- BlockMD means the proprietary web-based telehealth or EMR virtual care applications and online services facilitated by the Software;
- Personal Information in this Policy means information about an identifiable individual that is collected, used and disclosed in the course of providing Services to you and includes personal health information;
- Provider means the provider of Services that you engage through the Software;
- Services means the services provided by the Provider to you;
- Software means the online software and applications used to provide through Telehealth and Electronic Medical Records and delivered by BlockMD to you, as made available by BlockMD from time-to-time.
- BlockMD is committed to protecting and respecting your privacy and information. BlockMD incorporates online video conferencing and Internet-reliant application-based technology that allows you to communicate with your Healthcare Provider in a virtual setting.
- BlockMD collects, uses, stores and discloses your Personal Information on behalf of your Healthcare Provider. It is the responsibility of your Healthcare Provider to comply with all applicable legislation and regulatory requirements regarding the collection, use, storage and disclosure of your Personal Information.
- BlockMD itself does not disclose your Personal Information unless required by law. BlockMD does, however, use your Personal Information that is necessary to give you access to the BlockMD applications and, if required, address problems you may encounter with the Software. BlockMD also reserves the right to aggregate and anonymize Personal Information stored on its system. Otherwise, all use and disclosure of your Personal Information is in accordance with your Providers instructions.
Collection of Personal Information
- Your identification and contact information (name, address, date of birth, email, etc.);
- Optional information such as billing information (public or private insurer information) and your family doctors name; and
- Internet, computer and other diagnostic information including your IP Address, computer/software/browser type.
On behalf of your Provider, BlockMD also collects and stores other Personal Information, including:
- Your health information (appointment related information, symptoms, diagnosis, medical history, test results, reports, messages and treatment, record of allergies, prescriptions, etc.);
- Information regarding your medical treatment (including notes, discussions, advice, or opinions) and your care providers.
Limits on Collection
BlockMD only collects the Personal Information that is required for Services to be provided between willing participants (medical professionals and patients) on the application, to facilitate the provision of care and communication. BlockMD does not collect any other Personal Information, or allow Personal Information to be used for other purposes without your express (written or verbal) consent, except where compelled to do so by law.
Use and Disclosure of Personal Information
BlockMD uses your Personal Information in order to enable you to connect you with your Healthcare Provider. BlockMD may also disclose your Personal Information where such disclosure is required by law, such as complying with a subpoena or court order.
All other use and disclosure of your Personal Information will only be done under predetermined consent.
By executing the User Agreement and using the Software, you are providing your personal information.
To the extent that you have a substitute decision maker, we may require that the individual validate his or her authority to act on your behalf.
BlockMD may use information collected through the provision of Services on an aggregate and anonymized basis to conduct analyses regarding the utilization of the application and the services provided in conjunction with the application. Any aggregate and anonymized data is the sole property of BlockMD and stored separately from all Personal Information. The extrapolated information does not identify individuals and is not capable of identifying individuals.
You may withdraw your consent to the collection, storage, use and disclosure of your Personal Information as set out in this Policy, subject to any applicable contractual or legal obligation, by contacting your Provider and then contacting BlockMD at email@example.com. However, the withdrawal of consent will likely result in you no longer being able to access or use BlockMD applications (EMR or Telehealth).
Accessing your Personal Information
Since BlockMD collects your Personal Information on behalf of your Provider, any requests for copies of your record should be directed to your Provider.
If an inaccuracy is identified in your Personal Information, you may contact your provider regarding the correction or amendment to your Personal Information. Any such decision is made exclusively by your Provider.
Protecting your Personal Information
BlockMD ensures that communications and data created and sent using Telehealth & EMR are secured at server and application levels with encryption, the use of firewalls and computer malware detection and elimination.
BlockMD operates on a server infrastructure wholly based in Canada and deploys software using industry-standard firewalls and best practices of the information security industry. BlockMD encrypts your video conferencing and communication to our website and web applications with the same industry-standard encryption commonly used to protect your online banking. BlockMD server infrastructure is designed to continue to operate in the event of a disaster or prolonged electrical outage. Multiple redundant connections to the Internet ensure that our web application will continue to serve requests in the event of a network outage. Server equipment is stored in facilities equipped with state of the art security.
BlockMD has taken steps to ensure that everyone who works for BlockMD, and the third parties with which we contract, understand the sensitivity of Personal Information and are required to adhere to the protection of Personal Information as set out in this Policy. We educate and train our staff on the importance of protecting Personal Information and ensure that access is provided only on a “need-to-know” basis. We use roles-based access to ensure that only those who are authorized to access your Personal Information can access it.
Providers will have their own Privacy Policies in place. BlockMD is not responsible for Providers’ activities and omissions, in particular, how they retain or secure their own data related to the provision of the Services. You are responsible for ensuring your satisfaction with your Provider’s policies in this regard.
You and you alone are responsible for ensuring that you do not disclose your account access information to third parties. This includes but is not limited to not disclosing such information to anyone, ensuring that sufficient security software is installed and running on your computer, smartphone or tablet, that your network firewall is of sufficient quality and that your wireless connection is encrypted to a degree that will prevent third-party access. BlockMD is not responsible for any failure by you or your Provider to secure your own device and its access to the Internet or your use of public, unsecured networks. BlockMD also is not responsible for any failure by you to eliminate malware. These failures and others can make you vulnerable to privacy breaches and would put you and your data at risk.
We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:
Our website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to our site as safe as possible.
We use regular Malware Scanning.
We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when it’s release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property or safety.
However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
Google’s advertising requirements can be summed up by Google’s Advertising Principles. They are put in place to provide a positive experience for users. https://support.google.com/adwordspolicy/answer/1316548?hl=en
When it comes to the collection of personal information from children under the age of 13 years old, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States’ consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.
The Fair Information Practices Principles form the backbone of privacy law and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.
The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.
If at any time you would like to unsubscribe from receiving future emails, you can email us at
firstname.lastname@example.org and we will promptly remove you from ALL correspondence.
Calgary, Alberta T2S 2S7