES Medical System may seek your consent for the use and disclosure of your personal information after it has been collected, but before it has been used or disclosed, for example to use your personal information for a purpose not previously identified to you. You can always choose not to provide YES Medical System with certain requested personal information, but then you may not be able to access or utilize all or part of the website or YES Products which requires personal information to fulfill the explicitly specified and legitimate purpose.
4. Limiting Collection, Use and Disclosure and Retention of Personal Information
YES Medical System limits the collection, use and disclosure of personal information to that which is necessary for purposes identified by YES Medical System.
YES Medical System only uses personal information for the purposes identified in section 2.
YES Medical System does not disclose any personal information to third parties for marketing or any other commercial purposes.
Personal information collected by YES Medical System for its use directly is maintained in accordance with applicable privacy legislation and YES Medical System retention policies and practices. YES Medical System stores your personal information for as long as it is reasonably necessary to fulfill the purposes we collected it for, except as otherwise permitted or required by applicable law or regulation.
When the applicable retention period ends, personal information is scheduled for destruction according to our record retention policies. Where the personal information is stored in an encrypted electronic format, it will be deleted. Any backups of the personal information will exist until rotated out of the backup archives.
5. Accuracy of Personal Information
YES Medical System makes reasonable efforts to keep personal information as accurate, complete and updated as is necessary to fulfil the purposes for which the information is to be used.
We have taken steps to ensure that data integrity is supported by our software. For example, when data or notes are added or updated by users with the access privileges to do so, such content changes are audited.
6. Security Safeguards
YES Medical System takes precautions to help safeguard personal information we manage through our Products or is otherwise provided to us. We have made security arrangements to protect against unauthorized access, collection, use, disclosure, and disposal of personal information, in a manner appropriate to the sensitivity of the information. These measures include various administrative and technological safeguards including unique user accounts, and role-based access based on need to know. We also use security practices to protect our systems, which include but are not limited to regular monitoring of our systems for possible vulnerabilities and attacks, server hardening, encryption of data, and employing intrusion detection and prevention systems.
As well, YES Medical System will use care when destroying or disposing of personal information to prevent unauthorized access, use or disclosure of any personal information. YES Medical System’s employees with access to personal information are required to respect the confidentiality of such information.
YES Medical System makes readily available specific information about its personal information management practices and policies upon request to firstname.lastname@example.org
8. Individual access
For YES Clients, You may request access to your personal information and/or correction of that information by contacting YES Medical System in writing the contact information noted below, with sufficient detail to enable YES Medical System to identify the personal information being sought. When you contact YES Medical System, we may ask for further information to confirm your identity and the nature of the information being sought.
After we receive your request for access to personal information, YES Medical System may provide you with an estimate of when you can expect a response. In some cases, YES Medical System may need additional time to respond to a request, in which case we will provide you with written notice of the extension. If you require the documents in an alternative format, we will make reasonable efforts to provide you with your personal information in that format.
Please note that in some cases, YES Medical System may not provide access to personal information that we hold about you, such as where the denial of access is authorized by law. There are also cases where YES Medical System may be legally required to refuse access to personal information. If YES Medical System denies your request for access to personal information, we will advise you of the reason for the refusal.
YES Medical System may charge a reasonable fee according to the cost required to retrieve and provide access to the requested information, or to provide it in a requested alternative format. We may provide an estimate of the fee in advance and in some cases, will require a deposit for all or part of the fee.
Questions or concerns regarding this Policy, including the collection of your personal information, can be directed to the YES Medical System Privacy Officer, who is responsible for ensuring YES Medical System’s compliance with this Policy. You can contact the Privacy Officer using any of the following methods:
6-175 West Beaver Creek Road
Richmond Hill, ON
YES Medical System takes any complaint about our privacy practices seriously. YES Medical System will investigate all complaints. If YES Medical System finds a complaint justified, we will take the necessary steps to resolve it. You will be informed of the outcome of the investigation regarding any complaint. If you are not satisfied with YES Medical System’s response to a complaint, you may have options to exercise various complaint procedures, including with the relevant Privacy Commissioner.