Haztech Policy On The Collection, Use And Disclosure Of Personal Information
Objective and Scope of Policy
Haztech Energy Corp. (“Haztech”) facilitates the provision of Health and Safety Services to individuals through its platform and relationship with healthcare providers. Consistent with our obligations as healthcare service providers, we are dedicated to maintaining high standards of confidentiality with respect to all information that has been provided to us, with a particular focus on health information. This policy statement (the “Policy”), has been prepared to affirm our commitment to maintaining the privacy of our clients and others and to inform you of our practices concerning the collection, use and disclosure of Personal Information (as defined below) collected by Haztech. This Policy not only applies to Haztech but also to our subsidiary companies.
At Haztech, safeguarding your confidentiality and protecting your personal and health information is fundamental to the way we do business. This commitment has not changed with the arrival of new technologies such as the Internet, mobile apps and online services. Instead, it has been extended to ensure your experiences with us online are as private, secure and as safe as your dealings with us have been in traditional business.
Our obligations as healthcare service providers and information management service providers are governed, in part, by the national and provincial or state regulations that govern each of our healthcare professionals as members of their applicable regulatory bodies and associations . The obligations set out in this Policy apply to all professionals, employees, contractors and agents who provide services in connection with our delivery of services to our clients. Other applicable laws and internal policies govern the protection of Personal Information of partners, associates and employees of Haztech. It is intended that your interaction directly with the professionals employed by Haztech will be treated in the same manner as any other health professional-patient interaction and the health professional will be responsible for your Personal Information collected by them in trust.
For the purposes of this Policy, “Demographic Information” means any information other than personal Health Information (as defined below), recorded in any form, about an identified individual, or an individual whose identity may be inferred or determined from the information. This policy does not cover any information, recorded in any form, about more than one individual where the identity of the individuals is not known and cannot be inferred from the information (“Aggregated Information”). Haztech retains the right to use Aggregated Information in any way that it determines appropriate.
For the purposes of this Policy, “Health Information” with respect to an individual, recorded in any form, means (a) information concerning the physical or mental health of the individual; (b) information concerning any health service provided to the individual; (c) information concerning the donation by the individual of any bodily substance or information derived from the testing or examination of a body part or bodily substance of the individual; (d) information that is collected in the course of providing health services to the individual; or (e) information that is collected incidentally to the provision of health services to the individual.
Demographic Information and Health Information are referred to collectively in this document as “Personal Information”.
Protecting Your Privacy – Our Commitment to You
At Haztech, protecting your privacy means that (i) we keep your information and your relationship with us in strict confidence; (ii) your information is not sold; (iii) you have control over how we obtain, use, and give out information about you; (iv) you have access to the information we have about you; and (v) we respect your privacy when we market our products and services.
PIPEDA has as its core, 10 guiding principles, as also set out in the Canadian Standards Association’s Model Code for the Protection of Personal Information, which is incorporated into the PIPED Act.
These principles are:
We have designed this Policy to address all of these 10 guiding principles.
What Information is Collected? Why does Haztech Collect Personal Information?
Having up-to-date and accurate information helps us provide you with the best possible service and recommendations and, in certain cases, to offer additional services we believe might be of benefit to you.
At Haztech, we generally collect two types of information from our clients and from web site visitors. With your consent, we collect Personal Information. We may also collect anonymous/non-personal information.
Personal Information is information that refers to you specifically, whether factual or subjective. With your consent, we may gather personal information from you in person, over the telephone or by corresponding with you via mail or the Internet.
The types of Personal Information that may be collected and maintained in your file for the purposes of providing Health and Safety Services to you may include but are not limited to your:
Name (First and Last)
Telephone Number (Including Cell Phone Number)
Provincial Health Insurance Number (Canadian Clients Only)
Date of Birth
Personal Medical History
Family Medical History
Name and Contact Information of your Family Physician/Primary Care Provider
Name and Contact Information of your Preferred Pharmacy to fill Prescriptions
Results of Diagnostic Tests (blood tests, x-rays, MRI, CT, etc.)
Dates of Consultations
Results of Medical Examinations, etc.
For every consultation, whether in person, over the telephone or by corresponding with you via mail or the Internet, health providers must collect, organize, hold and maintain a medical chart with information relevant to the medical problem or incident expressed. They maintain and safeguard this information in trust. For more information related to their obligations, see “Trustees” below.
While Haztech facilitates the provision of Health and Safety Services as described above, Haztech itself collects only such information from individuals or organizations as is required for the purposes of providing services or information to them, marketing other services or products to them (as applicable), and for aggregated statistical analyses. To the greatest extent possible, we will collect Personal Information directly from the individual concerned. In certain cases, we will be required to collect Personal Information from other sources, including but not limited to your treating physician, consulting physicians, psychologists, pharmacists, public health-related data contained in the eHealth Saskatchewan’s eHRViewer, and insurers. In those cases, we will request your consent to obtain information from those sources or make known to you that this information was shared with us for the purpose of providing health services to you.
As outlined in the PIPED Act, personal information does not include the name, title, business address or telephone number of an employee of an organization.
We collect Personal Information for different purposes, depending on the type of service we are providing to you, as applicable.
The purposes for collecting this information to provide Health and Safety Services to you, which may include:
When you visit our websites, information is not collected that could identify you personally unless you choose to provide it voluntarily. You are welcome to browse these websites at any time anonymously and privately without revealing any personal or health information about yourself.
To help us better understand our markets, we may also gather information for analytical purposes by conducting anonymous customer surveys, by extracting demographic information from existing files and from Statistics Canada.
Ownership of Personal Information
It is important to note that as a client, you own your Personal Information. This Policy outlines how you can make changes to, request access to, or obtain copies of your Personal Information. However, the format in which your Personal Information is kept, including but not limited to the medical records, charts, film, software, databases, applications, methodologies and processes for gathering, processing and storing such Personal Information belongs to Haztech and/or our physicians (as it applies to certain Health Information), as applicable.
How does Haztech Obtain Consent to use and Disclose Personal Information?
At Haztech, we are obliged to keep your Demographic Information and Health Information confidential except when authorized by you. We use Personal Information for the purposes described above.
In some cases, your consent to the use and/or disclosure of your Personal Information will be obtained verbally or in writing, through an informed consent form. In other cases, such as when you book an appointment over the Internet, your consent will be obtained electronically.
Remember, the choice to provide us with Personal Information is always yours, and your consent for us to use your Personal Information can be withdrawn in writing at any time. However, in providing Health and Safety Services, your decision to withhold particular details may limit the services we are able to provide and make it more difficult for us to advise you, provide services to you, ensure the follow-up required by certain conditions, or suggest appropriate alternatives.
If we are unable to accommodate your request based on the information that has been provided, we may ask for additional details in order to identify other ways to be of assistance. In some instances, we may also maintain a file containing contact history that is used for customer inquiry purposes.
In the course of daily operations, access to private, sensitive and confidential information is restricted to authorized employees who have a legitimate business purpose and reason for accessing it. For example, when you call us, visit our offices, or email us, our designated employees will access your information to assist you in providing services to you. It is important to note that only medical professionals (nurses, physicians, technicians, etc.) or others on a need-to-know basis will have access to your Health Information.
As a condition of their employment, all employees of Haztech are required to abide by the privacy standards we have established. They are also required to work within the principles of ethical behaviour and must follow all applicable laws and regulations.
Unauthorized access to and/or disclosure of client information by an employee of Haztech is strictly prohibited. All employees are expected to maintain the confidentiality of Personal Information at all times and failing to do so will result in appropriate disciplinary measures, which may include dismissal.
Outside Service Suppliers
At Haztech, in order to provide certain services, we may contract outside organizations to perform specialized services. Haztech will only undertake a contract with these organizations if they meet or exceed the same safety and privacy standards that we uphold to protect your Personal Information. These standards include reasonable policies, procedures and safeguards (including physical, technological and organizational measures) designed to protect the privacy and security of personal information. Our trusted service suppliers may at times be responsible for processing and handling some of the information we receive from you.
Haztech’s outside service suppliers may store and/or process personal information outside of Canada. When information is stored or processed outside of Canada, it may be subject to the laws of and be accessible by legal authorities in such other jurisdictions. For greater certainty, Haztech has also taken appropriate technical, organizational, and legal steps to secure this information.
If you have any questions about our use of outside service suppliers and/or the types of Personal Information which they may process or handle on our behalf, please contact us (see the Contact Us section below for contact details) and we would be happy to provide additional information to you.
If you do not agree to us processing your information through any of these service suppliers, you have the right to stop using our platform.
When Would we use your Personal Information Without your Consent?
Please note that there are circumstances where the use and/or disclosure of Personal Information may be justified or permitted or where Haztech is obliged to disclose information without your consent. Such circumstances may include:
Where obliged or permitted to disclose information without consent, Haztech will not disclose more information than is required, and when disclosed in the context of an emergency that threatens the life, health or security of an individual, we will inform the individual afterwards in writing regarding the disclosure. Haztech does not sell, trade, barter or exchange for consideration any Personal Information it has obtained.
Personal Information may also be subject to transfer to another organization in the event of a merger or change of ownership of all or part of Haztech. This will occur only if the parties have entered into an agreement under which the collection, use and disclosure of the information is restricted to those purposes that relate to the business transaction, including a determination whether or not to proceed with the business transaction, and is to be used by the parties to carry out and complete the business transaction.
Accuracy of your Personal Information
At Haztech, decisions, including healthcare recommendations, are often made based on the information we have. Therefore, it is important that your personal and health information is accurate and complete. We endeavour to ensure that any Personal Information provided and in our possession is as accurate, current and complete as necessary for the purposes for which Haztech uses that information.
As a client, you can request to check your information to verify, update and correct it (where applicable). Requests for access to your Personal Information should be made in writing (see the Contact Us section in this document for the information.) If you only wish to view the original record, one of our staff must be present to maintain the integrity of the record. Again, a request to do so must be made in writing, and we will provide you with a reasonable cost estimate that reflects the cost of staff time.
As per our obligations as healthcare service providers, we will only refuse access to medical records in extremely limited circumstances; for example, when the information could reasonably be expected to seriously endanger the mental or physical health or safety of the individual making the request or another person, or if disclosure of the information would reveal personal health information about another person who has not consented to the disclosure. In this case, we will do our best to separate out this information and disclose only what we can.
Correcting your Personal Information
For corrections to your Health Information, you can request changes to be made to your record and this request will be documented by an annotation in the record. However, we will only make changes to reflect factual inaccuracies, rather than correcting medical opinions, diagnoses, laboratory evaluations or other medical evidence, which we as healthcare providers are required to keep.
All requests to access or to make corrections and changes to your Personal Information must be made to us in writing.
We will deal quickly with your request to see your information and always respond to you within 30 days. If we need to extend the time, or we have to refuse your request, we will tell you why, subject to any legal restrictions, and we will notify you of the new deadline, the reasons for the extension, and your rights under applicable legislation respecting the extension.
Retention and Disposal of Personal Information
Haztech keeps Personal Information only as long as it is required for the reasons it was collected. The length of time we retain information varies, depending on the product or service, the jurisdiction in which the information has been collected and the nature of the information. This period may extend beyond the end of a person’s relationship with us but it will be only for so long as it is necessary for us to have sufficient information to respond to any issues that may arise at a later date.
For Health Information, depending on the particular service offered including both customer entered data and provider entered data, we retain patient medical records at least as long as required by law and provincial or state health regulations. In certain cases, this is 3 to 7 years after the examination, or 7 years after the last entry in the medical record. For minors, this is 7 years after they reach the age of majority.
Currently, the principal places in which Haztech holds Personal Information are in the cities in which Haztech has offices and nearby municipalities where off-site storage facilities may be located, or, in instances where Haztech uses third-party contractors to provide services to you (e.g. Physicians who perform independent medical evaluations, or nurses who perform paramedical examinations), at such premises for those third-party contractors.
Haztech may use service providers who operate in jurisdictions outside of Canada (example, the USA) and your Personal Information may be subject to the laws in those jurisdictions. Where possible, Haztech has designated that all Personal Information be maintained in data centres located in Canada, however information does flow and is temporarily stored in other jurisdictions.
When your Personal Information is no longer required for Haztech’ purposes, we have procedures to destroy, delete, erase or convert it into an anonymous form. This includes the service providers we contract with.
We destroy our records in a way that protects patient privacy in accordance with regulations made under appropriate provincial or state legislation. Although most of the time, all of your records are electronic, should we have any paper documents, we use supervised shredding contractors who must adhere to contractual privacy obligations.
At Haztech, we use technology and maintain security standards to ensure that your Personal Information is protected against unauthorized access, disclosure, inappropriate alteration or misuse. All safety and security measures are also appropriate to the sensitivity level of your information. Haztech further protects Personal Information by restricting access to it to those employees that the management of Haztech has determined need to know that information in order that Haztech may provide its services.
Electronic client files are kept in a secured environment with restricted access. Paper-based files are stored in locked fire-resistant filing cabinets or filing rooms equipped with sprinkler systems. Access to these areas is also highly restricted.
We manage our server environment appropriately and our firewall infrastructure is strictly adhered to. Our security practices are reviewed on a regular basis and we routinely employ current technologies to ensure that the confidentiality and privacy of your information is not compromised.
Our computer-security specialists build security into all our computer systems. For information stored in electronic format, this protects your information at all times, when it is stored in data files or handled by our employees. Our systems also protect your information if and when it is transmitted, for example, between our offices.
Our websites or web applications where Personal Information is collected or stored use Secure Socket Layer (SSL) and 128 bit encryption technologies to enhance security when you visit the secured areas of these sites. SSL is the industry standard tool for protecting and maintaining the security of message transmissions over the Internet. When we access or send information from secured sites, encryption will scramble your data into an unreadable format to inhibit unauthorized access by others.
Communicating Personal Information to Haztech
In terms of communicating Personal Information to Haztech, you may wish to note that there is no method (other than in face-to-face consultation with our physicians or nurses) of transmitting or storing data that is absolutely secure. While the physical characteristics of each are different, mail, telephone calls, faxes and transmissions over the Internet are all susceptible to possible loss, misrouting, interception and misuse of the information being communicated or transmitted.
As do many organizations, Haztech attempts to strike a reasonable balance between security and convenience. In communicating with clients and others, Haztech often requests the right to use a method of communication that is less secure than some of its less convenient alternatives. An example of this is email. At this time, when we use email, it may be sent as unencrypted plain text. We do this because Haztech believes that many of our clients and others cannot readily process encrypted email. This is done for their convenience but has the security concern that, if misrouted or intercepted, it could be read more easily than encrypted email.
Haztech Web Sites
Haztech provides clients and others with general access to public websites. Our web servers track general information about visitors such as their domain name and time of visit. Haztech’s web servers also collect and aggregate information regarding which pages are being accessed as well as information volunteered by visitors through online surveys or subscriptions to electronic newsletters. This information is used internally, only in aggregate form, to better serve visitors by helping us to:
Amendment of Haztech Practices and this Policy
Haztech will, from time-to-time, review and revise its privacy practices and this Policy. In the event of any amendment, an appropriate notice will be posted on Haztech’s website. Policy changes will apply to the information collected from the date of posting of the revised Policy to Haztech’s website as well as to existing information held by Haztech.
Contacting Us – Questions/Suggestions About This Policy
In the event an individual has questions about (a) access to Personal Information; (b) the collection, use, management or disclosure of your Personal Information; or (c) this Policy, that person should contact Haztech as outlined below.
At Haztech, we are committed to maintaining and protecting the Personal Information under our control. In fulfilling this mandate, we have designated an individual (and in certain cases, individuals) who are accountable for our compliance with this Policy.
If you have any concerns, inquiries or suggestions regarding this Policy, please submit them in writing (either by mail or email) to:
Attention: Privacy Officer
Haztech Energy Corps
1139 Weaver St.
Regina, SK S4N 5Y2
Last updated: November 3, 2021
Haztech is committed to safeguarding the personally identifiable information that you share with us online. Generally, you can browse our website, www.haztech.com, and any of our subdomains (collectively this “Site”), without sharing any personal information. However, should you wish to retain access to our proprietary and confidential resources (the “Resources”), or subscribe to our newsletter, or submit a form, you will be required to voluntarily submit personal information.
We may also collect information on how you use this Site, such as resources browsed, searched, and downloaded; the frequency and duration of visits, and your source Internet Protocol (“IP”) address. Please note, this policy does not apply to information we may collect offline.
What Information We Collect
Personally Identifiable Information
This is information that may be used to identify you as an individual, such as your email address, name, home or work address, or telephone number. We may collect this information in a number of voluntary ways on this Site, including, but not limited to, forms submitted to book appointments and request services, and email messages to any Haztech email address. This information is used to respond to your requests and questions. We may also use this information to communicate with you about other relevant topics that may be of interest.
Non-Personally Identifiable Information We Collect by Automated Means
Non-personally Identifiable Information refers to information that does not by itself identify a specific individual. We may collect this information in a number of ways on this Site, including, but not limited to, how you use this Site, such as resources browsed, searched, and downloaded, and the frequency and duration of visits. As well, the Site may automatically collect and record other non-personal information, such as your IP address, browser type, unique device identifiers, the referring webpage, pages visited, and search terms.
We use this information to make your experience with our Site informative and relevant. By collecting this information, we learn how to tailor our Site to our visitors and create meaningful website experiences for our online users.
A cookie is a data file that certain websites write to your computer’s hard drive when you visit such sites. A cookie file can contain information, such as a user identification code, that the site uses to track the pages you have visited, but the only personal information a cookie can contain is information you supply yourself.
A cookie can’t read data off your hard disk or read cookie files created by other sites. We may collect information from your web sessions by using cookies, to determine, for example, user traffic patterns, and the effectiveness of our navigational structure.
Most website browsers automatically accept cookies, but you can usually change your browser settings to display a warning before accepting a cookie, or to refuse all cookies. You don’t need to have cookies turned on to use/navigate through many parts of this Site. However, you may have to accept the receipt of cookies to access some Resources on this Site.
We may use third-party web analytics services to analyze how users use the Site. This can include Google Analytics, which uses technologies such as cookies to gather user information. The information collected by the cookies about your use of the Site can include your IP address, the URL visited, page view date and time, and other browser metadata and will be transmitted and stored by Google on servers in the United States.
Google may compile reports on the Site activity for other website operators who are providing services related to website activity and internet usage. Google may also transfer this information to third parties when required by law, or when such third parties process information on behalf of Google.
Amazon CloudWatch Real User Monitoring
We may also use the third-party Amazon CloudWatch Real User Monitoring service, which uses technologies such as cookies to gather user information. The information collected by the cookies about your use of the Site can include your IP address, the URL visited, page view date and time, and other browser metadata and will be transmitted and stored by Amazon on servers in the United States.
Amazon may also transfer this information to third parties when required by law, or when such third parties process information on behalf of Amazon.
We respect the privacy of children. This Site is not intended for children and we do not knowingly solicit personal data from or communicate with children under the age of 13. As well, the Site is not intended for incapacitated persons and we do not knowingly solicit personal data from or communicate with incapacitated persons.
Further, this Site is created for use by adults. By using the Site, you are confirming that you are at least 18 years old or using the Site with the permission of a parent or guardian.
If you become aware that any child under your care, or person unable to provide valid consent, has provided us with information, please contact us by email at firstname.lastname@example.org. You can also write to us at the address listed at the end of this policy.
How We Use Your Information
If you choose to provide Haztech with your personal information, where appropriate, Haztech or subsidiary, representative, sales, or affiliated sales channel representative, may use this information to contact you, in order to further our relationship with you.
Sharing Your Information
In cases where we need to disclose web usage reports to non-Haztech subsidiaries or affiliates, your personal information will remain anonymous. We do not disclose, sell, exchange nor trade your personally identifiable information to commercial mailing lists.
Links To Other Websites
The Site may provide links to other websites for your convenience and information. These websites may operate independently from us and users should note that linked sites may have their own privacy notices or policies. We strongly encourage our users to review any linked website policies in order to understand how they may collect, use, and disclose your personal information.
Maintaining Your Information
We take information security issues seriously. Consequently, any personally identifiable information is stored and protected on servers with adequate security measures. We will cease all communication and use of personally identifiable information upon your request. Your privileges for access to the Resources on this Site may then be suspended.
We only keep personal information as long as it is necessary to fulfill the purposes for which it was collected. We also keep any information that is required by law.
We take the security of information seriously. We are committed to using reasonable measured to protect any personal information we may collect. However, due to the oddity and open nature of the internet, we cannot fully guarantee that the information stored on this site, or direct communications between you and us, is absolutely secure.
Although we take steps to protect your data, by using the Site you consent that the transmission of data is at your own risk. By using the Site, you agree to assume all risk in connection with data sent, collected, or stored by us.
Access, Updates, and Your Security Choices
Haztech provides means for you to see and control the information that Haztech collects. Haztech uses an opt-in standard for sending you marketing emails, which means Haztech will only do so with your express consent. At any time, you can ask us to halt any marketing communications by email by clicking on the Unsubscribe link within the marketing email. Please note that if you opt out, we may still send you non-promotional emails, such as receipts or information about your account.
If you wish to be informed what personal data we hold about you, or if you want it to be removed from our systems, please contact us at email@example.com. In certain circumstances, you have the following data protection rights:
Please note that we may ask you to verify your identity before responding to such requests.
If you are a resident of the European Economic Area (EEA), you have the right to complain to a Data Protection Authority about our collection and use of your personal data. For more information, please contact your local data protection authority in the EEA. If you are a resident of the United Kingdom (UK), you have the right to complain to the Information Commissioner’s Office (ICO) about our collection and use of your personal data (https://ico.org.uk/make-a-complaint/).
You also have the ability to adjust your advertising preferences on social media websites by adjusting your Settings on the individual platform. For example, you can adjust the type of Instagram or Facebook ads you receive through your Facebook Settings or the type of Google ads you receive through your Google Settings.
Or, write to us at:
Haztech Energy Corps
1139 Weaver St.
Regina, SK S4N 5Y2
You may also contact us at the above addresses at any time to learn more or request a quote.
Changes To This Statement
Privacy Notice Effective Date: August 4, 2022
Medically unstable patients
Patients requiring emergency transport
Patients requiring treatment during transfer
Patients requiring monitoring or any medical intervention during transport