Personal Health Data. Subscribers use our Services to collect personal information from their patients or clients. These records may include a person’s name, contact, health insurance and billing information, medical information, appointment history and other data (“Patient/Client Data”). This information is sometimes referred to as “personal health information”, “protected health information”, “data concerning health” or “sensitive data” depending on the location of the Subscribers and the privacy laws applicable to them. If you are a patient or client, Patient/Client Data is collected from you when you visit your Subscriber healthcare provider and when your healthcare provider sets up an account for you.

Subscriber’s Role. Subscribers retain sole control over Patient/Client Data and may be referred to as a “health information custodian”, a “covered entity” or a “controller” depending on their location and the privacy laws applicable to them.

Subscribers determine:

• What Patient/Client Data to collect;
• How the Subscriber will use the Patient/Client Data; and
• Who has access to Patient/Client Data.

Subscribers are responsible for complying with laws and regulations governing the use of Patient/Client Data, and for determining the legal basis for such use.

Baysil’s Role. Baysil is a service provider to Subscribers and may be referred to as an “agent”, “business associate” or “processor” of the Subscriber. Baysil stores Patient/Client Data in its secure data centers and makes it available to Subscribers and their users through our Services. Baysil otherwise has no control over Patient/Client Data. Baysil will only access Patient/Client Data on the instructions of the Subscriber or its users, or, in rare cases, where needed in order to prevent or address technical problems or if required by law or court order.

Storage Location. Patient/Client Data is stored in Canada. Please note that we use US-based service providers for appointment reminders sent by email or SMS and, therefore, Patient/Client Data contained in appointment reminders will go through and may be stored temporarily in the United States. All our data centres and service providers maintain a high level of security and are compliant with applicable privacy laws.

Patient/Client Rights. Patients and clients have certain rights with respect to their Patient/Client Data, which may include knowing what information their Subscriber healthcare provider has about them, correcting any inaccurate Patient/Client Data, obtaining a record of their Patient/Client Data and, in certain circumstances, deleting or removing their Patient/Client Data. Subscribers have strict legal and regulatory obligations around Patient/Client Data and may not always be permitted to delete or remove Patient/Client Data.