Bayshore Healthcare Privacy Notice
Effective Date: February 2026
Our Privacy Commitment to You
We at Bayshore Healthcare are committed to protecting your information by following all applicable Federal and Provincial privacy laws. This includes being accountable for how personal information is handled, which includes clearly identifying the purpose for its collection, obtaining meaningful consent, and limiting collection, use and retention. We ensure data accuracy, implement robust safeguards and maintain transparency about our practices. Individuals have the right to access and correct their information, and to ask questions. These principles guide our approach to responsible personal information oversight and privacy protection. This Privacy Notice applies to all individuals whose personal information we collect and/or use including clients/patients, employees and prospective applicants and website visitors and users.
Important Information about Collection, Use and Disclosure of your Personal Information
What Information Do We Collect?
To deliver safe, effective, and personalized healthcare services, we collect personal information directly from you based on your consent. This includes basic contact details (such as your name, phone number, and email address), health and medical information (including diagnoses, treatment history, and prescriptions).
How We Use Your Information
We use your personal information to provide and coordinate healthcare services, communicate with you about your care, and manage administrative and operational functions. This includes scheduling appointments, maintaining medical records, processing billing and insurance claims, and ensuring quality and safety in service delivery. Where applicable, your data may be used for research, analytics and quality improvement, but only in ways that do not identify you personally and is handled in accordance with applicable privacy standards.
Disclosure or Sharing of Information
Based on your consent, we may share your personal information with authorized individuals or organizations when necessary to provide healthcare services, support operational needs, or comply with legal obligations. This includes sharing with healthcare professionals involved in your care, insurance providers, regulatory bodies, and service providers who support our systems and operations (such as IT or billing services).
Cookies and Website Technologies
Our websites use cookies and similar technologies to enhance functionality, support analytics, and improve your browsing experience. These technologies may collect information such as your browser type, device details, and IP address, but do not identify you personally. When you visit our sites, a cookie banner will appear, allowing you to manage your preferences in accordance with consent requirements.
In some cases, cookies may be used to support secure handling of personal health information (PHI) and personal information (PI). All internet technologies used by Bayshore are governed by robust security and privacy policies, vendor due diligence, contractual safeguards, and technical and administrative controls that comply with applicable privacy legislation.
Use of Artificial Intelligence
Bayshore HealthCare may use Artificial Intelligence (AI) tools to help improve our services and programs. When we use AI, your personal and health information is protected in the same way as all other information we collect.
How do we keep your Information Safe
Handling Breaches or Unauthorized Disclosures
In the event of a privacy breach or unauthorized disclosure of PI or PHI, Bayshore Healthcare will follow our prompt response protocols. Affected individuals will be notified without undue delay when required by law, and regulatory authorities will be informed in accordance with applicable federal and provincial legislation. All incidents are investigated to mitigate potential harm, prevent recurrence, and ensure full compliance with federal and provincial health privacy laws.
Security Safeguards
Bayshore Healthcare is committed to protecting the PI and PHI of our clients, employees, and partners. We implement a comprehensive framework of technical, administrative, and physical safeguards designed to prevent unauthorized access, disclosure, alteration, or destruction of information. This includes secure electronic systems, access controls, staff training, encryption, and monitored physical storage facilities. These measures are continuously reviewed and updated to ensure compliance with federal and provincial privacy laws.
Third-Party Service Provider Accountability
Bayshore Healthcare engages third-party service providers only after ensuring they meet stringent privacy and security requirements. All agreements with external vendors include legally binding clauses on confidentiality, data protection, breach reporting, and compliance with applicable Canadian privacy legislation. Providers are regularly assessed to confirm adherence to these obligations, ensuring the PI and PHI entrusted to them remains secure.
Marketing and Communications Data
With your consent, Bayshore Healthcare may share updates, service notifications, or promotional materials. We obtain consent where required and ensure all communications comply with Canada’s Anti-Spam Legislation (CASL), PIPEDA, and Quebec’s Law 25. We may continue to communicate with clients and patients after services have ended, provided informed consent has been obtained. Individuals can withdraw consent at any time, and unsubscribe options are always provided.
Privacy Impact Assessments
Bayshore Healthcare conducts Privacy Impact Assessments (PIAs) for all high-risk processing activities involving PI and PHI. PIAs help identify, evaluate, and mitigate potential privacy risks, ensuring that all new or significantly modified systems, programs, or services comply with applicable federal and provincial privacy requirements.
De-Identification and Anonymization
Bayshore may de-identify or anonymize PI and/or PHI for purposes such as quality improvement, planning, research, analytics, and reporting. De-identified information—where direct identifiers are removed but re-identification remains possible—is still protected under Canadian privacy laws. Anonymized/de-identified information is permanently altered so individuals cannot be identified and is no longer considered personal information.
Information Regarding Children’s Information
We collect, use, and disclose PI and PHI only with informed consent of the legal guardian of minors, and for clearly defined purposes related to care and service delivery. We practice the same safeguard measures as all PI and PHI in relation to our adult patient and clients.
How do we store and how long do we keep your Personal Information
Storage and Retention of Information
We retain your personal information in accordance with applicable healthcare and privacy laws. Health records are kept for the minimum retention period required by provincial legislation and/or college standards – for example, at least 10 years from the date of last entry, or 10 years past the age of majority in the case of minors. After these periods, information/data is confidentially and securely destroyed.
Data Storage, Processing, and Ownership
Your personal health information is collected, stored, and processed in accordance with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation. We ensure that your data is securely stored within Canada or in jurisdictions with equivalent privacy protections and is only accessed by authorized personnel for purposes directly related to your care or services. Where your information is transferred across borders, you have the right to be informed of the associated risks and the safeguards in place. You retain ownership of your personal information, and we are committed to transparency, consent, and safeguarding your privacy throughout its lifecycle.
Consent to Care and Services
When you consent for care and services provided by Bayshore Healthcare, you or your authorized Substitute Decision Maker (SDM) agree to the treatment plan and the delivery of care and services, which may include nursing, personal support, therapy, and other health-related services as discussed. The nature, risks, and benefits of these services have been explained in a manner that is understandable, with the opportunity to ask questions and receive satisfactory answers. If needed, interpreter services or other communication supports are provided to ensure full understanding by you. Your consent may need to be received in writing or verbally based on regulatory requirements.
Are you an Employee or Applicant?
How we use Employee Information
We collect and use personal information from employees and contractors to support employment-related functions and ensure a safe, compliant, and efficient workplace. This includes information used for hiring and recruitment (e.g., assessing qualifications and conducting background checks), employment administration (e.g., payroll, benefits, and scheduling), and regulatory compliance (e.g., licensing and immunization records). We also use personal data to uphold occupational health and safety standards, manage secure access to systems and facilities, and conduct performance reviews or workplace investigations. With explicit consent, employee photographs and biographical profiles may be shared with clients to support service delivery and safety. Additionally, personal information is used to meet legal obligations under employment and privacy legislation.
It’s your Choice
Your Consent and Choices
You have the right to make informed choices about how your information is handled. This includes the ability to withdraw consent for certain uses, request access to or correction of your information, and ask questions about how your data is used or shared. Where applicable, we will inform you of the implications of withdrawing consent, particularly if it affects our ability to provide services. We are committed to respecting your preferences and will respond to all requests in accordance with privacy legislation.
Your Right to Access and Correct
You have the right to access and request correction of your personal information; you can do so by putting your request in writing and forwarding the request to the Bayshore Privacy Office. In certain circumstances, you may request deletion, if information is no longer necessary, or restriction of your information, and object to specific types of processing.
If you believe your privacy rights have been violated, please contact Bayshore Healthcare Privacy Officer. You also have the right to file a complaint with the relevant privacy regulator. In Canada, this may include the Office of the Privacy Commissioner of Canada (OPC) or your provincial privacy authority, such as the Information and Privacy Commissioner of Ontario or Commission d’accès à l’information du Québec, depending on your location and the nature of the concern.
Changes to This Notice
Bayshore Healthcare regularly reviews and updates this Privacy Notice to reflect changes in privacy legislation, operational practices, and industry standards.
How to Contact Us
If you have questions about this privacy notice, wish to exercise your privacy rights, or would like to file a complaint directly with us, please contact:
Privacy Office
Bayshore Healthcare
Email: privacyofficer@bayshore.ca
Phone: 905-822-8075 Ext. 77001
Mail: Bayshore HealthCare
2101 Hadwen Road, Mississauga, ON, L5K 2L3
We are committed to responding to all inquiries in a timely and respectful manner, in accordance with applicable privacy laws.