Privacy policy

Effective Date: December 1, 2025

Greystone Dental Hygiene is committed to protecting the privacy, confidentiality, and security of personal and health information in accordance with Alberta’s Health Information Act (HIA), applicable privacy legislation, and professional regulatory requirements.

This Privacy Policy describes how personal and health information is collected, used, disclosed, safeguarded, and retained.

 
Custodian of Health Information
Greystone Dental Hygiene is a custodian of health information as defined under Alberta’s Health Information Act (HIA) and is responsible for the collection, use, disclosure, and protection of health information within its custody or control.

 
Information We Collect
We collect personal and health information that is reasonably necessary to provide dental hygiene services and operate our clinic, including but not limited to:

Name, address, email, phone number, and date of birth
Health history, oral health information, and clinical records
Appointment details and treatment notes
Insurance, benefit, and billing information
Information provided through online booking platforms, intake forms, email, telephone, or in person
Technical information related to website use (such as IP address or browser type), collected through standard web analytics
Information is collected directly from you unless otherwise authorized or required by law.

 
Legal Authority for Collection
Personal and health information is collected under the authority of the Health Information Act (HIA) for the purposes of providing healthcare services, managing clinic operations, and meeting legal and regulatory obligations.

 
Use of Information
Information may be used for purposes including:

Providing, managing, and documenting dental hygiene care
Assessing oral and overall health relevant to care
Communicating with you regarding appointments, care, or clinic operations
Billing, payment processing, and insurance claims
Quality assurance, risk management, and administrative purposes
Compliance with legal, regulatory, and professional requirements
Only the minimum amount of information necessary is used for each purpose.

 
Disclosure of Information
Personal and health information may be disclosed only as permitted or required by law, including:

With your express or implied consent
To other regulated healthcare providers involved in your care
For insurance or benefit administration
To regulatory bodies, auditors, or insurers as required
In situations involving risk of serious harm
As required by subpoena, court order, or other lawful authority
Greystone Dental Hygiene does not sell, trade, or disclose personal or health information for marketing purposes.

 
Consent
By accessing services or providing information, you consent to the collection, use, and disclosure of your information as outlined in this Privacy Policy, unless otherwise restricted by law.

You may withdraw or limit consent where permitted; however, this may affect our ability to provide services.

 
Safeguards and Security
We implement reasonable physical, administrative, and technical safeguards appropriate to the sensitivity of the information, including:

Secure storage of paper and electronic records
Controlled access to information
Staff training and confidentiality obligations
Secure electronic systems and password protection
Despite these safeguards, no system can be guaranteed to be completely secure.

 
Electronic Communication and Online Services
Electronic communication (including email, online booking, and website forms) may not be fully secure. By communicating electronically, you acknowledge and accept this risk.

Third-party service providers (such as online booking platforms or website hosting services) may store or process information outside of Greystone Dental Hygiene’s direct control and may be subject to their own privacy practices.

 
Data Breach Management
In the event of a privacy breach involving personal or health information, Greystone Dental Hygiene will take reasonable steps to contain, assess, and mitigate the breach and will comply with any notification requirements under HIA.

 
Retention of Records
Personal and health information is retained in accordance with legal, regulatory, and professional record-retention requirements. When records are no longer required, they are securely destroyed.

 
Access and Correction
You have the right to request access to your personal and health information and to request corrections if information is inaccurate or incomplete, subject to legal limitations under HIA.

Requests must be made in writing and may be subject to verification of identity.

 
Limitation of Liability
To the fullest extent permitted by law, Greystone Dental Hygiene shall not be liable for damages arising from unauthorized access, disclosure, loss, or misuse of information that occurs despite reasonable safeguards being in place.

 
Changes to This Privacy Policy
This Privacy Policy may be updated at any time without prior notice. Changes will be posted on this website, and continued use of our services or website constitutes acceptance of the updated policy.

 
Contact
If you have questions, concerns, or requests regarding privacy practices, please contact us directly.