Privacy Policy

Information we collect

We collect personal and personal health information necessary to provide laboratory services, including:

• Full name, date of birth, and contact information
• Ontario health card number and health insurance details
• Physician information and requisition details
• Specimen samples and diagnostic test results
• Billing and payment information
• Website usage data (cookies, analytics) — see our Cookie Policy below

How we use your information

We use your information only for the purpose for which it was collected, including:

• Processing and reporting laboratory test results to your ordering healthcare provider
• Providing you with access to your results via our patient portal
• Billing OHIP, private insurers, or you directly as applicable
• Complying with legal and regulatory obligations
• Quality assurance and laboratory accreditation requirements
• Contacting you about appointment reminders (with consent)

We do not use your personal health information for marketing purposes without your express written consent.

Sharing and disclosure

We do not sell, rent, or trade your personal information. We may disclose personal health information as permitted or required by PHIPA, including:

• To your ordering physician, specialist, or substitute decision-maker
• To other healthcare providers involved in your circle of care
• To OHIP or your private insurer for billing purposes
• To public health authorities when required by law (e.g., reportable diseases)
• To our IT service providers who are bound by confidentiality agreements

Retention

Laboratory records are retained for a minimum of ten years from the date of collection, or longer if required by applicable regulations. Health information relating to minors is retained until the individual reaches the age of 28. De-identified records may be retained indefinitely for quality improvement purposes.

Your rights

Under PHIPA, you have the right to:

• Request access to your personal health information held by us
• Request correction of inaccurate or incomplete information
• Withdraw consent for certain uses of your information (where applicable)
• File a complaint with the Information and Privacy Commissioner of Ontario

To exercise these rights, contact our Privacy Officer (details below).

Security

We implement administrative, physical, and technical safeguards appropriate to the sensitivity of your health information, including encrypted data transmission (TLS 1.3), role-based access controls, regular security audits, and staff training on PHIPA obligations.

Contact our Privacy Officer

For privacy-related enquiries, access requests, or complaints:

Privacy Officer, Med-Health Laboratories Inc.
1216 Lawrence Avenue West, North York, ON M6A 1E3
[email protected]
(416) 256-7278, ext. 9

You also have the right to contact the Information and Privacy Commissioner of Ontario if you believe your privacy rights have not been respected.