Privacy Policy
Website Privacy Policy
Effective date: July 23, 2026
1. Who We Are
This Privacy Policy explains how Dr. A. Maghzi Dentistry Professional Corporation (the “Clinic”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal information when you use our website and related online services. As an Ontario dental practice, we handle:
(a) personal information of website visitors; and
(b) personal health information (“PHI”) of patients as a health information custodian under Ontario law, including the Personal Health Information Protection Act, 2004 (“PHIPA”), where applicable.
2. Scope
This Policy applies to information collected through our website, forms, emails, and other online interactions. It does not replace our inclinic privacy practices and notices provided to patients. If you are a patient, additional privacy documents may apply and will be provided to you upon request.
3. What We Collect From Website Visitors
Depending on your interactions, we may collect:
(a) Contact details you provide (name, email, phone, preferred appointment times, and message content);
(b) Appointment request information (reason for visit in general terms and preferred dates/times—please avoid including sensitive PHI);
(c) Technical data such as IP address, device identifiers, browser type/version, operating system, referral URLs, pages viewed, and time/date of visits;
(d) Cookies and similar technologies data (see Section 6);
(e) Communications preferences and consents.
4. What We Collect From Patients
If you become or are a patient, we may collect PHI necessary to provide dental care and administer the patient relationship, which may include your medical/dental history, health card or insurance details, diagnostic images, treatment notes, and payment information. When such PHI is submitted through the website or by email, we handle it in accordance with PHIPA and this Policy.
5. How We Use Information
We use personal information for purposes including:
(a) responding to inquiries and appointment requests;
(b) scheduling and confirming appointments;
(c) providing information about our services and clinic operations;
(d) operating, maintaining, troubleshooting, and securing the website;
(e) monitoring and improving website performance and user experience;
(f) managing patient records and delivering dental services (for patients);
(g) communicating administrative updates, reminders, and service notices; and
(h) meeting legal, regulatory, insurance, and audit obligations.
6. Cookies and Analytics
We use cookies and similar technologies to operate the website, remember preferences, measure traffic, and improve content. We may use analytics services to collect aggregated usage data. You can control cookies through your browser settings and opt out of certain analytics by using tools offered by the provider or your device settings. Disabling cookies may affect website functionality.
7. Patient PHI via Website; Secure Alternatives
Please avoid sending sensitive PHI via unsecured forms or email. If you need to share detailed health information, diagnostic files, or documents, please contact us to arrange a secure method, such as a secure patient portal or encrypted transmission. PHI we receive is used only for your care, clinic administration, or as otherwise permitted or required by law.
8. Service Providers and CrossBorder Processing
We use thirdparty service providers to support the website and clinic operations, such as hosting, cloud storage, email/SMS communications, appointment management, analytics, and IT/security services. These providers may process personal information on our behalf and may be located or store information outside Ontario or Canada. We use contractual and technical safeguards requiring providers to protect personal information, use it only for our purposes, and maintain confidentiality, subject to lawful access by foreign authorities.
9. AIEnabled Tools
We may use AIenabled tools for administrative and communications support (for example, drafting appointment reminders or organizing routine inquiries).
These tools are used solely for Clinic purposes. We do not sell personal information. Where PHI is involved, we take steps to deidentify or limit disclosures to what is necessary and require service providers to protect confidentiality. If you prefer not to have your information processed by AIenabled tools for nonessential purposes, please contact us using Section 14.
10. Disclosures
We may disclose personal information:
(a) to service providers acting on our behalf (Section 8);
(b) to insurers or dental benefit administrators in connection with claims if you are a patient and with your consent or as permitted by law;
(c) to other healthcare providers involved in your care, with consent or as permitted by law;
(d) to comply with legal, regulatory, professional, or court requirements;
(e) to protect the rights, property, or safety of the Clinic, our patients, or the public; and
(f) in the event of a business transaction involving the Clinic, subject to applicable legal requirements and safeguards.
11. Retention
We retain personal information for as long as necessary to fulfil the purposes described in this Policy, to comply with legal and regulatory requirements, to resolve disputes, and to maintain appropriate records. Patient records are retained in accordance with professional, legal, and regulatory obligations. When information is no longer required, we securely destroy, erase, or anonymize it.
12. Security
We use administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification. No method of transmission or storage is completely secure. You are responsible for using secure methods when sharing information with us and for protecting your own devices and credentials.
13. Your Rights
(a) Website visitors may contact us to ask about our handling of their personal information collected through the website.
(b) Patients have rights under PHIPA, including rights to request access to and correction of their PHI in our custody or control, subject to limited exceptions. To make a request, contact our Privacy Officer (Section 14). We may require verification of identity and, where permitted, a reasonable fee.
(c) You may withdraw your consent to nonessential processing at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may affect our ability to provide certain services.
14. Contacting Our Privacy Officer; Complaints
If you have concerns about our privacy practices, contact us. If we cannot resolve your concern, you may have the right to contact the Information and Privacy Commissioner of Ontario.
15. Children’s Privacy
Our website is not directed to children under the age of 15. If you believe a child has provided personal information, please contact us so we can take appropriate steps.
16. Changes to This Policy
We may update this Policy from time to time. Changes take effect when posted with a new Effective Date. Your continued use of the website after an update means you accept the revised Policy.
17. Links to Other Websites
Our website may link to thirdparty sites. We are not responsible for their privacy practices. Review their privacy policies before providing personal information.
18. How to Manage Communications
You can update your communications preferences or unsubscribe from nonessential emails or SMS by following the instructions in our messages or by contacting us (Section 14). Transactional or service messages (such as appointment confirmations or reminders) may still be sent as permitted by law.
19. Language
You may request this Policy in an accessible format or, if available, in French by contacting us.
