Skip to content Skip to sidebar Skip to footer
Legal

Privacy Policy

How we collect, use, and protect your personal and health information under Canadian and Ontario privacy law.

Last updated: June 15, 2026
Compliant with: Personal Information Protection and Electronic Documents Act (PIPEDA), Personal Health Information Protection Act (PHIPA, Ontario)

1. Who We Are

RecoveryX is a mobile physiotherapy practice operated by Sami Samdani, PT, a Registered Physiotherapist with the College of Physiotherapists of Ontario. As a healthcare provider, we are subject to Ontario's Personal Health Information Protection Act (PHIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Information We Collect

Information you provide directly

  • Name, email address, phone number (via contact form or booking)
  • Health information shared during physiotherapy assessment, treatment, or messaging
  • Insurance details for direct billing purposes
  • Payment details (processed by third-party payment processors; we do not store full card numbers)

Information collected automatically

  • Standard analytics data: pages viewed, time on site, approximate location, device and browser type
  • Cookies (see Section 7 below)

3. How We Use Your Information

  • To provide physiotherapy assessment, treatment, and recovery support
  • To schedule, confirm, and follow up on appointments
  • To process payment and submit insurance claims on your behalf
  • To respond to inquiries submitted through the website
  • To send appointment reminders, recovery program updates, and (with your consent) educational content
  • To improve our website and services
  • To fulfill legal and regulatory obligations (e.g., record-keeping required by the College of Physiotherapists of Ontario)

4. Personal Health Information (PHIPA)

Health information collected during physiotherapy care is considered "personal health information" under PHIPA. We act as a Health Information Custodian (HIC) and follow PHIPA requirements:

  • We collect only what is reasonably necessary for your care
  • We use and disclose your health information only as permitted by law
  • You have the right to access and request correction of your health record
  • We retain records for at least 10 years past your last visit, as required by the College of Physiotherapists of Ontario
  • We use reasonable administrative, technical, and physical safeguards to protect your health information

5. Disclosure to Third Parties

We disclose your information only in the following circumstances:

  • With your consent — e.g., to share progress reports with your referring physician or surgeon
  • To service providers who help us run our practice (Jane App scheduling, payment processors, email service providers) — all bound by confidentiality obligations
  • To your insurer when you authorize direct billing
  • When required by law — court order, regulatory body request, or public health reporting obligation

We do not sell your personal information to advertisers or data brokers.

6. Storage & Security

Personal health information is stored within Canada through PHIPA-compliant systems (Jane App is a Canadian-hosted electronic medical records system). Website analytics data may be processed by service providers (e.g., Google Analytics) which may transfer data outside Canada — by using the website you consent to such transfers subject to applicable safeguards.

7. Cookies

Our website uses cookies to:

  • Remember your preferences (e.g., cookie consent itself)
  • Understand site usage through anonymous analytics
  • Enable functionality of embedded services (e.g., Jane App booking)

You can decline non-essential cookies via our cookie consent banner. You can also disable cookies in your browser settings; some site features may not function without them.

8. Your Rights

Under PIPEDA and PHIPA you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Withdraw consent to certain uses (this may affect our ability to provide care)
  • Make a complaint to the Office of the Privacy Commissioner of Canada or the Information and Privacy Commissioner of Ontario

To exercise these rights, email info@recoveryx.ca. We will respond within 30 days.

9. Children

We provide physiotherapy services to patients of all ages, including minors with parental/guardian consent. For website users under 16, please obtain parental consent before submitting any personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted with an updated date. We encourage you to review this page periodically.

11. Contact

Privacy questions, complaints, or requests:
Sami Samdani, PT (Privacy Officer)
Email: info@recoveryx.ca

You may also contact:
Information and Privacy Commissioner of Ontario — ipc.on.ca
Office of the Privacy Commissioner of Canada — priv.gc.ca