Privacy Policy

Intrepid Health Inc.

Effective Date: January 20, 2026 

Intrepid Health Inc. (“Intrepid Health,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of personal information and personal health information entrusted to us. We collect, use, disclose, and safeguard information in accordance with applicable Canadian privacy laws, including:

• The Personal Information Protection and Electronic Documents Act (PIPEDA)
• Applicable provincial personal health information legislation, including the Personal Health Information Protection Act, 2004 (PHIPA) in Ontario, where applicable

This Privacy Policy explains how we handle personal information and personal health information, and outlines your rights as a patient or client.

Definitions

• Personal Information: Information about an identifiable individual, excluding business contact information.
• Personal Health Information (PHI): Identifying information relating to an individual’s physical or mental health, healthcare history, diagnosis, treatment, or payment for healthcare services.

Scope of This Policy

This Privacy Policy applies to all personal information and personal health information collected by Intrepid Health Inc. in the course of providing healthcare services, operating our clinics, managing our business, and interacting with patients, clients, employees, contractors, and partners.

Accountability

Intrepid Health Inc. is responsible for all personal information and personal health information under its control. We have designated a Privacy Officer who is accountable for ensuring compliance with applicable privacy legislation and for responding to privacy-related inquiries or complaints.

Please contact us at

team@intrepidhealthgroup.com

250 Dundas St W Suite 106 Mississauga, ON L5B 1J2

Phone: (905) 275-2273

Collection of Information

We collect only the information necessary to provide safe, effective, and appropriate healthcare services and to meet legal and regulatory requirements. We collect personal health information about you in accordance with the Personal Health Information Protection Act, 2004 (PHIPA) to provide or assist in providing you with excellent health care. 

We may collect this information either from you directly or, in some circumstances, from a person designated to make care decisions on your behalf. The personal health information that we collect may include your contact information, health card number and medical history. We may also collect personal health information about you from other sources if we have obtained your consent to do so or if the law permits. 

Information we may collect includes:

• Identifying information (name, date of birth, contact information)
• Health information (medical history, diagnoses, treatment plans, medications, lab results)
• Appointment and billing information (OHIP number, private)
• Insurance or payment-related information
• Consent forms and clinical documentation

Information is collected directly from you whenever possible, or from authorized third parties (e.g., referring providers, laboratories) with your consent or as permitted by law.

Use of Personal and Health Information

We use personal information and personal health information for purposes that include, but are not limited to:

• Providing, managing, and coordinating healthcare services
• Diagnosing and treating medical conditions
• Communicating with you about your care
• Processing payments and insurance claims
• Prescriptions and treatment documentation
• Quality assurance, risk management, and patient safety
• Complying with legal, regulatory, and professional obligations

We do not use your information for purposes unrelated to your care without your consent, unless permitted or required by law.

Disclosure of Information

We may disclose personal or health information only as permitted or required by law, including:

• To healthcare providers involved in your care
• To laboratories, pharmacies, or other service providers supporting your treatment
• To regulatory bodies, insurers, or government authorities as required
• To third-party service providers who assist us with operations (e.g., electronic medical record systems), under strict confidentiality agreements

We do not sell or trade personal or health information.

Consent

Consent may be express or implied, depending on the circumstances and the sensitivity of the information. By receiving care from Intrepid Health Inc., you generally provide implied consent for the collection, use, and disclosure of your personal health information for purposes related to your care.

Relevant health information is shared with other providers involved in the patient’s care, including (but not limited to): 

• other doctors in this practice, and
• Other allied health professionals in this practice (i.e. physician assistant, nurse)

Without Consent (Disclosures mandated or authorized by law)

There are limited situations where the physician is legally required to disclose personal information without the patient’s consent. Examples of these situations include (but are not limited to):

• Billing provincial health plans
• Reporting abuse, threats to life/health/safety, etc. to an identifiable individual or group
• By court order (when subpoenaed in a court case)
• For quality assessment (peer review)
• For risk and error management, e.g., medical-legal advice

Express Consent (Disclosures to all other third parties)

The patient’s express consent (oral or written) is required before Mississauga Women’s Clinic will disclose personal information to third parties for any purpose other than to provide care or unless authorized to do so by law. Examples of situations that involve disclosures to third parties include (but are not limited to):

• Third party medical examinations
• Provision of charts or chart summaries to insurance companies

Before a disclosure is made to a third party, a notation shall be made in the file that the patient has provided express consent, or a signed patient consent form is appended to the file.You may withdraw or limit your consent, subject to legal and clinical limitations. Withdrawal of consent may affect our ability to provide care.

Storage, Security, and Disposal of Personal Information

We use physical, administrative, and technical safeguards to protect personal and health information against loss, theft, unauthorized access, use, or disclosure, including:

• Secure electronic medical records systems
• Role-based access controls
• Staff confidentiality obligations and training
• Secure storage and disposal practices of physical documentation

Procedures for Secure Disposal/Destruction of Personal Information

When information is no longer required, it is destroyed in a way that maintains confidentiality, and ensures that the record cannot be reconstructed in any way.

For example, for paper records, records shall be shredded. With regards to electronic records, they are permanently and irreversibly deleted/erased

Retention of Records

Intrepid Health Inc. will retain patient records, as required by law and professional regulations, for a minimum of 10 years from the date of last entry, as recommended by The Canadian Medical Protective Association (CMPA).Once no longer required, information is securely destroyed or anonymized.

Access to and Correction of Information

You or a person who can make decisions for you about your personal health information have the right to:

• Request access to your personal or health information
• Request corrections to inaccurate or incomplete information

Requests must be made in writing and may be subject to reasonable administrative fees and legal exceptions.

Patient Rights

As a patient or client, you have the right to:

• Privacy and confidentiality of your information
• Access your medical records
• Understand how your information is used and disclosed
• Request limits on disclosure where permitted by law
• File a complaint if you believe your privacy rights have been violated

Privacy Breaches

In the event of a privacy breach involving personal health information, the Personal Health Information Protection Act, 2004 (PHIPA) requires health information custodians to notify individuals affected by a privacy breach at the first reasonable opportunity. Intrepid Health Inc notifications can be by telephone or in writing. Affected individuals may file a complaint to the Information and Privacy Commissioner of Ontario.

Complaints and Inquiries

Please contact us if you have any questions and/or concerns regarding your personal information, or our privacy policy and practices. Our contact details are as follows:

team@intrepidhealthgroup.com

250 Dundas St W Suite 106 Mississauga, ON L5B 1J2

Phone: (905) 275-2273

 You also have the right to escalate complaints to the appropriate regulatory authority, such as:

• Office of the Privacy Commissioner of Canada (PIPEDA)
• Information and Privacy Commissioner of Ontario (PHIPA)

2 Bloor Street East
Suite 1400
Toronto, Ontario
M4W 1A8

info@ipc.on.ca / 1-800-387-0073 / www.ipc.on.ca

https://www.ipc.on.ca/en

Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will be made available upon request or on our website.