Effective Date: September 24, 2025

Your privacy is important to us. We value your privacy and are committed to protecting your personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada. This Privacy Policy explains how Enlightened Health Capital (''we'', "us", or "our") collect, use, and protect the information we obtain from you on our website.

We use your personal data to provide and improve the website. By using the website, you agree to the collection and use of information in accordance with this Privacy Policy. 

Definitions:

Website: refers to Enlightened Health Capital, accessible from http://www.enlightenedhealthcapital.com

You: means the individual accessing or using the website, or the company, or other legal entity on behalf of which such individual is accessing or using the website, as applicable.

1. Information We Collect

While using our website, booking system or services, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. We collect only the information necessary to provide safe and effective manual osteopathic, holistic health, coaching and/or consulting services. Personally identifiable information may include, but is not limited to:

• Personal information: refers to any information about an identifiable individual, including name, email, phone number, home or office address/service location, name of workplace or institution where services are to be offered, job title/work department, gender, date of birth, medical history, current symptoms, treatment notes, or any details you provide voluntarily (e.g., message through inquiry form, phone, email).

• Technical data: IP address, browser type, browser version, the pages of the website that you visit, device information, usage statistics, and other diagnostic data. This technical data is collected automatically when using the website.

• Communication records: information you provide when contacting us for questions, information, support or services.

• Payment: if applicable, billing details (processed via secure, encrypted third-party providers)

2. How We Use Your Information

We use your personal data to:

• Provide and improve our services.

• Respond to inquiries and support requests from current and potential clients.

• Schedule and confirm consultations, appointments

• Assess your health needs and provide our services (manual osteopathic, holistic health, coaching and/or consulting)

• Communicate with you regarding your care and our services

• Process payments and issue receipts

• Comply with legal and regulatory obligations.

• Send newsletters, updates, or promotional content with your consent (you can opt out at any time).

We strive to keep your information accurate. You have the right to:

• Request access to your personal health record.

• Request a correction to inaccurate or incomplete information.

• Inquire about how your information is being used.

3. Data Storage and Security

We use appropriate technical and organizational measures to prevent unauthorized access, misuse, disclosure, alteration, or destruction.

Your data is stored using Google Workspace Business or equivalent, configured with professional-grade security:

• Data Residency: Whenever possible, data is stored on Canadian servers.

• Encryption: Data is encrypted both "at rest" and "in transit."

• Access Control: Only authorized personnel (your practitioner) have access to your health records.

• BAA: We have a Business Associate Addendum (BAA) with Google to ensure your data is handled according to healthcare-grade security standards. 

We retain health records for the period required by professional regulations. When no longer required, records are destroyed or anonymized using secure digital wiping methods. 

4. Sharing of Information

We do not sell or rent your personal information. We may share your information only in the following situations:

• With trusted third-party service providers who perform services on our behalf (under confidentiality agreements)

• With other health providers, only when necessary for your treatment and with your implied or express consent

• When required by law, regulation, or court order

• To protect our rights, safety, or property, and that of our users or the public

5. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access and obtain a copy of your personal data.

• Correct or update your personal data.

• Withdraw your consent at any time.

• Request deletion (“right to be forgotten”) where applicable.

• Request data portability (transfer of your data to another provider).

• File a complaint with the Office of the Privacy Commissioner of Canada or your local supervisory authority.

To exercise these rights, please contact us at: info@enlightenedhealthcapital.com

6. Cookies and Tracking Technologies

We may use cookies and similar technologies to:

• Improve site functionality and performance.

• Analyze traffic (e.g., Google Analytics). 

• Provide a personalized browsing experience.

This is to help us understand how our visitors and customers use our website. For more information on how your information is used by Google, click on this link: https://www.google.com/intl/en/policies/privacy/ . You may choose to opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout?hl=en .

7. PIPEDA Compliance

As a Canadian business, we comply with PIPEDA principles:

• Accountability: We take responsibility for protecting personal data in our possession.

• Identifying purposes: We clearly state why information is collected before or at the time of collection.

• Consent: We obtain meaningful consent for the collection, use, or disclosure of personal information.

• Limiting collection: We only collect information necessary for the purposes identified.

• Limiting use, disclosure, and retention: We do not use or share data for unrelated purposes and keep it only as long as necessary.

• Accuracy: We maintain personal data as accurate and up to date as possible.

• Safeguards: We use physical, organizational, and technological measures to protect personal data.

• Openness: Our policies and practices regarding personal information are transparent and available to the public.

• Individual access: Upon request, you can access and verify your personal information.

• Challenging compliance: You can raise concerns or complaints about our compliance directly with us or the Privacy Commissioner of Canada.

• We collect only the data necessary to provide our services.

• We process personal data on lawful bases: consent, contract performance, legal obligation, or legitimate interest.

• We maintain appropriate safeguards and document compliance practices.

• We promptly respond to access or deletion requests.

For questions about this policy or your data, please contact us: info@enlightenedhealthcapital.com