Privacy Policy

Last updated: 26 July 2026

1. Introduction

Dunluce Medical Clinic ("Dunluce Medical Clinic", the "Clinic", "we", "us" or "our") is committed to protecting the privacy, confidentiality and security of the personal and health information entrusted to us by our patients, website visitors and others. This Privacy Policy explains our information practices and the rights available to you under applicable Alberta and Canadian privacy legislation.

We hold the protection of your information as a core professional and ethical obligation. All physicians, staff, students and contractors of the Clinic are bound by strict confidentiality requirements.

2. Scope & Governing Law

This policy applies to all personal information and health information collected, used or disclosed by the Clinic, whether in person, by telephone, in writing, or through this website located at www.dunlucemc.ca.

As a health services provider operating in the Province of Alberta, we are governed by:

• The Health Information Act (Alberta), RSA 2000, c H-5 ("HIA"), which governs the collection, use, disclosure and protection of individually identifying health information by custodians;
• The Personal Information Protection Act (Alberta), SA 2003, c P-6.5 ("PIPA"), which governs personal (non-health) information handled in the course of commercial and employment activities;
• The federal Personal Information Protection and Electronic Documents Act ("PIPEDA"), where applicable; and
• The standards, guidelines and Standards of Practice of the College of Physicians & Surgeons of Alberta ("CPSA").

Our physicians act as "custodians" of health information as defined under the HIA. Where any provision of this policy conflicts with applicable law, the law prevails.

3. Information We Collect

The information we collect depends on your relationship with us and may include:

3.1 Health information

• Your Alberta Health Care (AHCIP) number and other health identifiers;
• Medical history, symptoms, diagnoses, test and laboratory results, and diagnostic imaging;
• Medications, allergies, immunization records and treatment plans;
• Referrals, consultation reports and correspondence with other health providers;
• Clinical notes and records created during your care.

3.2 Personal information

• Your name, date of birth, gender and contact details (address, telephone, email);
• Government-issued identification and emergency contact information;
• Billing, insurance and payment details for uninsured services;
• Information you provide through our website forms (for example, appointment requests and enquiries).

We collect information directly from you wherever possible. In some cases, and as permitted by law, we may receive information from other custodians, health providers, Alberta Health, or authorized representatives acting on your behalf.

4. How We Use Your Information

We collect, use and disclose your information only for purposes that are reasonable and that you would consider appropriate, including to:

• Provide, coordinate and deliver medical care and treatment;
• Communicate with you about appointments, results and follow-up care;
• Make referrals and consult with other health professionals involved in your care;
• Bill and administer insured and uninsured services;
• Meet legal, regulatory, professional and accreditation obligations;
• Manage, evaluate and improve the operations and quality of our services;
• Conduct authorized research or teaching, in de-identified form wherever practicable.

We limit collection, use and disclosure to the minimum amount of information reasonably required to fulfil these purposes.

5. Disclosure of Information

We do not sell, rent or trade your personal or health information. We may disclose your information, in accordance with the HIA, PIPA and PIPEDA, to:

• Other health custodians and providers involved in your care (for example, specialists, laboratories, diagnostic imaging, hospitals and pharmacies);
• Alberta Health and other public bodies where required or authorized by law (for example, mandatory reporting of certain communicable diseases);
• Third-party service providers who perform functions on our behalf (such as secure electronic medical records hosting and billing), under written agreements requiring equivalent privacy and security protections;
• Persons you have authorized in writing, or your legal representative;
• Courts, law enforcement or regulatory authorities where disclosure is required or permitted by law.

6. Consent

By seeking care from the Clinic and providing us with your information, you consent to the collection, use and disclosure of that information for the purposes described in this policy and for the provision of health services. In certain circumstances, the HIA and PIPA permit or require us to collect, use or disclose information without consent.

You may withdraw or limit your consent at any time, subject to legal and professional limitations, by contacting our Privacy Officer. Please note that withholding certain information may affect our ability to provide safe and effective care.

7. Safeguards & Security

We maintain administrative, physical and technical safeguards appropriate to the sensitivity of the information, consistent with the HIA and CPSA requirements. These include:

• Restricting access to information on a need-to-know basis;
• Confidentiality obligations and privacy training for all personnel;
• Secure, access-controlled electronic medical records and encrypted transmission where appropriate;
• Physical security measures such as locked storage and controlled premises;
• Secure disposal of records at the end of their retention period.

No method of transmission over the Internet or electronic storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

8. Retention & Disposal

We retain health records for the minimum periods required by the CPSA and applicable legislation. This is generally at least ten (10) years from the date of last entry for adult patients and, for minors, at least ten (10) years past the age of majority, and longer where required. When records are no longer required, they are securely and irreversibly destroyed.

9. Your Access & Correction Rights

Under the HIA, you have the right to request access to your own health information and to request correction of information you believe to be inaccurate or incomplete. To make a request, please submit a signed, written request to our Privacy Officer.

We will respond within the timelines set out in the HIA (generally within 30 days, subject to permitted extensions). A reasonable administrative fee may apply for copying and transferring records, consistent with applicable guidelines. In limited circumstances permitted by law, access may be refused in whole or in part; if so, we will explain the reason and your options for review.

10. Website, Cookies & Analytics

Our website may use cookies and similar technologies to support basic functionality, remember preferences and understand how the site is used so we can improve it. You can control or disable cookies through your browser settings, though some features may not function as intended.

Information submitted through website forms (such as appointment requests) is used solely to respond to your request. Please do not transmit detailed or sensitive medical information through website forms or email, as these channels are not fully secure.

11. Third-Party Services & Links

We engage trusted third-party providers (for example, electronic medical records hosting, appointment systems and secure communications) who are contractually required to protect your information and use it only for the purposes we specify. Our website may contain links to external websites operated by others; we are not responsible for the privacy practices or content of those sites, and we encourage you to review their privacy policies.

12. Privacy Breaches

In the event of a loss of, or unauthorized access to or disclosure of, health information, we will respond in accordance with the mandatory breach notification requirements of the HIA. This may include notifying affected individuals, the Office of the Information and Privacy Commissioner of Alberta, and the Minister of Health where required.

13. Questions & Complaints

If you have questions, concerns or a complaint about how we handle your information, please contact our Privacy Officer:

If your concern is not resolved to your satisfaction, you have the right to contact the Office of the Information and Privacy Commissioner of Alberta (OIPC) at oipc.ab.ca, or the College of Physicians & Surgeons of Alberta.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology or our practices. The current version will always be posted on this page with its effective date. We encourage you to review it periodically.