PIPA Statement
Last updated: April 2026
British Columbia's Personal Information Protection Act (PIPA) sets out how private-sector organisations in BC must handle personal information. This statement summarises how The Clinic's public website complies with PIPA.
Privacy Officer
In accordance with PIPA section 4, The Clinic has designated a Privacy Officer responsible for compliance. The Privacy Officer is Dr. Carol [Surname], reachable at privacy@theclinic.example.
Purpose of collection
We collect personal information through this website for a single, stated purpose: to maintain a waitlist of prospective patients and contact them when capacity opens at the practice. This purpose is disclosed at the point of collection (on the waitlist form itself).
Consent
By submitting the waitlist form, you provide express consent to the collection, use, and storage of the information you provide, for the purpose stated above. You may withdraw consent at any time by contacting the Privacy Officer.
Data minimisation
We collect only the information necessary to fulfil the stated purpose. We do not collect personal health information through the website; clinical intake is handled separately via our booking platform after enrolment is offered.
Safeguards
We maintain the following safeguards:
- Canadian hosting — waitlist data is stored on servers physically located in Canada
- Encryption — all data is encrypted in transit (TLS 1.2+) and at rest
- Access control — administrative access requires a bearer token held only by authorised personnel
- Audit trail — all access to waitlist data is logged
- IP truncation — we store only a truncated IP prefix (never the full address) for abuse prevention
- No cross-site tracking — analytics are cookieless and do not build profiles of visitors
Privacy Impact Assessment
A Privacy Impact Assessment (PIA) has been completed for this website and is on file with the practice. The PIA is available for review by request to the Privacy Officer.
Your rights
Under PIPA, you have the right to access the personal information we hold about you, request corrections, withdraw consent, and make a complaint. Details of how to exercise these rights are set out in our Privacy Policy.
Complaints
If you believe we have not handled your personal information in compliance with PIPA, you may:
- Contact our Privacy Officer at privacy@theclinic.example
- Submit a complaint to the Office of the Information and Privacy Commissioner for British Columbia at oipc.bc.ca