HealthPark Privacy Policy
HealthPark Medical Aesthetics protects your personal health information under Nova Scotia’s Personal Health Information Act (PHIA). This statement explains what we collect, why, who sees it, and how to exercise your rights.
Who we are and who to contact
HealthPark Medical Aesthetics is a physician-led medical clinic and a custodian of personal health information under PHIA. Our privacy contact person answers questions, handles requests to see or correct records, and investigates privacy complaints.
Privacy contact: Dr. Karthik Puppala, Medical Director 45 Weatherbee Rd, Suite 404A, Sydney, NS B1M 0A1 · 902-578-8680 · drpuppala@healthparkbotox.com
What information we collect
We collect only what we need to care for you and run the clinic.
| Kind | Examples | Where it comes from |
|---|---|---|
| Contact details | Name, address, phone, email, date of birth | You, when you book or enquire |
| Health information | Medical history, medications, allergies, consultation notes, treatment records, consent forms, clinical photographs | You, your provider, and with your permission other health providers |
| Payment details | Invoices, payment method, package and membership balances | You and our payment processor (card numbers are held by the processor, not us) |
| Website and message data | Enquiry-form content, appointment requests, basic site analytics | You, and our website and booking tools |
How we use your information
- To assess you, provide treatment and follow up on your care.
- To book and remind you of appointments.
- To bill you, process payment and manage packages, memberships and gift certificates.
- To keep the medical records the College of Physicians and Surgeons of Nova Scotia and the law require.
- To review and improve the quality and safety of our care.
- To send promotional messages, only if you have opted in (see below).
We do not use your health information for any other purpose without your express consent, unless PHIA permits or requires it.
When we share it, and what we never do
We share your information only in these situations:
- Your other health providers, such as your family doctor or a specialist we refer you to, when it is needed for your care. You may ask us not to share particular information (see Your rights).
- Service providers working for us, such as our electronic medical record, booking, payment and email systems. They may use your information only to provide that service, under written agreements requiring them to protect it.
- When the law requires or permits it, for example a court order, a mandatory report to public health or child protection, a College or professional-liability matter, or to prevent serious harm to someone.
- With your consent, for anything else, such as a letter to your insurer or a person you name.
We never sell, rent or trade your information. We do not share it with advertisers, “business partners” or other companies for their marketing.
If the clinic closes or changes ownership, your records will be transferred only to another custodian who must protect them under PHIA, and you will be told how to reach your records.
Photos, marketing messages and our website
- Clinical photographs are part of your medical record and are used for your care. We use a photo on our website, social media or in any promotion only with your separate written consent, and never in a way that identifies you unless you agree. You may withdraw that consent at any time and we will stop new use.
- Promotional email and text messages are sent only if you opt in. Every message tells you how to unsubscribe, and saying no never affects your care.
- Our website may use basic analytics and cookies to see how pages are used. These do not collect your health information. Please do not send health details through the website contact form or social media messages; call us or bring them to your appointment instead.
- Links to other sites are governed by those sites’ own privacy policies.
Storage, security, retention and breaches
- Security. Paper records are kept in locked areas. Electronic records are password-protected, access is limited to staff who need it for their work, and staff sign confidentiality agreements.
- Where it is stored. Some of our service providers may store information on servers outside Nova Scotia or Canada. We choose providers with strong safeguards, and information stored elsewhere may be subject to the laws of that place.
- How long we keep it. We keep medical records for the period set out in our written retention schedule, which meets CPSNS and PHIA requirements. Records are then securely destroyed.
- If a breach happens. If your information is lost, stolen, or accessed without authorization and this could cause you harm or embarrassment, we will notify you at the first reasonable opportunity and tell you how to complain to the Information and Privacy Commissioner.
Your rights
- See or copy your record. Ask our privacy contact, in person or in writing. We respond within 30 days. Viewing your record is free; copies may carry a modest fee, which we estimate in advance and may waive if cost is a barrier.
- See who accessed your electronic record. You may ask for a record of who viewed your information and when.
- Correct your record. If you believe information is inaccurate or incomplete, ask us to correct it. If we disagree, you may add a statement of disagreement to your file.
- Limit or withdraw consent. You may ask us not to share certain information with other providers, or withdraw consent for photos or marketing. We will tell you if a limit could affect your care.
- Complain to us. Send privacy complaints in writing to our privacy contact. We will investigate and reply within 60 days.
- Complain to the Commissioner. If you are not satisfied, or we refuse or do not answer a request, you may ask the Information and Privacy Commissioner for Nova Scotia for a review, at no cost, within 60 days of our decision: 902-424-4684 · toll-free 1-866-243-1564 · oipcns@novascotia.ca · oipc.novascotia.ca.