1.About ProfileMD.ca and this Privacy Policy
This Privacy Policy explains how Eduardo Jacques Medicine Professional Corporation, an Ontario medicine professional corporation, currently operates the non-clinical digital service known as ProfileMD.ca and collects, uses, discloses, safeguards, retains, and otherwise manages personal information in connection with that service.
In this Privacy Policy:
“ProfileMD,” “ProfileMD.ca,” “we,” “us,” and “our” refer to the ProfileMD.ca service and its current operator, Eduardo Jacques Medicine Professional Corporation, when acting in connection with that service.
“Public Services” means the ProfileMD.ca website, public physician and clinic profiles, professional resources, onboarding and correction forms, professional accounts, subscription features, support services, and related communications.
“Professional User” means a physician, clinic, medical group, authorized clinic representative, or other professional organization using ProfileMD’s professional services.
ProfileMD.ca is a public professional-information and practice-support platform. It is not itself a medical clinic, hospital, insurer, regulator, emergency service, electronic medical record, patient portal, or provider of medical care.
Any clinical services provided separately by a physician, clinic, or by Eduardo Jacques Medicine Professional Corporation operating in a clinical capacity, including services associated with CoreMD Clinic, are governed by the applicable clinic’s privacy practices, professional obligations, and Ontario health-privacy law. Those clinical activities are separate from the ProfileMD Public Services described in this Privacy Policy.
Back to top
2.Important notice for patients
ProfileMD.ca public pages are not designed or approved for the submission of personal health information.
Do not send or enter any of the following through a public ProfileMD form, general contact page, ordinary email address, or other non-secure ProfileMD channel:
symptoms, medical concerns, or medical history;
diagnoses or treatment information;
medication or allergy information;
laboratory, imaging, pathology, or consultation results;
health card, insurance, or government identification numbers;
prescription or prescription-renewal requests;
referral information;
appointment requests containing medical details;
medical records or clinical documents;
photographs containing health information;
information about another patient;
urgent medical concerns; or
emergency information.
ProfileMD’s public channels are not monitored by a clinical team and must not be relied upon for medical advice, triage, diagnosis, treatment, prescription services, appointment management, or emergency response.
For a medical emergency, call 911 or attend the nearest emergency department. For a care-specific matter, contact the relevant physician or clinic directly through its approved communication process.
Back to top
3.Scope of this Privacy Policy
This Privacy Policy applies to personal information under ProfileMD’s control in connection with the Public Services.
It does not govern information submitted directly to or collected by:
an independent physician or clinic;
an electronic medical record;
OceanMD or an Ocean eForm;
an external booking platform;
a clinic-controlled patient portal;
a secure messaging provider;
a hospital or health-care institution;
an insurer or government service;
a professional regulatory body; or
another independent third-party website or service.
Those organizations determine their own privacy practices and are responsible for complying with the laws and professional requirements applicable to them.
Back to top
4.ProfileMD’s role
ProfileMD provides public professional and administrative information intended to help users:
locate physicians and clinics;
review factual practice information;
understand publicly stated access or administrative processes;
prepare for a medical appointment;
access general health-education resources;
identify clinic-approved next steps; and
follow links to external services selected by participating physicians or clinics.
ProfileMD does not make clinical decisions, determine whether a person requires treatment, select a physician for an individual patient, or guarantee that care will be available.
Using ProfileMD does not, by itself, establish a physician-patient relationship.
Back to top
5.Personal information we may collect
The information collected depends on how an individual or organization uses the Public Services.
5.1Website and technical information
When a person visits ProfileMD.ca, ProfileMD or its service providers may automatically receive limited technical information, such as:
Internet Protocol address;
browser and device type;
operating system;
language and regional settings;
referring website or page;
pages viewed;
links selected;
date and time of access;
approximate geographic region inferred from an IP address;
session or cookie identifiers, where used;
security and authentication logs;
website error and performance information; and
information used to prevent fraud, abuse, unauthorized access, or malicious activity.
ProfileMD may record that an external clinic link was selected. Unless expressly stated otherwise, ProfileMD does not receive the medical or personal information later submitted through the external system.
5.2Professional and clinic information
When a physician, clinic, medical group, or authorized representative contacts or uses ProfileMD, we may collect:
name and professional title;
professional credentials;
clinic or organization name;
professional email address;
professional telephone number;
business or practice address;
regulatory registration number;
specialty or areas of practice;
languages spoken;
clinic affiliations;
publicly offered services;
practice-access information;
role and authority within an organization;
profile photographs, biographies, and logos;
profile creation, verification, correction, or removal requests;
selected subscription or service information;
account-administration information; and
communications with ProfileMD.
5.3Information from public sources
Where permitted by law, ProfileMD may obtain professional or business information from sources reasonably believed to be reliable, including:
professional regulatory registers;
official clinic or hospital websites;
public professional directories;
physician or clinic submissions;
government or institutional sources;
publicly available professional biographies; and
publicly listed business contact information.
Public professional information may include a physician’s name, credentials, specialty, registration status, practice location, languages, clinic affiliations, and public business contact information.
Publication of this information does not constitute an endorsement, credentialing decision, recommendation, competency assessment, quality ranking, or guarantee of current availability.
5.4Professional accounts
Where ProfileMD offers professional accounts, we may collect:
username and authentication information;
account-holder identity;
organization and authority information;
account permissions;
account activity;
security logs;
profile approvals and revisions; and
support and administrative records.
Professional Users must not share login credentials or permit unauthorized persons to access an account.
5.5Subscription and billing information
Where paid services are offered, ProfileMD may collect:
subscription plan;
account and billing contact;
invoice information;
payment status;
transaction identifiers;
applicable tax information;
renewal and cancellation records; and
communications concerning payment or account administration.
Payment-card information may be entered directly into a third-party payment processor’s system. Unless expressly stated otherwise, ProfileMD does not receive or store complete payment-card numbers.
5.6Communications
ProfileMD may retain:
emails;
professional inquiries;
support requests;
complaints;
profile-correction requests;
feedback;
security reports;
privacy requests; and
other business communications.
These records may be used to respond to the communication, administer services, maintain appropriate business records, investigate misuse, and protect legal rights.
Back to top
6.Personal health information sent by mistake
ProfileMD does not knowingly solicit personal health information through its public channels.
If personal health information is inadvertently submitted to ProfileMD, we may take reasonable steps to:
restrict access to the information;
assess the privacy and security implications;
notify the sender that the channel is inappropriate for clinical communication;
direct the sender to the relevant clinic or an appropriate emergency service;
identify whether another organization should receive the information;
securely delete, return, or otherwise manage the information where legally and technically appropriate;
document the incident where necessary; and
comply with applicable legal, regulatory, contractual, or notification obligations.
ProfileMD will not use accidentally submitted health information to diagnose, treat, prescribe, triage, confirm an appointment, establish a physician-patient relationship, or provide clinical advice.
Sending information to ProfileMD does not mean that a physician or clinic has received or reviewed it.
Back to top
7.How ProfileMD uses personal information
ProfileMD may use personal information to:
provide and maintain the Public Services;
create and display professional profiles;
verify professional or clinic information;
review and process profile corrections;
authenticate Professional Users;
administer professional accounts;
process subscriptions and payments;
respond to inquiries, complaints, and support requests;
communicate profile, account, billing, security, or service information;
provide requested professional services;
improve website usability and performance;
understand general usage patterns;
maintain accurate business and financial records;
detect and prevent fraud, impersonation, scraping, attacks, or unauthorized access;
investigate violations of the Terms of Service;
protect ProfileMD, its users, physicians, clinics, and the public;
establish, exercise, or defend legal rights;
comply with applicable laws and lawful requests; and
carry out another purpose identified at or before the time of collection.
ProfileMD will limit its collection, use, and disclosure of personal information to purposes that a reasonable person would consider appropriate in the circumstances.
Back to top
8.Consent and lawful authority
Where consent is required, ProfileMD will seek consent in a manner appropriate to the nature and sensitivity of the information and the circumstances.
Consent may be express or implied where permitted by law.
An individual may withdraw consent to a future use of personal information, subject to:
reasonable notice;
legal or regulatory requirements;
contractual obligations;
security requirements;
legitimate record-retention needs; and
consequences that will be explained where appropriate.
ProfileMD may collect, use, or disclose information without consent where permitted or required by law, including in connection with fraud prevention, security investigations, legal proceedings, debt collection, regulatory requirements, or lawful government and court orders.
Back to top
9.Cookies and analytics
ProfileMD may use cookies and similar technologies for:
essential website functionality;
account authentication;
website security;
fraud and abuse prevention;
remembering user preferences;
performance monitoring; and
privacy-conscious website analytics.
Where required by law, non-essential cookies will not be activated until the user has been given an appropriate choice.
ProfileMD does not sell browsing information.
ProfileMD does not use a person’s viewing of physician profiles or health-resource pages to create a health-interest advertising profile or to permit third parties to target that person with behavioural advertising based on an inferred health condition.
Users may manage cookies through any preference controls provided on the website or through their browser settings. Blocking strictly necessary cookies may prevent some functions from operating properly.
ProfileMD may publish a separate Cookie Notice identifying the cookies, analytics tools, purposes, and typical retention periods actually in use.
Back to top
10.Marketing and electronic communications
ProfileMD may send professional or commercial communications where the recipient has consented or where the communication is otherwise permitted by applicable law.
Commercial communications will:
identify ProfileMD or the relevant sender;
provide valid contact information; and
contain a functioning unsubscribe mechanism where required.
Unsubscribe requests will be processed within the period required by law.
ProfileMD may continue to send non-promotional communications reasonably necessary for:
account administration;
billing;
security;
privacy;
legal notices;
profile verification;
service delivery; or
an existing contractual relationship.
Back to top
11.When information may be disclosed
ProfileMD does not sell or rent personal information.
ProfileMD may disclose information in the following circumstances.
11.1Service providers
ProfileMD may engage service providers for:
website hosting;
cybersecurity;
cloud storage;
authentication;
analytics;
communications;
customer support;
payment processing;
accounting;
professional verification;
document management; and
other operational services.
These providers may process information only for authorized purposes and are expected to use safeguards appropriate to the sensitivity of the information.
11.2Physicians, clinics, and authorized representatives
Information may be disclosed to the relevant physician, clinic, medical group, or authorized representative when necessary to:
verify authority;
create or manage a profile;
process a correction;
respond to a dispute;
administer a clinic account; or
provide a requested professional service.
11.3Public profile publication
Professional information approved by a physician or clinic, or lawfully obtained from an appropriate public source, may be displayed publicly through ProfileMD.
11.4Professional advisers
Information may be disclosed to lawyers, accountants, insurers, auditors, consultants, or other professional advisers where reasonably necessary and subject to appropriate confidentiality obligations.
11.5Legal, regulatory, and safety purposes
ProfileMD may disclose information where reasonably believed to be required or permitted:
by applicable law;
by a court order or other lawful demand;
by a regulatory or governmental authority;
to investigate fraud, impersonation, harassment, or abuse;
to investigate or respond to a security incident;
to enforce an agreement;
to protect legal rights; or
to protect the safety of users, physicians, clinics, ProfileMD personnel, or the public.
11.6Business transactions
Information may be disclosed under appropriate confidentiality protections in connection with a proposed or completed:
financing;
corporate reorganization;
merger;
acquisition;
sale of assets;
transfer of a service; or
other business transaction.
Any successor organization will be required to manage the information in accordance with applicable law and the commitments governing the information at the time of transfer.
Back to top
12.External clinical systems and third-party links
ProfileMD may provide a physician- or clinic-approved link to an external:
booking system;
OceanMD service or Ocean eForm;
secure form;
patient portal;
clinic website;
secure messaging platform;
electronic medical record-connected service; or
other third-party system.
Selecting such a link means the user is leaving ProfileMD.ca.
Unless a separate written notice expressly states otherwise:
the external system is not operated or controlled by ProfileMD;
the physician, clinic, or third-party provider determines what information is collected;
ProfileMD does not receive, review, monitor, or store the information submitted;
the external provider’s privacy policy and terms apply;
ProfileMD does not control the external provider’s safeguards;
ProfileMD does not guarantee successful transmission;
ProfileMD does not guarantee that clinic personnel will review or respond to a submission; and
submitting information does not guarantee an appointment, prescription, referral, treatment, or other clinical service.
Users should confirm that they have reached the intended external service and review its privacy information before submitting sensitive information.
Back to top
13.Safeguards
ProfileMD uses reasonable administrative, technical, and organizational safeguards appropriate to the nature and sensitivity of the information under its control.
Safeguards may include:
role-based access controls;
least-privilege access;
authentication requirements;
password protections;
encryption in transit;
secure website and hosting configuration;
system logging and monitoring;
confidentiality obligations;
service-provider assessment;
backup and recovery processes;
privacy and security training;
vulnerability management; and
incident-response procedures.
No Internet transmission, website, or electronic-storage method can be guaranteed to be completely secure.
Users must not transmit sensitive information or personal health information through ProfileMD’s public forms or ordinary email channels.
Back to top
14.Storage and processing locations
ProfileMD’s service providers may store or process information in Canada or in other jurisdictions.
Information processed outside Canada may be subject to the laws of the jurisdiction in which it is processed, including lawful access by courts, governments, regulators, or law-enforcement authorities.
ProfileMD uses contractual, organizational, and technical measures appropriate to the circumstances when engaging service providers.
Information about material service providers or processing locations may be requested from the Privacy Officer, subject to reasonable confidentiality and security limitations.
Back to top
15.Retention and secure disposal
ProfileMD retains personal information only for as long as reasonably necessary to:
provide the requested service;
maintain an active profile or account;
administer a subscription;
process a correction or complaint;
prevent or investigate misuse;
maintain security and audit records;
comply with tax, financial, contractual, and legal requirements; and
establish or defend legal rights.
Retention periods may differ depending on the category of information and the reason it is held.
When information is no longer reasonably required, ProfileMD will securely delete, anonymize, or dispose of it, subject to:
applicable legal requirements;
technical limitations;
system backup cycles;
fraud-prevention requirements; and
legitimate legal-hold obligations.
Back to top
16.Access, correction, and withdrawal requests
Subject to applicable law, an individual may ask ProfileMD to:
confirm whether ProfileMD holds personal information about them;
provide access to that information;
explain how it has been used or disclosed;
correct inaccurate or incomplete information;
withdraw consent to future uses;
update communication preferences; or
close an eligible professional account.
ProfileMD may require reasonable identity and authority verification before processing a request.
Access, correction, deletion, or withdrawal may be limited where:
ProfileMD is legally required to retain the information;
the information concerns another person;
disclosure would reveal confidential commercial information;
the information is protected by legal privilege;
disclosure would create a security risk;
the request is fraudulent, abusive, or frivolous; or
another legal exception applies.
Back to top
17.Physician and clinic profile corrections
Physicians, clinics, and authorized representatives may request correction, review, updating, deactivation, or removal of professional profile information by contacting:
support@profilemd.health
A request should identify:
the relevant profile or page;
the information believed to be inaccurate;
the requested correction;
the requester’s relationship to the physician or clinic; and
supporting official information, where reasonably available.
ProfileMD may verify the identity and authority of the requester.
Legitimate factual corrections are not conditional on purchasing or maintaining a paid subscription.
Payment for a ProfileMD service does not purchase:
a more favourable professional assessment;
regulatory status;
a clinical-quality designation;
an endorsement;
a competency rating; or
a representation of clinical superiority.
Back to top
18.Security and privacy incidents
ProfileMD maintains procedures to assess suspected:
loss;
theft;
unauthorized access;
unauthorized disclosure;
unauthorized alteration;
misuse; or
destruction of personal information.
Where notification is required by law, ProfileMD will notify affected individuals, regulators, contractual partners, law-enforcement authorities, or other appropriate parties in the required circumstances.
Security concerns may be reported to:
privacy@profilemd.health
The subject line should state: Security or Privacy Concern.
Back to top
19.Children and minors
Members of the public, including minors, may view general public information on ProfileMD.ca.
Professional accounts, paid services, and professional onboarding are intended only for adults who have authority to act for themselves or for the relevant physician, clinic, or organization.
ProfileMD does not knowingly solicit personal health information from children or minors through its public channels.
Back to top
20.Automated decision-making and artificial intelligence
ProfileMD does not use information submitted through its Public Services to make automated clinical decisions, diagnose medical conditions, determine treatment, or decide whether a person should receive health care.
ProfileMD will not knowingly use accidentally submitted personal health information to train a public or general-purpose artificial-intelligence model.
Where automated tools are used for administrative, security, technical, or content-support purposes, ProfileMD remains responsible for managing personal information under its control and applying safeguards appropriate to the circumstances.
Back to top
21.Changes to this Privacy Policy
ProfileMD may update this Privacy Policy to reflect changes in:
law;
technology;
service providers;
security practices;
business operations; or
the Public Services.
The revised version will be posted with an updated “Last Updated” date.
Where a change is material, ProfileMD may provide additional notice through the website, a professional account, or direct communication.
Back to top
22.Privacy Officer and complaints
ProfileMD has designated the following person as responsible for privacy matters relating to the Public Services:
Privacy Officer
Dr. Eduardo Jacques
Eduardo Jacques Medicine Professional Corporation
Ontario, Canada
Email: privacy@profilemd.health
Requests involving profile information may also be sent to:
support@profilemd.health
General business inquiries may be sent to:
hello@profilemd.health
The corporate registered office is not a clinic or patient-care location and is not published as a channel for patient communication.
Questions about medical records or information submitted through a clinic-controlled or third-party clinical system should be directed to the physician or clinic responsible for that information.
An individual may also have the right to contact:
the Office of the Privacy Commissioner of Canada; or
the Information and Privacy Commissioner of Ontario,
depending on the nature of the information, the organization responsible for it, and the legislation that applies.
Back to top
