Effective date:
01-09-2024
Last modified:
This privacy policy explains how ENDA Technologies Inc. ("we", "our" or "us") collects,
uses, protects, and shares your information when you use our AI-powered medical scribe
platform. We are committed to protecting the confidentiality of your information,
including medical data, and to complying with all applicable laws in Quebec and Canada
regarding the protection of personal information.
1. Definitions
Personal data:
Any information that allows you to be identified directly or indirectly, such as your
name, address, phone number, email address, or specific medical information.
Medical data:
All patient-related information, including medical records, diagnoses, prescriptions,
consultation notes, and any other medical information.
Data processing:
Any operation performed on data, including collection, recording, organization, retention,
modification, retrieval, consultation, use, communication, and deletion.
Privacy Officer:
Yael Demers
ydemers@endatechnologies.com
2. Information Collection
We collect several types of data at different points to ensure the proper functioning of
our platform:
2.1 Information you provide to us
Account data:
When you create a user account on our platform, we collect information such as your name,
email address, phone number, and profession.
Patient medical data:
We collect information transmitted during medical consultation transcriptions. This data
may include personal and medical information provided by the patient during the
consultation, and is used exclusively to provide an accurate and useful summary. All
collected data is stored temporarily and deleted from our systems as soon as the
associated consultation is deleted, in accordance with our data retention policy and
applicable regulatory requirements.
2.2 Automatically collected information
Usage data:
We automatically collect information when you interact with our platform, including
details about your browser, IP address, approximate geographic location, pages visited,
and time spent on our platform.
Cookies and similar technologies:
We use cookies to store information about your session, improve your user experience, and
track usage patterns on our platform.
3. Use of Data
We use the data we collect in strict compliance with this policy and applicable laws, in
particular for:
3.1 Service delivery
Medical data transcription and analysis:
Medical data is processed through our AI to generate accurate transcriptions and
facilitate clinical note-taking for healthcare professionals.
Service improvement:
We analyze user interactions with the platform to continuously improve it and offer more
efficient, secure, and personalized services.
3.2 Legal compliance and regulatory obligations
Compliance with Quebec and Canadian laws:
We process data in accordance with the Act respecting the protection of personal
information in the private sector (Quebec) and PIPEDA, Law 25, Law 3.
3.3 Communication
Customer support:
We use the information provided to respond to technical support requests and provide
information about services.
Alerts and updates:
We may send you emails about important security updates, policy changes, or
account-related information.
4. Data Sharing
We are committed to never selling, renting, or exchanging your personal information to
third parties. However, in certain circumstances, we may need to share your data under the
following conditions:
4.1 Sharing with third-party service providers
We work with trusted partners to provide essential services, such as:
Cloud service providers:
Hosting of medical data in secure environments.
Analytics services:
We use analytical tools to understand how our platform is used and to improve it. These
third parties are required to protect your information and use it only in accordance with
our instructions and this policy.
4.2 Legal obligations
We may disclose your information if required by law, for example to respond to a
legitimate request from governmental authorities, or to protect our legal rights.
5. Data Security
The security of your data is our priority. We use robust technical and organizational
measures to protect your information against loss, theft, unauthorized access, or
disclosure.
Encryption:
All medical and personal data is encrypted in transit and at rest.
Strong authentication:
Access to our platform is restricted to authorized users and protected by strong
authentication mechanisms (password, two-factor authentication, etc.).
Continuous monitoring:
We conduct regular audits of our systems to detect and prevent intrusions or other
malicious activities.
6. Data Retention
We retain data for as long as necessary for the purposes for which it was collected, or in
accordance with legal and regulatory requirements. In particular, medical data is retained
in accordance with the laws of the province of Quebec and Canadian legal obligations.
User account data:
This information is retained as long as the account is active. Once the account is
deactivated or deleted, personal information will be deleted or anonymized within a
reasonable period, unless its retention is required to comply with a legal obligation.
Medical data:
Medical data collected during consultation transcriptions is retained only for the
duration necessary for its use. Once the consultation is deleted, all associated medical
data is permanently erased from our systems. We are committed to applying rigorous
security measures to protect data during its retention period.
7. Your Rights
7.1 Right of access
You have the right to request access to the personal information we hold about you. Upon
request, we will provide you with information about the nature of this data and our use
thereof, within the limits permitted by law.
7.2 Right of rectification
If you find that the personal information we hold about you is inaccurate or incomplete,
you have the right to request its correction. We are committed to correcting this
information as quickly as possible, in accordance with the requirements of Law 25, Law 3,
and PIPEDA.
7.3 Right to erasure
You have the right to request the erasure of your personal data when its retention is no
longer necessary or if you withdraw your consent, in applicable cases. We will delete the
relevant information in compliance with regulatory requirements and our data retention
policy.
7.4 Right to data portability
You may request that the personal data you have provided to us be transmitted to you in a
structured, commonly used, and machine-readable format, or transferred directly to another
organization, where technically possible and applicable.
7.5 Right to object
You have the right to object, on legitimate grounds, to the processing of your personal
data, including when it is used for profiling or automated decision-making. We will cease
processing your information, unless there are compelling legitimate reasons or if it is
necessary for legal purposes.
For all questions or requests, contact:
Yael Demers
ydemers@endatechnologies.com
8. Cookies and Similar Technologies
We use cookies to:
-
Improve the performance of our platform:
Cookies help us understand how you use our site and allow us to make your experience
smoother.
-
Personalization:
Cookies allow us to adapt certain features to your preferences. You may choose to disable
cookies in your browser settings, although this may affect certain features of our
platform.
9. International Data Transfers
Your data may be processed or stored outside Canada, in countries where data protection
laws may differ. When we carry out international data transfers, we ensure that adequate
measures are in place to protect your information, in accordance with applicable laws.
10. Changes to this Privacy Policy
We reserve the right to modify this privacy policy at any time. If we make substantial
changes, we will inform you by email or via the platform so that you are always aware of
how your information is used and protected.
11. Contact Us
If you have questions or concerns about this privacy policy, or if you wish to exercise
your rights as a user, please contact us at:
ENDA Technologies Inc.
37 rue des fauvettes, Verdun, Quebec H3E 1X4
info@endatechnologies.com
