Dr Keshia Kamphuis, ND, is committed to safeguarding the personal information entrusted to us by our clients. We manage your personal information in accordance with Alberta’s Personal Information Protection Act and other applicable laws in Alberta, Canada. This policy outlines the principles and practices we follow in protecting your personal information.

 

This policy applies to Dr Keshia Kamphuis and Dr Keshia ND. The policy also applies to any person providing services on our behalf.

 

What is personal information?

Personal information means information about an identifiable individual. This includes an individual’s name, home address and phone number, age, sex, marital or family status, an identifying number, financial information, educational history, etc.

 

What personal information do we collect?

We receive, collect and may store any information you enter on our website or provide us in any other way. In addition, we may collect the Internet protocol (IP) address used to connect your computer to the Internet. We may collect your login information to our ‘Members only’ area including e-mail address and password. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse to and away from the page.

 

We also collect personally identifiable information (including name, email, password, communications); payment details when applicable (including credit card information), comments, feedback, product reviews, recommendations, and personal profile.

​

Why do we collect non-personal and personal information?

We collect only the non-personal and personal information that we need for the purposes of providing services to our clients, including information needed to:

 

• provide and operate our services;

• open and manage an account

• deliver requested products and services

• enrol a client in a program

• contact clients about appointments

• provide clients with customer assistance and technical support

• follow up with clients to determine satisfaction with products and services

• notify clients of upcoming events of interest

• to create aggregated statistical data which we may use to provide and improve our respective services

• to comply with any applicable laws and regulations

 

We normally collect client information directly from our clients. We may collect your information from other persons with your consent or as authorized by law.

​

Consent

We ask for consent to collect, use or disclose client personal information, except in specific circumstances where collection, use or disclosure without consent is authorized or required by law. We may assume your consent in cases where you volunteer information for an obvious purpose. For example, providing a credit card for a website purchase when the information will only be used to process the payment. As another example, when you voluntary fill out new client intake forms.

 

We ask for your express consent for some purposes, including providing naturopathic treatments, and may not be able to provide certain services if you are unwilling to provide consent to the collection, use or disclosure of certain personal information. Where express consent is needed, we will normally ask clients to provide their consent orally (in person, by telephone), in writing (by signing a consent form, by checking a box on a form, or electronically (by clicking a button).

 

In cases that do not involve sensitive personal information, we may rely on “opt-out” consent. For example, you may automatically be added to private discussion groups within your course portal when you register for a course, with first name identifiers used only. As another example, you may be added to our email newsletter list when you register for our courses.

 

A client may withdraw consent to the use and disclosure of personal information at any time, unless the personal information is necessary for us to fulfill our legal obligations. We will respect your decision, but we may not be able to provide you with certain products and services if we do not have the necessary personal information.

 

We may collect, use or disclose client personal information without consent only as authorized by law. For example, we may not request consent when the collection, use or disclosure is reasonable for an investigation or legal proceeding, to collect a debt owed to our organization, in an emergency that threatens life, health or safety, or when the personal information is from a public telephone directory.

 

How do we use and disclose personal information?

We use and disclose client personal information only for the purposes for which the information was collected, except as authorized by law. For example, we may use client contact information to deliver goods that have been ordered. The law also allows us to use that contact information for the purpose of collecting a debt owed to our organization, should that be necessary. If we wish to use or disclose your personal information for any new business purpose, we will ask for your consent.

 

How do we safeguard personal information?

We make every reasonable effort to ensure that client information is accurate and complete. We rely on our clients to notify us if there is a change to their personal information that may affect their relationship with our organization. If you are aware of an error in our information about you, please let us know and we will correct it on request wherever possible. In some cases we may ask for a written request for correction.

 

We protect client personal information in a manner appropriate for the sensitivity of the information. We make every reasonable effort to prevent any loss, misuse, disclosure or modification of personal information, as well as any unauthorized access to personal information. All health records are created, stored and maintained digitally through a HIPAA, PIPEDA, PHIPA, and GDPR compliant management software. Data is encrypted at rest and in transfer. Employees of our organization are given access to personal information only on a “need to know” basis.

 

We will notify the Office of the Information and Privacy Commissioner of Alberta, without delay, of a security breach affecting personal information if it creates a real risk of significant harm to individuals.

 

We retain client personal information only as long as is reasonable to fulfill the purposes for which the information was collected or for legal or business purposes. We render client personal information non-identifying, or destroy records containing personal information once the information is no longer needed.

 

We use appropriate security measures when destroying client personal information, including shredding paper records and permanently deleting electronic records.

 

Access to records containing personal information

Clients of Dr Keshia Kamphuis have a right of access to their own personal information and health record that is in our custody or under our control at any time, subject to some exceptions. For example, organizations are required under the Personal Information Protection Act to refuse to provide access to information that would reveal personal information about another individual. Organizations are authorized under the Act to refuse access to personal information if disclosure would reveal confidential business information. Access may also be refused if the information is privileged or contained in mediation records. If we refuse a request in whole or in part, we will provide the reasons for the refusal. In some cases where exceptions to access apply, we may withhold that information and provide you with the remainder of the record.

 

You may make a request access to your personal information by writing to Dr Keshia Kamphuis. You may also request information about our use of your personal information and any disclosure of that information to persons outside our organization. You may also request a correction of an error or omission in your personal information.

 

Questions and complaints

If you have a question or concern about any collection, use or disclosure of personal information by Dr. Keshia Kamphuis or about a request for access to your own personal information, please contact:

 

Dr Keshia Kamphuis

B102, 5212 - 48th St. Suite #104

Red Deer, Alberta

T4N 7C3

Email: info{at}drkeshiand.com

Phone: (587)-815-8278; Fax: (587) 415-2890

Website: www.drkeshiand.com

 

If you are not satisfied with the response you receive, you should contact:

 

The Information and Privacy Commissioner of Alberta:

Office of the Information and Privacy Commissioner of Alberta

Suite 2460, 801 - 6 Avenue, SW

Calgary, Alberta T2P 3W2

Phone: 403-297-2728 Toll Free: 1-888-878-4044

E-mail: generalinfo@oipc.ab.ca Website: www.oipc.ab.ca

​