Who we are
Bloom is a virtual integrative care clinic operated by [Legal entity name], based in Calgary, Alberta. We provide care to patients who are physically located in Alberta at the time of their visit.
Our Nurse Practitioners are custodians of health information under Alberta's Health Information Act (HIA). Personal information that is not health information, and information handled in connection with non-medical wellness services, is protected under Alberta's Personal Information Protection Act (PIPA). We follow whichever law applies.
Information we collect
We only collect what we need to provide and manage your care:
- Identity & contact details: name, date of birth, email, phone, address and Alberta Health Care number.
- Health information: health history, symptoms, goals, visit notes, care plans, lab requisitions and results, and prescriptions.
- Booking & payment details: appointments, receipts and payment records. Card details are processed by our secure payment provider and are not stored by Bloom.
- Communications: messages and emails you send us.
- Website information: basic technical information such as browser type and pages visited.
Why we collect it
- To assess, plan and provide your care, and to coordinate care between your practitioners.
- To book appointments, send reminders and manage your client portal.
- To process payments and issue receipts.
- To meet our professional, regulatory and legal obligations.
- To maintain and improve the quality and safety of our services.
Legal authority & consent
We collect, use and disclose health information as permitted by the Health Information Act [specific section(s) to be confirmed by legal counsel], and personal information as permitted by the Personal Information Protection Act. Where consent is required, we will ask for it, and you may withdraw your consent at any time, subject to legal or contractual limits. Withdrawing consent may affect our ability to provide some services.
How we use & share it
Your information is accessed only by those who need it to care for you or run the clinic. We may share it:
- Between your Bloom practitioners, to coordinate your care.
- With laboratories, pharmacies and other health providers involved in your care, including referrals.
- With service providers that help us operate, such as our booking and records platform, video visit, email and payment providers, under agreements that require them to protect it.
- When required or permitted by law, such as to a regulatory college or court order.
We never sell your information.
Technology, AI & automated systems
Your information is entered into secure electronic systems, including our practice management platform [Jane] and our client portal. Daisy, our automated AI assistant in the portal, shares general, non-medical wellness information and portal support. Daisy does not give medical advice or interpret your results.
[Confirm: privacy impact assessment(s) submitted to the Office of the Information and Privacy Commissioner of Alberta for these systems.]
Storage & security
We protect your information with administrative, technical and physical safeguards, including encrypted connections (SSL), role-based access, secure passwords and staff confidentiality agreements. [Confirm where records are stored, e.g. on servers located in Canada.]
Retention
We keep health records for the period required by law and professional standards [retention period to be confirmed], and then securely destroy them.
Your rights
- Access: you may request a copy of your health and personal information.
- Correction: you may ask us to correct information you believe is inaccurate or incomplete.
- Consent: you may withdraw consent where consent is the basis for collection.
To make a request, contact our Privacy Officer. We will respond within the time required by law.
Children & families
Children and teens under 18 can be registered by a parent or legal guardian who is an active Bloom client. A parent or guardian provides information and consent on the child's behalf, as permitted by law.
Communications
We use email and text to send appointment reminders and care-related messages. We will only send newsletters or promotional messages with your consent, and you can unsubscribe at any time.
Website & cookies
Our website may use essential cookies and basic analytics to function and improve. Please do not send health information through general email or website forms; use your secure client portal instead.
If something goes wrong
If a privacy breach occurs that creates a risk of harm, we will notify affected individuals and the appropriate authorities as required by law.