5 December 2023
Welcome to WonderMD™. Please read the WonderMD Privacy Notice carefully to understand what information is collected through WonderMD, how this information is used, and when it may be disclosed.
By using WonderMD, you agree to the WonderMD Privacy Notice, even if you do not take the time to read the WonderMD Privacy Notice. The WonderMD Privacy Notice should be read in conjunction with the WonderMD Terms of Service.
In this Privacy Notice, “WonderMD” refers to our website (www.wondermd.ca), our mobile app, and the products and services offered through our website and mobile app. References to “we”, “us” or “our” means WonderMD Limited. References to “personal information” includes “personal health information”. References to “Family Members” means individuals and families and their children who are seeking pediatric healthcare services through WonderMD.
SUMMARY
This section is a summary of some – but not all – of the important terms in the WonderMD Privacy Notice. After reading this summary, use the navigation tools below to find out more information about the topics that interest you.
- By accessing or downloading and installing WonderMD, you agree to the WonderMD Privacy Notice.
- WonderMD facilitates referrals between Referring Providers and Consulting Providers and, if the Consulting Provider agrees, virtual visits. WonderMD is not a healthcare provider or an agent of healthcare providers. WonderMD is not an electronic healthcare record. WonderMD is not responsible for the personal information (including personal health information) that is collected and used by the healthcare professionals you are connected to using WonderMD. WonderMD’s function is to connect Referring Providers and Family Members to Consulting Providers.
- The types of personal information we collect and use depends on whether you are a Family Member, Referring Provider or Consulting Provider.
- The main reasons we collect personal information are to provide the WonderMD services, to facilitate billing for services that are not insured by the Ontario Health Insurance Plan, to collect amounts owing to WonderMD and Consulting Providers, to measure and understand use of WonderMD and particular features and functions of WonderMD, and to secure the WonderMD services.
- We do not use personal information of Family Members for advertising or marketing.
- We do not store recordings of virtual visits between Family Members and Consulting Providers.
- We do not use personal health information input by Family Members, Referring Providers or Consulting Providers. In very limited situations, we may need to access areas of WonderMD containing personal health information of Family Members if we are asked by a user of WonderMD to resolve a technical issue and access is reasonably necessary to resolve that technical issue.
- WonderMD uses cloud computing service providers to host and make WonderMD available. WonderMD also uses service providers to develop, maintain, monitor and secure WonderMD. WonderMD also uses third parties to assist in billing and collection, such as Stripe.
- WonderMD is not a health information custodian. If a Family Member wishes to access personal health information collected or used by a Referring Provider or a Consulting Provider, they must contact that Referring Provider or Consulting Provider. All other access requests may be made to the WonderMD Privacy Office. See contact details below.
- WonderMD uses technical, physical and administrative controls designed to protect personal information from unauthorized access, use, alteration or disclosure. However, no electronic system is impenetrable, and no internet transmission is completely secure. WonderMD cannot guarantee the confidentiality and privacy of personal information stored or transmitted through WonderMD.
- You have rights and choices. You can turn-off push notifications, deactivate your account, access and correct your personal information, and request deletion of your personal information. See “Your Rights and Choices”. IF YOU DEACTIVATE YOUR ACCOUNT YOUR DATA WILL BECOME INACCESSIBLE TO YOU AND WILL BE DELETED.
NAVIGATION TOOLS
You can use the following links to quickly find out more about how WonderMD handles your personal information.
- Collection and use of personal information
- Applicable to Family Members
- Applicable to Consulting Providers and Referring Providers
- Consent
- Third-Party Service Providers
- When we disclose personal information
- Children’s Privacy
- Retention
- Security
- Your Rights and Choices
- Privacy Notice Updates
- Contacting Us
COLLECTION AND USE OF PERSONAL INFORMATION
The types of personal information collected and used through WonderMD depends on whether you are a Family Member, a Referring Provider or a Consulting Provider.
The following table describes what personal information is collected, who uses that personal information and the purposes for which the personal information is collected and used. This Privacy Notice does not cover the personal information that you provide directly to the Referring Provider and the Consulting Provider, including when you use WonderMD for a virtual healthcare visit. Please speak to your Referring Provider and Consulting Provider for information about how they use your personal information.
APPLICABLE TO FAMILY MEMBERS
| Type of personal information | Collected from | Used by | Used for |
|---|---|---|---|
| Parent name, email address, mobile number, password | WonderMD | To create and secure your WonderMD account and register you for the services | |
| Child’s name, date of birth, gender | Family Referring | Consultant | To provide healthcare services and other purposes disclosed by Consulting Provider |
| Alternate caregiver name and contact information | Family | Consultant | For emergency contacts and other purposes disclosed by Consulting Provider |
| Address | Family | Consultant | To provide healthcare services and other purposes disclosed by Consulting Provider |
| WonderMD | To determine eligibility for use of WonderMD | ||
| For billing and collections | |||
| OHIP number for each child | Family Referring | Consultant | For for purposes related to the provision of provincially funded health resources or for other purposes authorized by PHIPA. |
| Payment card. | Family | WonderMD | To bill Consulting Provider services not insured by OHIP |
| Reason for referral, including any pertinent personal health information | Referring | Consultant | To provide healthcare services and other purposes disclosed by Consulting Provider |
| Name of Referring Providers for your child | Referring | Consultant | To provide healthcare services and other purposes disclosed by Consulting Provider |
| Consulting Providers for your child | Automatically when you are connected and make appointments | WonderMD | To facilitate referrals to the Consulting Provider |
| To bill Consulting Provider for the use of WonderMD | |||
| Date and time of appointment and number of appointments | Family Consultant | Consultant | To provide healthcare services and other purposes disclosed by Consulting Provider |
| WonderMD | To facilitate virtual appointments To bill Consulting Provider for use of WonderMD | ||
| Camera and audio permissions | Family | WonderMD | To provide the virtual appointment services |
| Usage data for WonderMD, including date, time, features used, IP address, inferred location from IP address, device type, operating system, WonderMD app version or browser type, language preference, and other similar technical information | Automatically from device used to access WonderMD | WonderMD | To provide and secure WonderMD services To analyze usage of WonderMD to improve the services |
APPLICABLE TO CONSULTING PROVIDERS AND REFERRING PROVIDERS
| Type of personal information | Collected from | Used by | Used for |
|---|---|---|---|
| Name, email address, mobile number, password | Consultant Referring | WonderMD | To create and secure your WonderMD account and register you for the services |
| Consulting Provider specialty. office details, services provided, fee schedule, College certification, insurer billing code details, and banking information | Consultant | WonderMD | To process application to use WonderMD |
| Choice of Fee Structure | Consultant | WonderMD | To bill Consulting Provider for use of WonderMD |
| Family Members referred to Consulting Provider | Automatically when you are connected and make appointments | WonderMD | To facilitate referrals to the Consulting Provider To bill Consulting Provider for the use of WonderMD |
| Date and time of appointment and number of appointments | Consultant Family | WonderMD | To facilitate virtual appointments To bill Consulting Provider for use of WonderMD |
| Camera and audio permissions | Consultant | WonderMD | To provide the virtual appointment services |
| Usage data for WonderMD, including date, time, features used, IP address, inferred location from IP address, device type, operating system, WonderMD app version or browser type, language preference, and other similar technical information | Automatically from device used to access WonderMD | WonderMD | To provide and secure WonderMD services To analyze usage of WonderMD to improve the services |
CONSENT
You consent to the collection and use of your personal information for the purposes described in “Collection and use of personal information” when you register for and use WonderMD and voluntarily provide us with the personal information, including your child’s health card number.
If you provide information on behalf of a minor (e.g. the child’s name, date of birth, reason for seeking healthcare, and OHIP number), another Family Member or emergency contact, you agree that you are legally entitled to provide the information to us. In some cases, this means you must have the consent of the other person.
THIRD-PARTY SERVICE PROVIDERS
Like most online services, we use third party service providers to assist us in hosting and making WonderMD available and providing the services. Our third party service providers are not permitted to use any identifiable information about you for their own purposes. However, they may have access to your personal information in order to provide their services to us.
The following is a list of our third-party services providers who may store or process your personal information on our behalf and the countries in which those activities may occur.
| Name of service provider | What they do | Where data is located |
|---|---|---|
| Amazon Web Services | Cloud hosting services to make WonderMD available | Canada Region |
| Vonage | Video connection | Canada Region |
| Twilio/ Sendgrid | Text notification Email notification | United States |
| SyS Creations Inc. | Develop, manage and support WonderMD | Ontario, Canada |
| Google Analytics | Analyze usage of WonderMD | United States |
| Stripe | Perform payment card processing for non-OHIP insured services Processing payment card transactions |
United Sates |
Please note that Referring Provider and Consulting Providers are not our service providers. They are independent businesses. We are not responsible for their use of your personal information.
WonderMD uses the services of Google Analytics. Google Analytics collects information about the number of users of WonderMD, what features are used, how long users are engaged with WonderMD, and inferred location when using WonderMD. This information is only reported to us as aggregated or statistical information. You can opt-out of Google Analytics.
WHEN WE SHARE OR DISCLOSE PERSONAL INFORMATION
We share or disclose personal information in order to facilitate communications between Family Members, Referring Providers and Consulting Providers. In addition, we may share or disclose personal information with limited third parties. The following table explains what information we share and disclose, who we share or disclose it to, and why we share or disclose it.
DISPLAY REAL TESTIMONIALS
| Personal information we share or disclose | To whom we share or disclose personal information | Why we share or disclose personal information |
|---|---|---|
| Name, email address, mobile number, child’s name and date of birth, OHIP number, alternate caregivers, address, reason for referral, including any pertinent personal health information, date and time of appointment and number of appointments | Consulting Provider | To facilitate the referral to the Consulting Provider |
| Personal information that is relevant to an emergency that could lead to bodily injury or death | Police, emergency services, and others | If it is reasonable to respond to or prevent serious bodily injury or death |
| Personal information that is relevant to an investigation of a breach of our Terms of Service or to investigate or prevent fraud | Third party investigators and our lawyers | If it is reasonable for the investigation or fraud prevention and it would not be reasonable to obtain consent to disclosure because it could impair the investigation or fraud prevention |
| Personal information that is. subject to an order, subpoena, warrant or other enforceable demand | Third parties with a valid order, subpoena, warrant or other legal right, such as a regulatory body overseeing a Referring Provider or Consulting Provider | To comply with legally binding requirements |
| Personal information relevant to debt collection | Debt collection agencies and our lawyers | To collect a debt owed to us |
| Personal information relevant to protecting our interests | Our lawyers, courts and regulatory bodies | To bring or defend legal proceedings and investigations by regulatory bodies |
| All personal information stored in WonderMD | Purchaser of our business | If our business is sold, we will transfer personal information stored in WonderMD to the new owner |
CHILDREN’S PRIVACY
You should be at least 18 years old to use WonderMD. If you are the parent or guardian of a minor under 18 years of age, please assist your child in deleting WonderMD and contact us (hello@wondermd.ca) for information on how to request the deletion of your child’s personal information.
RETENTION
We retain personal information for as long as it is necessary to fulfill the purposes for which it has been collected or as required to meet legal or regulatory obligations.
We retain all of the information you provide to us for as long as you maintain your account. If you are a Family Member, your Referring Provider and Consulting Provider may also retain information about you in their account. Please ask your Referring Provider and Consulting Provider about their retention policies.
We retain information that we collect automatically when you use WonderMD (such as information related to your device type and features and functions used). Normally, you are not identifiable in this information. We store this information until it is no longer required for the purposes for which it was collected.
If you are a Referring Provider or a Consulting Provider, please keep in mind that WonderMD is not an electronic health record provider. You are required to maintain records in the patient’s health record relating to your referrals or consultations through WonderMD. WonderMD has no obligation to retain this information in WonderMD.
SECURITY
We have an information security program that involves physical, technical and administrative safeguards designed to protect the confidentiality and security of any personal information transmitted to us using WonderMD.
You have a shared responsibility to keep information that is collected or created through WonderMD safe. You should use a device password, use only the latest version of WonderMD, and install the latest security updates and anti-virus software on your device.
The following is a list of some of the policies and safeguards we employ.
- Encryption of your personal information when transmitted to our service provider’s servers and when stored.
- Limiting access to personal information to those individuals who require access to perform the services
- Limiting use of personal health information to facilitating referrals and virtual visits to Consulting Providers
- Access and event logging to track who has accessed personal information
- Anti-malware scanning, vulnerability testing and patching
- Creating regular backups of data
- Security awareness and training
- Risk assessments for our applications and service providers
- Penetration testing
- Data breach policies and procedures
Remember no electronic system is impenetrable and no internet transmission is completely secure. WonderMD cannot guarantee the confidentiality and privacy of personal information stored or transmitted through WonderMD.
YOUR RIGHTS AND CHOICES
This section describes your rights and choices and how to exercise them. Please keep in mind that we may deny your request if we have a legal basis to do so, such as another legal obligation.
| Right or Choice | How to exercise it |
|---|---|
| Turn off push notifications | You can turn off push notifications by changing your permissions settings on your device. |
| Account deactivation | You can deactivate your account by logging out and sending a request to hello@wondermd.ca. Please note that any information stored in WonderMD will be deleted after 120 days and backups will be deleted in accordance with our ordinary retention schedule. If you are a Referring Provider or Consulting Provider you are solely responsible for transcribing any relevant information into your patient’s health record. |
| Correcting personal information. | You can update your profile information at anytime using the functionality of WonderMD. If you are a Family Member and would like to correct information submitted by a Referring Provider or sent to or stored by a Consulting Provider, please contact the applicable provider. For any other information you would like to correct, please contact hello@wondermd.ca. |
| Deleting personal information. | You cannot delete basic profile information without deactivating your account. However, you can request deletion of other information by contacting hello@wondermd.ca. Please note that deleting information from your account will not delete information that has already been shared between Family Members, Consulting Providers and Referring Providers. If you are a Family Member, you must contact the Consulting Provider and the Referring Provider with any request to delete information that has been shared with them. |
| Accessing your personal information | You can access your personal information you have provided to WonderMD through your account. If you require access to usage information, please send your request to hello@wondermd.ca. If you want access to personal information collected by a Referring Provider or Consulting Provider, please contact that provider. |
PRIVACY NOTICE UPDATES
We may amend, update and revise this Privacy Notice and apply any changes to information previously collected, as permitted by law. If there are material changes to this policy or our information practices change in the future, we will notify you by email or in a message through WonderMD.
CONTACTING US
If you have questions or concerns regarding our handling of your personal information or you wish to verify, correct, or update any of your personal information, you may also write to us at hello@wondermd.ca.
WonderMD has appointed a Chief Privacy Officer. If you wish to contact the Privacy Officer, please write to hello@wondermd.ca.
