Effective and last updated: August 20, 2026
1. About this policy
Humbershore Medical (“Humbershore,” “we,” “us” or “our”) is committed to protecting personal information and personal health information in its custody or control. This policy explains what we collect, why we collect it, how we may use and disclose it, the service providers involved in operating this website, and the choices and rights available to you.
This policy applies to information collected through humbershoremedical.ca, our online forms, and communications initiated through this website. Personal health information created or received while providing health care also forms part of the applicable clinical record and is handled under our clinical privacy practices and applicable law.
Our privacy practices are intended to comply with Ontario’s Personal Health Information Protection Act, 2004 (PHIPA) and other applicable privacy requirements, including the Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies.
2. Our accountability
Humbershore Medical is responsible for personal information under its control. We designate a Privacy Officer to oversee privacy practices, respond to questions and complaints, and coordinate requests to access or correct records.
Agents acting for the clinic—including physicians, regulated health professionals, employees, contractors and authorized service providers—may access information only as needed for their duties and are expected to protect its confidentiality.
3. Information we collect through this website
The information collected depends on the form or feature you use.
Quick appointment form
The appointment form shown in page heroes collects your name, phone number, email address and selected service. It is intended only to start an appointment request.
Dedicated booking form
The Book page collects your first and last name, phone number, email address, requested service, whether you are a new or existing patient, and any optional non-medical booking or accessibility notes you choose to provide.
General contact form
The Contact page collects your name, email address, optional phone number, selected topic and message.
Family-doctor inquiry form
The Family Doctor page may collect:
- First and last name
- Email address, mobile number and optional home number
- Date of birth and gender
- Optional Ontario health-card number and version code
- Home address, city, postal code and province
- Your consent to be contacted to continue the family-doctor inquiry process
Submitting this form begins an inquiry only. It does not guarantee acceptance, roster you with a physician, book an appointment or create a physician-patient relationship.
Information collected automatically
When you visit the website, our hosting and security providers may automatically process technical information such as your IP address, browser and device type, operating system, requested pages, date and time, referring page, and security or diagnostic logs. We use this information to deliver, protect and troubleshoot the website.
We do not currently use optional audience analytics, behavioural advertising pixels or advertising cookies on this website.
4. Please limit sensitive information in general forms
The hero, booking and general contact forms are not intended for symptoms, diagnoses, medications, health-card numbers, detailed medical histories, financial information or urgent concerns. Use the dedicated family-doctor form only for the fields it specifically requests.
Do not use any website form for a medical emergency. Call 911 or go to the nearest emergency department. Website forms and ordinary email are not monitored continuously and should not be used for time-sensitive clinical advice.
5. Why we collect and use information
We may collect and use information to:
- Respond to questions and appointment requests
- Identify the service you are asking about and route your request appropriately
- Contact you by phone, text message or email about availability, intake, registration or booking steps
- Review family-doctor inquiries and, if capacity is available, continue the intake process
- Discuss requested accessibility or communication support
- Provide health care and maintain an accurate clinical record when information becomes part of your care
- Verify identity and contact information
- Operate, secure, maintain and troubleshoot the website and forms
- Prevent spam, fraud, misuse and security incidents
- Meet legal, professional, regulatory, insurance, audit and recordkeeping obligations
- Investigate and respond to privacy, safety or legal concerns
We aim to identify purposes before or when information is collected and to limit collection to information reasonably necessary for those purposes.
6. Consent and your choices
Consent may be express or implied depending on the sensitivity of the information and the circumstances. By submitting a website form, you ask us to use the information to respond to that request and to contact you using the details you provide.
You may choose not to submit a website form and may call the clinic instead. You may withdraw consent for a future optional use by contacting our Privacy Officer, subject to legal, regulatory, contractual and clinical restrictions. Withdrawal does not affect uses or disclosures that occurred lawfully before we received it, and it may limit our ability to provide a requested service.
We may collect, use or disclose information without consent where permitted or required by law, including in certain safety, public-health, regulatory, legal or emergency circumstances.
7. How we disclose information
We do not sell or rent personal information. We do not disclose it for third-party behavioural advertising.
We may disclose information, as reasonably necessary and legally permitted, to:
- Physicians, regulated health professionals, clinic employees and authorized agents involved in responding to your request or providing care
- Laboratories, diagnostic facilities, specialists, pharmacies, hospitals and other health-care providers involved in care
- Technology, hosting, communications, records-management, security and professional service providers acting for the clinic
- Insurers, regulators, professional colleges, government bodies, law enforcement or courts where authorized or required by law
- A successor organization in a permitted business reorganization, subject to appropriate confidentiality protections
- Other persons where you direct or consent to the disclosure
Service providers are expected to use information only for authorized purposes and to apply safeguards appropriate to its sensitivity.
8. Website hosting and form processing
This website is hosted on Netlify, and website forms use Netlify Forms. Form submissions and related technical information are processed through Netlify’s systems on our behalf. Netlify advises customers collecting personally identifiable information to actively manage submissions, including exporting and regularly deleting data that is no longer required. Learn more in Netlify’s form-submission documentation and Netlify’s privacy statement.
Netlify and other service providers may process information outside Ontario or Canada. Information processed in another jurisdiction may be subject to that jurisdiction’s laws and may be accessible to courts, law-enforcement or national-security authorities there.
9. Embedded map and third-party websites
The Location page contains an embedded Google Map. When that page loads, your browser connects to Google. Google may receive technical information such as your IP address, browser or device information, the page URL, date and time, and interactions with the map, and may use cookies or similar technologies according to your settings and Google’s practices. Review Google’s privacy policy for details.
The website also links to external services and information resources. Those websites operate independently and have their own privacy and security practices. A link does not make Humbershore Medical responsible for an external site’s handling of information.
10. Safeguards
We use administrative, technical and physical safeguards intended to be proportionate to the sensitivity, amount, format and storage location of information. Safeguards may include:
- Role-based access and confidentiality obligations
- Account authentication and access controls
- Encrypted transmission where supported
- Secure configuration, spam filtering and monitoring
- Staff privacy and security training
- Vendor review and contractual protections where appropriate
- Retention and secure-disposal procedures
- Incident-response and breach-management processes
No website, email, text message, fax, internet transmission or storage system can be guaranteed completely secure. Please confirm contact details before sending information and follow clinic instructions for transmitting sensitive documents.
If a privacy breach creates a legal duty to notify you or a regulator, we will take steps required by applicable law.
11. Retention and disposal
We retain information only for as long as reasonably necessary for the identified purpose and to meet applicable clinical, legal, professional, insurance and operational requirements.
Website inquiries that do not become part of a clinical record may be retained for a shorter administrative period. Information incorporated into a patient record is retained according to the requirements that apply to that record and the responsible health-information custodian. Service-provider backups, logs and archives may remain for limited periods under controlled deletion cycles.
When retention is no longer required, information is deleted, destroyed or de-identified using methods appropriate to its sensitivity and format.
12. Accuracy
Please provide complete and accurate contact information and tell us when it changes. We take reasonable steps to keep information sufficiently accurate, complete and current for the purposes for which it is used.
13. Accessing or correcting your information
Subject to limited exceptions under applicable law, you may request access to personal information or personal health information in our custody or control and may request a correction if you believe a record is inaccurate or incomplete.
Contact our Privacy Officer using the details below. We may ask for a written request and information necessary to verify your identity and locate the record. We will not ask you to send sensitive identification through ordinary email unless an appropriate method has been arranged. Permitted fees or legal exceptions will be explained before they are applied.
The Information and Privacy Commissioner of Ontario provides additional guidance about access and correction rights under PHIPA.
14. Privacy questions and complaints
Please contact our Privacy Officer first if you have a question, concern or complaint. We will review the matter and respond as required by applicable law.
Privacy Officer
Humbershore Medical
2077 Lake Shore Blvd West
Toronto, Ontario
Phone: 416-366-2273
Fax: 416-366-5665
Email: contact@humbershoremedical.ca
Please mark written correspondence Private and Confidential — Privacy Officer. Do not include detailed medical information in ordinary email.
If we cannot resolve a concern involving personal health information, you may contact or file a complaint with the Information and Privacy Commissioner of Ontario. Where PIPEDA applies, you may also contact the Office of the Privacy Commissioner of Canada.
15. Children, dependants and substitute decision-makers
Privacy rights may be exercised by the individual or by a legally authorized substitute decision-maker, depending on capacity, age and applicable law. A parent, guardian or caregiver should provide only information they are authorized to provide. We may need to verify authority before discussing or releasing information.
16. Changes to this policy
We may update this policy when our services, website, vendors, information practices or legal obligations change. The effective date at the top identifies the current version. Material changes may also be communicated through the website or another appropriate method.
17. Contacting us electronically
Email and website messages are convenient but may not always be secure or monitored continuously. Do not use them for emergencies or urgent medical concerns. If you prefer not to communicate electronically, call the clinic at 416-366-2273.