Privacy Policy

Who I am

Forma Physio is the independent physiotherapy practice of Melissa Venturuzzo, a Registered Physiotherapist licensed by the College of Physiotherapists of Ontario, at 195 Norseman Street, Unit 19, Main Floor, Toronto, ON M8Z 0E9.

Under Ontario's Personal Health Information Protection Act, 2004 (PHIPA), I am a health information custodian. This means I am personally responsible for keeping my patients' personal health information secure and confidential.

What I collect

I collect only what I need in order to assess and treat you safely, and to run the practice. That falls into two groups:

Personal information

• Your name, date of birth, address, phone number and email address
• Your emergency contact
• Payment records

Personal health information

• Your health history, current symptoms and reason for attending
• Assessment findings, measurements and clinical reasoning
• Treatment provided, your response to it, and your exercise programme
• Correspondence about your care, including reports from or to your physician, surgeon or insurer where you have asked me to send or receive them
• Appointment history, including cancellations and missed appointments

I do not collect information about you from anyone else without your knowledge.

Why I collect it

• To assess your condition and provide physiotherapy treatment
• To plan your care and adjust it over time
• To book, confirm and remind you about appointments
• To process payment and issue receipts you can submit to your insurer
• To communicate with other health professionals involved in your care, where you have agreed to it
• To meet my record-keeping obligations as a registrant of the College of Physiotherapists of Ontario, and any other legal obligation that applies

I do not sell your information or share it for marketing.

Your consent

When you book an appointment and attend for treatment, you are giving implied consent for me to collect, use and share your personal health information for the purpose of providing your care — including with other health professionals directly involved in that care. PHIPA calls this the circle of care.

Anything outside that needs your express consent, given separately and in writing. Sending a report to your insurer, your employer or a lawyer is the usual example.

You can withdraw or limit your consent at any time by telling me, in writing. I will explain what effect that has on your care before it takes effect. Withdrawing consent cannot apply retroactively to information that has already been shared, and it does not override a legal obligation that requires me to disclose or retain information.

Jane may send appointment confirmations and reminders using the contact information and notification preferences associated with your booking. These messages are limited to administering your care and appointments; Forma Physio does not use them for promotional marketing.

Who I share it with

Your record is not shared with anyone except in the circumstances below:

• Other health professionals in your circle of care, upon your request
• Your insurer, only when you have expressly asked me to send them information, or when you submit your own receipt
• Service providers who help me run the practice, described in the next section. They are bound to protect your information and may only use it to provide their service to me
• Where the law requires or permits it — for example a court order or subpoena, a mandatory report, or an investigation by the College of Physiotherapists of Ontario, which has a statutory right of access to patient records

Where it is stored

Clinical records, booking and billing are managed in Jane, a Canadian practice management system used widely in regulated health care. Jane holds records in encrypted form and is contractually bound to protect them.

Jane states that patient data is stored in the regional data centre selected for the subscriber account and that limited processing outside that region may occur when required to deliver certain features. Information processed outside Canada may be subject to the laws of the country where it is processed. You may contact Forma Physio if you would like current information about the practice's Jane account region.

How long I keep it

I keep your record for at least ten years from the later of your last interaction with the practice or the date you reached, or would have reached, 18 years of age, in accordance with the College of Physiotherapists of Ontario's current requirements.

When the retention period ends, records are permanently deleted.

How it is protected

• Access to electronic records requires an authenticated account
• I am the only person with routine access to patient records
• Devices are password protected and encrypted
• Records are never discussed anywhere they could be overheard, and never sent by unsecured email without your agreement

If a privacy breach occurs that could reasonably be expected to harm you, PHIPA requires me to notify you at the first reasonable opportunity, and to notify the Information and Privacy Commissioner of Ontario.

Seeing and correcting your record

You have the right to see your record and to obtain a copy. Access can only be refused in the narrow circumstances PHIPA sets out. A reasonable fee for copying may be required.

You also have the right to request corrections to your record if you believe it is inaccurate or incomplete (some exceptions apply).

This website

This website has no contact form or user account. Booking happens on formaphysio.janeapp.com, which is operated by Jane and governed by Jane's own privacy notice — please read it before you book.

The website does not use analytics, advertising pixels, chat widgets or non-essential cookies. Fonts and images are served with the site, and some media or other website files may be delivered through service providers.

Service providers used to operate and secure the website may process routine technical logs, such as your IP address, browser type, requested resource and time of access. Forma Physio does not use those logs to identify you or advertise to you.

Raising a concern

If you have a question or concern about how your information has been handled, please contact me:

You also have the right to raise any concerns with Ontario's privacy regulator at any time.

Contact

If you have any questions about this policy, please contact me: