Privacy Policy - (Revised January 4, 2017)
This notice describes how personal and medical information about you may be used and disclosed. Please review it carefully. If you have any questions, please contact us.
Records Access Services Canada, Inc., d/b/a (“RASCI”) provides this Privacy Policy (the “Policy”) to inform you of our policies and procedures regarding the collection, use, and disclosure of information we receive when you visit our website www.rasci.ca (the “Site”) or use our service offered through the Site (the “Service”). We may change the terms of this Policy from time to time by posting notice on the Site. Your continued use of the Service shall constitute your consent to any changes made. If you do not agree to the new or different terms, you should not use the Service.
This Policy is an integral part of the our Terms of Use (the “Terms”).
RASCI stresses its privacy and security standards to guard against identity theft and provide security for your personal information. We regularly re-evaluate our privacy and security policies and adapt them as necessary to deal with new challenges.
Information Collection
In the course of using the Service, you or others may provide RASCI with certain information relating to you, including without limitation information that RASCI collects on your behalf as part of the Service and information related to you that is added to the Service through any interface or mechanism (“Personal Content“).
Personally Identifiable Information
Personal Content provided by you or a third party that may personally identify you, including without limitation your medical data (“Personal Identifiable Information”) shall be used only pursuant to this Policy. RASCI does not claim ownership of the Personal Identifiable Information provided to it in the use of the Service.
In order to fully benefit from the use of the Service, you may choose to provide RASCI your login credentials to websites for third party providers (“Portal Credentials”) in order to allow us to import your health data from those websites. We will save and use your Portal Credentials pursuant to this Policy. We will delete such Portal Credentials upon termination of Our Service or following your written request to support@rasci.ca.
Non Personally Identifiable Information
Personal Content that does not personally identify you (“Non Personal Identifiable Information”), may be collected by RASCI in the following ways:
Information that your browser sends when you visit a website or online service (“Log Data”). This Log Data may include, but is not limited to, your computer’s Internet Protocol address, location, browser type, the web page you were visiting before you access the Service and information you search for using the Service.
Like many services, RASCI uses “cookies” to collect information. A cookie is a small data file that we transfer to your computer’s hard disk for record-keeping purposes. We use “session ID cookies” to enable certain features of the Service, to better understand how you interact with the Service and to monitor web traffic routing and aggregate usage of the Service. You can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the website you visit. If you do not accept cookies, however, you may not be able to use all portions or all functionality of the Service.
RASCI may use automated devices and applications, such as Google Analytics or Mixpanel, to evaluate usage of the Service. We use these tools to help us improve the Service, performance and user experience. We may also engage third parties to track and analyse Service data or provide other services on our behalf. Such third parties may combine the information that RASCI provides about you with other information that they have collected. This Policy does not cover such third parties’ use of the data.
Other websites and applications may also place or read cookies on your computer’s browser. Please see below the section “Links to Third Party Sites”.
Links to Third Party Sites
The Service may contain links to third party websites and applications (such as health service provider websites). However this Policy applies only to the Service. RASCI does not exercise control over providers of information, or over banners, other advertisements or links from within the Service. These other sources may place their own cookies or other files on your computer, collect data or solicit personal information from you, and they follow different rules regarding the use or disclosure of the information that you submit. We encourage you to read the privacy policies and other terms of the other sources before using their services.
How We Use Personal Identifiable Information
Personal Identifiable Information is used:
-
to provide the Service;
-
to monitor and analyze use of the Service and for the technical administration and troubleshooting of the Service;
-
to personalize your experience;
-
to provide to you service announcements;
-
to provide RASCI with statistical data;
-
to enforce the Terms;
-
to better understand your needs both on an aggregated and individualized basis in order to improve the Service;
-
to communicate with you and contact you to obtain feedback from you regarding the Service and/or to inform you about promotional offers;
-
to determine your eligibility for research and research recruitment;
-
to curate messaging and promotional offers relevant to your use of the Service; and
-
to disclose to third party vendors, service providers, contractors or agents who perform functions on our behalf.
We will disclose Personal Identifiable Information only in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).
How We Use Non Personal Identifiable Information
Records Bank uses information that is Non Personal Identifiable Information for the above purposes and in addition in order to:
-
take anonymous or aggregate personal information and disclose such data only in a non-personally identifiable manner to organizations approved by RASCI for marketing, advertising, medical research, or similar purpose; and
-
disclose to third party vendors, service providers, contractors or agents who perform functions on our behalf.
Information Sharing and Disclosure
RASCI may share the information about you, including any information provided by you, as follows:
Authorized Disclosure. RASCI may make your Personal Content available to third parties that are authorized by you to receive such content.
Aggregate Information and Non-Identifying Information: RASCI may share aggregated information, including queries and offers generated as a result of your use of the Service, that includes non-identifying information and Log Data, with third parties for industry analysis, demographic profiling and other commercial purposes. Any aggregated information shared in these contexts will not contain your Personal Identifiable Information.
Combined Information: RASCI may combine certain Personal Identifiable Information with Non Personal Identifiable Information in order to allow us to create information packages and services that are better tailored to your interests and preferences. Among other things, linking this information may allow us generally to improve and personalize the Service. If we combine or link any information with your Personal Identifiable Information, the resulting combination will be treated as Personal Identifiable Information under this Policy.
Compliance with Laws and Law Enforcement: RASCI cooperates with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including but not limited to subpoenas), to protect our or a third party’s property and rights, to protect the safety of the public or any person, or to prevent or stop any activity we may consider to be, or to pose a risk of being, illegal, unethical, inappropriate or legally actionable.
Other Transfers: In connection with a merger, acquisition, reorganization or sale of all or substantially all of RASCI’s shares or assets, or in the event of our bankruptcy, we may transfer some or all of our assets, including among others any Personal Content, subject to this Policy as in effect immediately prior to such a transfer (except if we notify you otherwise).
Deleting Your Personal Content
When making a medical record request through RASCI and when that request is fulfilled, and delivered to you and to parties that you have authorized RASCI to disclose to, your medical record will also be stored in our cloud server for your continued use. You may at any time review and delete your RASCI account or information stored on RASCI's cloud storage by sending a request to support@rasci.ca, and we will delete your account except if required to be retained by applicable law. In addition, RASCI may delete any Personal Content pursuant to our policies as then in effect.
Security
RASCI is concerned with safeguarding your Personal Content. We employ a variety of measures designed to protect your Personal Content from unauthorized access and disclosure. However, we do not promise that any information or private communications will be protected from unauthorized disclosure or use. You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private.
Processing or Transfer
We use third party services in delivery of the Service, such as cloud or internet-based storage and data processing solutions. Such third party services are subject to confidentiality obligations and may use your Personal Content only for fulfilling their obligations to RASCI. Your Personal Content may be processed, maintained or transferred outside of your Province or country, where the privacy laws may not be as protective as those in your jurisdiction.
Contacting Us
If there are any questions or concerns regarding Records Access Services Canada, Inc. or this Policy, please contact RASCI at:
Records Access Services Canada, Inc.
P.O. Box 22042 RPO Twin Lakes.,
Sarnia, ON N7S 6J4
Email: support@rasci.ca
Phone: (800) 971-8038
