PRIVACY POLICY & HEALTH DATA GOVERNANCE

01. Our Commitment to Patient Privacy

Aries HealthCare Canada Ltd. ("AriesXpert", "we", "us", or "our") is dedicated to protecting the confidentiality, security, and privacy of your Personal Information (PI) and Personal Health Information (PHI). We comply strictly with the federal Personal Information Protection and Electronic Documents Act (PIPEDA), the Ontario Personal Health Information Protection Act (PHIPA), the British Columbia Personal Information Protection Act (PIPA), and the Alberta Health Information Act (HIA).

02. Collection of Personal Health Information

We collect health information necessary to provide safe, evidence-informed physiotherapy care. This includes medical history, symptom reports, kinematic movement observations, surgeon referral notes, diagnostic imaging reports, and private health insurance policy numbers for direct billing.

03. Use and Disclosure of Health Data

Your health records are accessible only by your treating Registered Physiotherapist and authorized clinical coordinators. We never sell, rent, or commercialize patient health data under any circumstance. Information is shared only with:

• Your primary care physician or orthopaedic surgeon upon your explicit written consent.
• Your designated private health insurer (e.g. Sun Life, Manulife) solely for claims adjudication.
• Provincial healthcare authorities where mandated by law.

04. Data Storage and Canadian Residency

All electronic medical records (EMR), tele-rehabilitation video streams, and encrypted booking data are hosted on secure, SOC-2 compliant servers located geographically within Canada. Data in transit is secured with AES-256 TLS 1.3 encryption.

05. Privacy Officer Contact

If you have questions regarding your medical records, wish to request an archive copy, or want to withdraw consent, contact our designated Canadian Privacy Officer at: