1. Introduction
This Privacy Policy explains how the C-LIST Appointment Management mobile application ("the App") collects, uses, discloses, and protects your personal information during the pilot project at Thunder Bay Regional Health Sciences Centre (TBRHSC).
Important: This App is a pilot research project and does NOT process or store Personal Health Information (PHI). The App handles only administrative appointment scheduling data and user account information.
2. Who We Are
- Application Provider & Data Processor: Dogfish App Development Inc.
- Data Provider: Thunder Bay Regional Health Sciences Centre (TBRHSC)
- Project Type: Grant-funded pilot research project
3. What Information We Collect
3.1 User Account Information
When you register for the App, we collect:
- Name: Your full name for account identification
- Email Address: For account communications and password recovery
- Professional Role: Your role at TBRHSC (Admin, Nurse, or Surgeon)
- Doctor Mnemonic (for surgeons): Your coded physician identifier
- Password: Encrypted and stored securely for authentication
3.2 Appointment Data (Non-PHI)
The App displays administrative appointment scheduling data imported from MEDITECH EHR:
- Appointment ID (internal system identifier only)
- Appointment Type (procedure code)
- Doctor Mnemonic (coded physician identifier)
- Priority Level (1-5)
- Wait List Date and Time
What We Do NOT Collect: Patient names, Medical Record Numbers (MRN), Health Card Numbers, patient contact information, patient demographics, or any other Personal Health Information (PHI).
4. How We Protect Your Information
- Encryption: All data encrypted in transit (HTTPS/TLS) and at rest (AES-256)
- Access Controls: Role-based access with minimum necessary principle
- Audit Logging: All access and modifications logged for security monitoring
- Data Location: All data stored and processed exclusively in Canada
5. Data Retention
At the end of the pilot project, all personal information and appointment data will be securely deleted within 30 days of pilot completion. You will receive written confirmation of data destruction upon request.
6. Your Rights
Under FIPPA, you have the right to:
- Access your personal information
- Request correction of inaccurate information
- Request deletion of your account at any time
- File a complaint with the Ontario Information and Privacy Commissioner
7. Contact Information
For privacy questions or to exercise your rights:
Dogfish App Development Inc.
clist@dogfish.dev
8. Complaints
If you are not satisfied with how we handle your privacy concerns, you may contact:
Information and Privacy Commissioner of Ontario
2 Bloor Street East, Suite 1400
Toronto, ON M4W 1A8
Phone: 416-326-3333 or 1-800-387-0073
Website: ipc.on.ca