Privacy Policy
Effective Date: June 2, 2025
Kareem Hassanein, Registered Physiotherapist
Endorphins Health and Wellness Centre
4631 Palladium Way, Unit 6, Burlington, ON L7M 0W9
Introduction
I, Kareem Hassanein, Registered Physiotherapist, am committed to protecting your personal information and your right to privacy. This Privacy Policy explains how I collect, use, disclose, and safeguard your information when you visit my website or use my physiotherapy services.
This policy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Personal Health Information Protection Act (PHIPA) of Ontario.
Information I Collect
Personal Information
I may collect the following personal information:
- Full name and contact information (address, phone number, email)
- Date of birth and age
- Ontario Health Insurance Plan (OHIP) information
- Private insurance information
- Emergency contact information
- Referring physician information
Health Information
As a healthcare provider, I collect:
- Medical history and current health conditions
- Physiotherapy assessment findings
- Treatment plans and progress notes
- Diagnostic test results
- Communications with other healthcare providers regarding your care
- Appointment records and billing information
Website Information
When you visit my website, I may automatically collect:
- IP address and browser type
- Pages visited and time spent on pages
- Referring website addresses
- Device and operating system information
Website Analytics
I use Google Analytics to understand how visitors use my website. This service collects:
- Anonymous usage data (pages viewed, time on site, bounce rate)
- General location information (city/region, not specific address)
- Device and browser information
- How you found my website (search engines, referral sites)
This data is anonymized and used solely to improve website content and user experience. No personal health information is shared with Google Analytics.
How I Use Your Information
I use your personal and health information to:
- Provide physiotherapy assessment and treatment services
- Develop and monitor your treatment plan
- Communicate with you about appointments and care
- Process billing and insurance claims
- Comply with legal and regulatory requirements
- Communicate with other healthcare providers involved in your care (with consent)
- Maintain accurate clinical records
- Respond to your inquiries and requests
- Improve my services and website functionality
Disclosure of Your Information
I may share your information in the following circumstances:
With Your Consent
- To other healthcare providers involved in your care
- To insurance companies for billing purposes
- To family members or caregivers you have authorized
Without Your Consent (as permitted by law)
- To comply with legal obligations or court orders
- To protect against imminent harm to you or others
- For public health or safety reasons
- To professional regulatory bodies as required
- To defend against legal claims
Data Security
I implement appropriate technical and organizational measures to protect your personal information, including:
- Physical security measures at my practice location
- Secure storage of paper records in locked filing systems
- Password-protected electronic systems
- Encryption of electronic communications where appropriate
- Limited access to personal information on a need-to-know basis
- Regular security assessments and updates
Your Rights
Under applicable privacy laws, you have the right to:
- Access your personal and health information
- Request corrections to inaccurate information
- Withdraw consent for certain uses of your information
- Request restrictions on how I use your information
- Lodge a complaint with privacy authorities
- Request information about my privacy practices
Retention of Information
I retain your personal health information for a minimum of 10 years following your last visit, or 10 years after you reach the age of majority (18 years), whichever is longer, as required by the College of Physiotherapists of Ontario. After this period, records are securely destroyed.
Children's Privacy
I provide services to minors with parental or guardian consent. Parents/guardians have the right to access their minor child's health information, subject to the minor's consent rights under Ontario law.
Accessible Formats and Communication Supports
Upon request, I will provide or arrange for accessible formats and communication supports for persons with disabilities in a timely manner and at no additional cost.
Changes to This Policy
I may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Effective Date" and will be posted on my website. I encourage you to review this Policy periodically.
Contact Information
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:
Kareem Hassanein, Registered Physiotherapist
Email: kareem.hassanein@gmail.com
Phone: (905) 634-6000
Address: 4631 Palladium Way, Unit 6, Burlington, ON L7M 0W9
Complaints
If you have concerns about my privacy practices, you may file a complaint with:
Information and Privacy Commissioner of Ontario
2 Bloor Street East, Suite 1400
Toronto, ON M4W 1A8
Phone: 1-800-387-0073
Email: info@ipc.on.ca
Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Phone: 1-800-282-1376