Privacy Policy
How we collect, use, and protect your personal and health information
Last Updated: January 2026
Introduction
Dr. Hector Roldan MD ("we," "our," or "us") is committed to protecting the privacy and confidentiality of your personal information and personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our medical practice.
We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), the Personal Health Information Protection Act (PHIPA) of Ontario, and applicable provincial and federal privacy laws. For patients from the United States, we also adhere to the Health Insurance Portability and Accountability Act (HIPAA) standards where applicable.
Information We Collect
Personal Health Information
When you become a patient, we may collect:
- Medical history and health records
- Diagnosis, treatment plans, and clinical notes
- Test results and diagnostic imaging
- Prescription and medication information
- Insurance and billing information
- Emergency contact information
Personal Information
We may also collect:
- Name, address, phone number, and email address
- Date of birth and gender
- Ontario Health Insurance Plan (OHIP) number or other insurance details
- Payment and billing information
- Communication preferences
Website Information
When you visit our website, we may automatically collect:
- IP address and browser type
- Device information and operating system
- Pages visited and time spent on our website
- Referring website addresses
- Information collected through cookies and similar technologies
How We Use Your Information
We use your personal and health information to:
- Provide medical care, diagnosis, and treatment
- Communicate with you about appointments, test results, and health matters
- Process billing and insurance claims
- Coordinate care with other healthcare providers involved in your treatment
- Comply with legal and regulatory requirements
- Improve the quality of our services
- Send appointment reminders and follow-up communications
- Respond to your inquiries and requests
Disclosure of Information
We may disclose your information in the following circumstances:
- Healthcare Providers: To other physicians, specialists, laboratories, pharmacies, or healthcare facilities involved in your care
- Insurance Companies: To process claims and verify coverage
- Legal Requirements: When required by law, court order, or regulatory authority
- Public Health: To public health authorities as required by law for disease surveillance or reporting
- Emergency Situations: To protect the health and safety of you or others in emergency circumstances
- With Your Consent: When you have provided explicit written consent
We will never sell your personal or health information to third parties for marketing purposes.
Your Rights
Under PHIPA, PIPEDA, and applicable privacy laws, you have the right to:
- Access: Request access to your personal health information in our custody
- Correction: Request corrections to inaccurate or incomplete information
- Consent: Withdraw consent for certain uses of your information (subject to legal restrictions)
- Complaint: File a complaint with the Information and Privacy Commissioner of Ontario if you believe your privacy rights have been violated
- Accounting: Request an accounting of disclosures of your health information
To exercise these rights, please contact our Privacy Officer using the contact information below.
Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encrypted electronic health records
- Secure, access-controlled physical storage for paper records
- Staff training on privacy and confidentiality
- Regular security assessments and updates
- Secure communication channels for sensitive information
- Strict access controls limiting information to authorized personnel only
Retention of Information
We retain your personal health information in accordance with the requirements of the Medicine Act, PHIPA, and the College of Physicians and Surgeons of Ontario guidelines. Generally, adult patient records are retained for a minimum of 10 years from the date of the last entry. Pediatric records are retained until the patient reaches age 18, plus an additional 10 years.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience. These may include:
- Essential Cookies: Required for basic website functionality
- Analytics Cookies: Help us understand how visitors use our website
- Preference Cookies: Remember your settings and preferences
You can control cookie settings through your browser preferences. However, disabling certain cookies may affect website functionality.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy regularly.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact our Privacy Officer:
Dr. Hector Roldan MD
Privacy Officer
Muskoka, Ontario
Email: info@hectorroldanmd.ca
Phone: Contact our office for privacy inquiries
You may also file a complaint with the Information and Privacy Commissioner of Ontario at www.ipc.on.ca.