service bg

Privacy Policy

PrivacyPolicy

Materra Health Inc. (“Materra”, “us”, or “we”) offers you the Materra website (the “Website”) and our associated online clinic (the “Platform”). Materra is committed to protecting your personal information and complying with applicable data protection and privacy laws, including British Columbia’s Personal Information Protection Act (“PIPA”) and, where it applies, the federal Personal Information Protection and Electronic Documents Act (“PIPEDA”). This Privacy Policy explains how wedo so. This Privacy Policy applies to the collection, use, and disclosure of personal information by health care professionals, including physicians and other regulated health providers (“HCPs”), who use the Platform to provide individuals with telehealth or telemedicine services (“Health Services”) or to assist with the provision of those services (“Support Services”). Some HCPs may be subject to additional privacy laws and professional requirements that govern how they collect, use, and disclose personal information. In certain cases, the HCP, and not Materra, is responsible for the protection of your personal information. In those cases, Materra acts as the HCP’s agent and will continue to protect all personal information in accordance with this Privacy Policy, while collaborating with the HCP as required. If you have any questions about this, please contact us at materrahealthcare@gmail.com

What information do we collect?

Website– Cookies

Unless you opt out, our Website uses cookies and similar automatic data collection technologies, with your consent, to collect information when you visit or interact with the Website. This may include unique identifiers and preference information such as IP address, browser type, time zone and language settings, operating system, device identifiers, pages viewed, response times, length ofvisit, and navigation behavior. These cookies help us understand how you use the Website so that we can . You can opt out of cookies, or prevent third-party websites from accessing them, through your browser’s privacy settings. Opting out may disable some Website features and may prevent us from providing the information or services you request.

Website– Contact Us

When you submit a form on the Website, use our chat messenger, or email us with a question, we collect personal information such as your name, email address, and phone number. We use this informationto communicate with you, provide the information you requested, and conduct appropriate follow-up.

Platform– Provider Account Creation

When an HCP registers to provide services on the Platform, we collect personal information such as name, email address, phone number, billing details, information about their medical practice, and information about their registration with their respective regulatory college. We use this information to create an account for the HCP, verify that they hold a valid licence with their regulatory college, confirm their identity, and contact them about their use of the Platform.

Platform– Patient Account Creation

When you register as a patient on the Platform to access HealthServices with an HCP, we collect your name, email address, phone number, gender, date of birth, province or territory of residence, health card number, and any billing information required for services that are not covered by provincial health insurance. We use thisinformation to create your user account (“User Account”).

Health Servicesand Support Services may also be available to children at the discretion of the HCP. For all patients under the age of majority, the User Account holder must be the patient’s parent or legal guardian. The parent or legal guardian may be asked to providepersonal information about the minor in order to register them (“Registered Child”).

Platform– Patient Intake Forms

When you register as a new patient, we ask you to complete a patient intake package. Your HCP uses this information to understand your health, coordinate your care, and keep your medical record complete. Through the intake package we collect:

Identity and contact details. Name, home address, phone number, email address, date of birth, gender and pronouns, and MSP number.

Care coordination details. Reason for referral, where you have been receiving care, your emergency contact, your preferred pharmacy, and any substitute decision maker (name, relationship, and contact information).

Medical history. Current and past medical conditions, new or unaddressed health concerns, surgeries and hospitalizations, motor vehicle accidents, screening history (for example Pap smear, mammogram, colonoscopy, stool test, and bone density), medications, herbs and supplements, and immunizations.

Reproductive and women’s health history. Pregnancies, births, and related complications.

Family history. Medical conditions among your parents, siblings, and grandparents, including approximate ages at which conditions were acquired and relevant causes of death.

Social and lifestyle history. Alcohol, caffeine, tobacco, vaping, and recreational drug use, sexual activity, sleep, diet, physical activity, living arrangements, occupation, spirituality requirements, and current height and weight.

Review of systems. Current symptoms across body systems, including mental health symptoms.

Some of this information is sensitive. We ask for it because it is clinically relevant, and all of it is treated as personal health information andprotected as described in this Privacy Policy. You may leave blank any question you would prefer to discuss directly with your HCP. Completed intake forms are recorded in our electronic medical recordsystem, described below under Our electronic medical record system(MYLE).

Platform– Patient Visits

Through the Platform, HCPs may collect and use personal health information about you. This may be collected verbally or in writing and may include the reason for your consultation, relevant health history, current conditions or symptoms, and current treatments. HCPs use this information to provide the Health Services and Support Services. HCPs may log this information to your User Account, whereit may be referenced by them and other HCPs in the future. You can also log personal health information into your User Account for easy reference by your HCP. Personal health information collected during your visits is recorded in our electronic medical record system, described below under Our electronic medical record system (MYLE).

All HCPs who provide Health Services or Support Services through Materra are required to document patient visits in our MYLE electronic medical record system, so your complete medical record is kept in one place. Materra operates as a group practice with cross coverage: if you see a different Materra HCP, for example when your usual HCP is away, that HCP can access your chart so that your care continues with full context. Access to your record is limited to the Materra HCPs and staff involved in your care and in the administration of the clinic, on the basis of your implied consent within your circle of care. If you would prefer that some or all of your information not be visible to certain Materra HCPs, you may ask for it to be masked, as described under Masking, disclosure directives, and protective words. HCPs remain subject to the professional and record-keepingrequirements of their regulatory colleges.

Platform– Virtual Care Communications

With your consent, obtained through our Consent to Use Technology and Virtual Care Tools form, your care team may communicate with you by email, text and instant messaging, telephone, video conferencing, andthe Website or patient portal, and we record your preferred contact method for virtual care. Electronic communications concerning your diagnosis or treatment may be transcribed or printed and made part ofyour medical record, where they may be accessed by other individuals authorized to access the record, such as clinical staff and billing personnel. You may withdraw your consent to any of these communication channels at any time by providing written notice.

Why do we use your personal information?
We use yourpersonal information to:

-manage our relationship with you and provide the information or services you request;
create accounts for HCPs who provide Health Services or Support Services through the -Platform; create User Accounts for patients who receive Health Services or Support Services through the Platform;
-facilitate the delivery of Health Services and Support Services, including maintaining records as required by applicable laws and HCP regulatory bodies;
-conduct internal evaluation and quality improvement activities to improve our services;
-communicate with you about inquiries, customer service requests, or employment opportunities;
-detect, prevent, or investigate security breaches;
-process billing or payment information for services, as applicable;
-protect our business; and
-maintain appropriate records for internal administrative purposes.

We will not use or disclose personal health information that identifies you for research or education purposes outside your circle of care without your express consent, as described under How your consent works.

Materra mayaggregate and de-identify personal information (including personal health information) stored on its systems and use that aggregated,de-identified information for statistical analysis, service planning, quality improvement, and other business purposes. Aggregated, de-identified information cannot reasonably be used to identify you.

How your consent works

Under PIPA, the collection, use, and disclosure of personal information by a medical practice operate primarily on an implied consent model, supplemented by deemed consent and express consent. This section explains what each of these means for you.

Impliedconsent within your circle of care. When you seek care through the Platform, the HCPs directly involved in your care, together with the other health professionals who form part of your circle of care(for example, specialists you are referred to, referring physicians, laboratory staff, and pharmacists), may collect, use, disclose, and retain your personal health information for the purposes of your ongoing care and treatment on the basis of your implied consent. Sometimes called the opt-out model, implied consent must be voluntary and informed. This Privacy Policy forms part of the notice we provide so that you understand how your personal health information is managed, and you will always have a reasonable opportunity to decline. You have the right to expressly withhold or withdraw your consent at any time, without fear of retribution.

Deemedconsent. In some situations, your consent is deemed to be given because the purpose of the collection, use, or disclosure is clear and obvious to a reasonable person at the time, and you voluntarily provide your information for that specific purpose. For example, when you provide your health card number so that an insured visit can be billed to the provincial Medical Services Plan.

Expressconsent. Express consent, sometimes called the opt-in model, is your verbal or written agreement to the collection, use, and disclosure of your personal information for a defined purpose. We will ask for your express consent before your personal information is collected, used, or disclosed outside of your circle of care, or for secondary purposes such as education or research. If you are invited to participate in research, you will receive a separate Consent for Research form, and your decision will not affect your care.

Registration. By registering for an account to use the Platform, you (or theparent or legal guardian of a Registered Child) consent to Materra and the HCPs collecting, using, and disclosing your personal information for the purposes of (i) delivering Health Services and Support Services to you, and (ii) registering an HCP on the Platform.

Consent forms. As part of intake, you will be asked to complete a Consent to Use Technology and Virtual Care Tools form covering electronic communications, and, where AI-powered documentation tools are used inyour care, a separate Patient Informed Consent Form for AI-Powered Medical Documentation Tools. These consent forms record your express consent for those specific uses and supplement this Privacy Policy.

With holding or withdrawing consent. Subject to legal and contractual restrictions, you may withhold or withdraw your consent, in whole orin part, at any time by contacting us at materrahealthcare@gmail.com or by speaking with your HCP. Before your withdrawal takes effect, wewill explain the likely consequences, which may include limits on the Health Services and Support Services we are able to provide. Your decision will be documented and honoured.

Masking, disclosure directives, andprotective words

You may restrict access to certain personal health information about you that is stored in electronic medical record (EMR) and electronic health record (EHR) systems. This privacy protective feature is known as masking, and you have the right to be informed about it.

Masking within our EMR. You may ask for some or all of the personal information in your Materra record to be masked, which limits who can view it. decide to mask your record, your HCPs will honour your decision and will access the masked information only with your express consent, will document the discussion and your decision in your medical record, and will provide the best care possible with the information available to them.

What masking means for your care. Masking can affect the delivery of your care, because your HCP may need to make decisions without a complete picture of your health. Your HCP still has an obligation to take a proper history from you and may ask you about information even if it is masked. If you choose not to discuss relevant information, that choice will also be documented. Outside of an emergency, if your HCP believes that the absence of masked information puts your safety at risk, the HCP may decline to provide treatment, and will explain the reasons for that decision and record the relevant discussions in your medical record.

Provincial systems in British Columbia. Some of your health information is held in provincial systems outside the Platform. British Columbia gives you masking rights in those systems as well:

-Provincial Lab Information Solution (PLIS). PLIS is a provincial repository of laboratory information that has been designated as a health information bank under the E-Health (Personal Health Information Access and Protection of Privacy) Act. You may make a disclosure directive that restricts access to your lab results by having a keyword added to your record. Once the keyword is in place, authorized users may access your lab results for clinical purposes only after you share your keyword, or where urgent or emergency health care is needed.

-Pharma Net protective word. Under the Pharmaceutical Services Act, you may request that a protective word be attached to your medication and claims history in PharmaNet. You may also request a protective word for the record of a minor or adult for whom you have authority to make such decisions. Once attached, authorized users of PharmaNet may access medication information for clinical purposes only after you share your protective word. Some authorized users may request that the protective word be removed so that they can provide care in an emergency where neither you nor your representative is able to provide it.

-Health authority EHRs. Some health authorities permit patients to mask personal information in their EHR systems. For example, patients can make a disclosure directive in the Care Connect system through Vancouver Coastal Health Authority. If you would like to mask information in your Materra record, or want help understanding your masking options in provincial systems, speak with your HCP or contact us at materrahealthcare@gmail.com

Who do we share your personal informationwith?

We may share some of your personal information, including personal health information, with third-party service providers in order to operate the Website and Platform or to provide the information you request. We only use service providers that provide a comparable level of protection for your information, and our contracts require them to comply with that obligation and to use your personal information only for the services requested.

In limitedcircumstances, we may collect, use, or disclose personal information without your consent, including:

-when permitted or required by law or by regulatory proceedings;
-in an emergency that threatens an individual’s life, health, or security;
-when we require legal advice;
-to protect against fraud;
-to a collection agency in order to collect unpaid accounts; or
-to investigate an anticipated breach of an agreement or a contravention of law.

If we merge withor are acquired by another business, we will inform you of any impact on your personal information.

Website. We share your personal information only with service providers in order to operate and optimize the Website and to provide customer service.

Platform. We may share your personal information, including personal health information, with service providers, HCPs registered on the Platform,and third parties you request (such as pharmacies or HCPs not using the Platform), for purposes such as fraud prevention, providing requested services or information, operating the Website or Platform, customer service, and facilitating the delivery of Health Services and Support Services. As part of care delivery, information may also flow through our electronic medical record system to provincial systems and health information banks, for example for medical billing, e-prescribing through PharmaNet, and laboratory and imaging requisitions and results.

Our electronic medical record system (MYLE)

Materra uses MYLE, an electronic medical record platform provided by MEDFAR Clinical Solutions (“MEDFAR”), to maintain patient records and support the delivery of Health Services and Support Services. Your completed intake forms, visit records, clinical documentation, and the virtual care communications that form part of your medical record are stored in MYLE on secure servers located in Canada, and access is limited to the HCPs and staff involved in your care and in the administration of the clinic. MEDFAR acts as our service provider, including for CareWay, the AI documentation assistant built into MYLE and described under Artificial intelligence and medical documentation tools. MEDFAR states that personal information in its systems is currently hosted in Canada, that it does not sell or rent personal information, and that it limits its own service providers to using personal information only for the services they provide. MYLE integrates with government systems and health information banks to facilitate healthcare delivery, including medical billing, e-prescribing, laboratory and imaging results, and scheduling. You can read MEDFAR’s privacy policy at https://www.medfarsolutions.com/en/privacy-policy/. Requests to access or correct your medical record should be directed to Materra, not MEDFAR, as described under Your rights

Howlong do we keep personal information?

We retain personal information for as long as required to provide the services for which it was collected, and otherwise in accordance with applicable legal and regulatory requirements.

HCPs engaged through Materra are subject to professional and regulatory rules that require them to retain personal health information for a minimum period.

Materra operates as a virtual-first clinic in British Columbia. The applicable minimum retention period in British Columbia is 16 years from the date of the last entry, or 16 years from when the patient reaches the age of majority (19 in British Columbia), which ever is later. Materra currently provides Health Services and Support Services only to patients located in British Columbia, so the British Columbia retention requirements apply.

How do we keep personal information accurate?

We take reasonable steps to keep the personal information in our custody accurate and up to date, but we rely on you to notify us ofany changes to the information you have provided to us.

How do we protect your personal information?

We use reasonable and appropriate physical, administrative, and technical measures, including encryption, to protect your personal information against accidental or unlawful loss, access, or disclosure.

Only staff and service providers with a legitimate business purpose are authorized to access personal information. Unauthorized use of personal information by anyone affiliated with Materra is prohibited and is grounds for disciplinary action.

Some HCPs who use the Platform will have additional security policies and procedures for managing personal information, including personal health information.

While we take all reasonable steps to protect your personal information, security breaches cannot be entirely eliminated, and we cannot guarantee that a breach will never occur.

Where do we store personal information?

All personal information Materra collects is stored on secure servers in Canada. Our electronic medical record system, MYLE, currently stores personal information on servers located in Canada.

Personal information processed by our third-party service providers may be processed outside the jurisdiction where it is stored. While being processed in another jurisdiction, that personal information is subject to the laws of that jurisdiction, which may permit governmental authorities to access it.

HCPs on the Platform are required by their regulatory colleges to maintain appropriate records of each patient visit. At Materra, these records are maintained in our MYLE electronic medical record system, which currently stores personal information on servers located in Canada.

For more information about our service providers or where we store personal information, contact us at materrahealthcare@gmail.com

Links to third-party sites

Our Website or use of the Platform may lead you to third-party websites, including websites advertising products or services. These websites are separate and distinct from Materra and have their own privacy policies. We are not responsible for how those websites collect, use, or disclose your personal information, so please review their privacy policies before providing your personal information to them.

Artificial intelligence and medical documentation tools

With your express consent, HCPs on the Platform may use AI-poweredmedical documentation tools during your consultation and care. Materra uses CareWay, the AI medical scribe built into our MYLE electronic medical record by MEDFAR. CareWay uses AI language models to assist health care professionals with data collection and notetaking, and may process text, audio, and live patient conversations, whether in person or virtual, to generate clinical notes and related documents such as referral letters and visit summaries in support of your care, under the direction of your HCP. Generated notes are written directly into your patient chart in MYLE.

These tools process health information discussed during your visit only for thepurpose of creating clinical documentation to support your ongoing care, and that information is handled in accordance with applicable privacy laws and our clinic policies. Because CareWay is part of MYLE, your information stays within MEDFAR’s Canadian hosted infrastructure and the service provider relationship described under Our electronic medical record system (MYLE). Audio and transcripts processed by CareWay are encrypted, stored on servers in Canada, and securely deleted from Care Way within 48 hours; the resulting clinical note remains part of your medical record. Your health information is not used to train AI systems and is not used for advertising or any unrelated purpose. As with any technology used in health care, there are potential risks, such as errors in transcription or interpretation of information, and your HCP reviews AI-generated documentation before it is finalized.

Before these tools are used in your care, you will be asked to sign a separate Patient Informed Consent Form for AI-Powered Medical Documentation Tools. You may decline or withdraw your consent at any time byspeaking with your HCP, and doing so will not affect the quality or availability of your care. For more information, contact us at materrahealthcare@gmail.com

Your rights

You have the right to:
-make a written request to access your personal information;
-request that we restrict our use or disclosure of your personal information;
-ask that personal health information in your record be masked, as described under Masking, disclosure directives, and protective words;
-with hold or withdraw your consent, subject to legal and contractual restrictions;
-object to our use or disclosure of your personal information;
-request that we edit ( but not remove ) certain information, such as an email address;
-request that we transfer to another organization the personal information you have provided to us;
-request that we delete the personal information we hold about you; and
-request that we delete your account.

Contact us at materrahealthcare@gmail.com to exercise any of these rights. To confirm your identity, we may ask you to answer security questions or provide proof of identity. We will respond within 30 days. If we cannot grant your request, for example because granting access would disclose another person’s personal information, we will explain why. Any request relating to your personal health information will be redirected to the relevant HCP.
We address all requests with equal attention.

Contacting us

Accountability for your personal information is important to MaterraHealth. If you have questions about how your personal information is managed, or any complaints or concerns about this Privacy Policy, orif you believe we may have failed to adhere to it, please contact us at materrahealthcare@gmail.com