windflowerveinandvascular.ca

Last updated: June 2026

Windflower Vein and Vascular (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information and personal health information in connection with our website and the vein and vascular care we provide.

Scope of This Policy

This policy covers two kinds of information:

• Personal information collected through our website at https://windflowerveinandvascular.ca, such as when you submit a form or browse our pages.
• Personal health information collected when you request or receive vein and vascular care from Windflower Vein and Vascular, whether in person at one of our facilities or through an online consultation.

We provide care both in person at our facilities and by online consultation to patients located in the provinces listed in the compliance section below.

Who We Are

Windflower Vein and Vascular operates vein and vascular clinical services for patients in Canada. Our website address is https://windflowerveinandvascular.ca. Our head office is located at Suite 325-3917 University Avenue NW, Calgary, Alberta.

Our Privacy Officer

We have designated a Privacy Officer responsible for our privacy practices and for responding to your questions and requests. To contact our Privacy Officer:

Privacy Officer, Windflower Vein and Vascular

Sean Gregg

Email: sean@windflowerhealth.ca

What We Collect and Why

We collect only the information necessary for the purposes described in this policy. We do not collect more than we need, and we do not use your information for purposes other than those described here or permitted by law.

Information you provide to us:

• When you sign up for our newsletter, we collect your name and email address to send you the communications you have requested. You can unsubscribe at any time.
• When you submit a consultation request or contact form, we collect the information you provide, which may include your name, email address, phone number, and details about your reason for contacting us. Please do not submit personal health or medical information through these forms. If you have health-related information to share, our team will collect it through secure, appropriate channels once contact has been established. We handle any information you provide in these forms in accordance with the health information laws described below.

Information we collect automatically:

• When you visit our website, we collect technical information such as your IP address, device and browser type, and the pages you view. We use this information to operate and secure the website, understand how it is used, and improve it.

Cookies and Similar Technologies

Cookies are small text files placed on your device by your browser. We and our service providers use cookies and similar technologies for several purposes:

• Functional cookies that are necessary for the website to work, such as a temporary cookie that checks whether your browser accepts cookies. These contain no personal data and are discarded when you close your browser.
• Analytics cookies that help us understand how visitors use the website so we can improve it.
• Advertising cookies that help us measure and deliver relevant marketing, including through third-party platforms.

You can control or disable cookies through your browser settings. Disabling some cookies may affect how the website functions.

Embedded Content From Other Websites

Pages on this site may include embedded content from third-party platforms, such as videos. Embedded content behaves as though you have visited the external website directly, and those platforms may collect data about you and set their own cookies. We do not control these third parties and encourage you to review their privacy policies.

Personal Health Information and Our Compliance With Applicable Law

Windflower Vein and Vascular provides vein and vascular care to patients across Canada, both in person at our facilities and by online consultation. We, and the regulated health professionals who provide care through Windflower Vein and Vascular, collect, use, and disclose personal health information for the purpose of delivering that care.

We handle personal health information in accordance with the federal, provincial, and territorial privacy and health information laws that apply where our patients are located and where care is delivered. Depending on the jurisdiction, these include:

• Federal: Personal Information Protection and Electronic Documents Act (PIPEDA), which applies to the transfer of information between provinces, including online consultations with patients in another province.
• Alberta: Health Information Act (HIA)
• British Columbia: Personal Information Protection Act (PIPA)
• Saskatchewan: Health Information Protection Act (HIPA)
• Manitoba: Personal Health Information Act (PHIA)
• Ontario: Personal Health Information Protection Act (PHIPA)
• Quebec: Act respecting the protection of personal information in the private sector (Law 25), in connection with our facility operations in Quebec.

The physicians and other regulated health professionals who provide care through Windflower Vein and Vascular are custodians, or the equivalent designation under the applicable statute, of the personal health information they collect. They are bound by the confidentiality and record-keeping obligations of their profession and of the laws above.

We ensure compliance with these laws by:

• Limiting our collection of personal health information to what is necessary to provide care and to meet our legal and administrative obligations.
• Restricting access to personal health information to the staff and providers who need it to deliver or support your care.
• Storing personal health information on systems located in Canada, with access controls, encryption in transit, and regular security reviews.
• Maintaining a designated Privacy Officer responsible for our privacy practices and for responding to access, correction, and complaint requests.
• Notifying affected individuals and the appropriate regulator where a privacy breach poses a real risk of significant harm, as required by the applicable law.

If you have a question about how your personal health information is handled, or you wish to access or correct your records, contact our Privacy Officer using the details above.

Who We Share Your Information With

We do not sell your personal information. We share it only in these limited circumstances:

• With service providers who perform functions on our behalf, such as website hosting, email and newsletter delivery, analytics, advertising, and secure form processing. We require these providers to limit their use of your information to the services they provide for us and to protect it appropriately.
• Within your circle of care, meaning the physicians and clinical staff involved in providing your vein and vascular care.
• When required or permitted by law, such as to comply with a court order or to establish or defend legal claims.

Where We Store Your Information

We store personal health information on systems located in Canada. Some of the analytics and advertising tools we use to operate our website are provided by companies located outside Canada, and limited technical information collected through your use of the website may be processed in those jurisdictions. Where information is handled outside Canada, we take reasonable steps to ensure it is protected in a manner consistent with Canadian privacy requirements, and it may be subject to the laws of the jurisdiction where it is processed.

How Long We Retain Your Information

We retain personal information and personal health information only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and professional record-keeping obligations. Cookies are retained for the durations set by their type, after which they expire automatically.

Your Rights

Under the laws described above, you have the following rights regarding your information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete information.
• Withdrawal of consent: Where our collection is based on consent, you may withdraw it at any time, subject to legal and contractual restrictions. Withdrawing consent may affect our ability to provide a service to you.
• Deletion: You may request that we delete personal information we hold about you. We will comply unless we are required or permitted by law to retain it, including health records we must keep under professional and legal obligations.

Requests to access or correct health records created by a treating physician may need to be directed to that physician or facility. Our Privacy Officer can help you direct your request. We will respond within the timelines required by the applicable law, generally within 30 days, and will notify you if we need additional time.

How We Protect Your Information

We use appropriate physical, technical, and organizational safeguards to protect your information against unauthorized access, disclosure, loss, or destruction. These include secure server configurations, access controls, encryption in transit, and regular security reviews. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

How to Make a Complaint

If you are not satisfied with how we have handled your information or a privacy request, please contact our Privacy Officer first so we can try to resolve the matter.

If it is not resolved to your satisfaction, you may file a complaint with the privacy regulator in your jurisdiction, including:

• Office of the Privacy Commissioner of Canada: priv.gc.ca, 1-800-282-1376
• Office of the Information and Privacy Commissioner of Alberta: oipc.ab.ca
• Office of the Information and Privacy Commissioner for British Columbia: oipc.bc.ca
• Saskatchewan Information and Privacy Commissioner: oipc.sk.ca
• Manitoba Ombudsman: ombudsman.mb.ca
• Information and Privacy Commissioner of Ontario: ipc.on.ca
• Commission d’accès à l’information du Québec: cai.gouv.qc.ca

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review it periodically.

Contact Us

For any question, concern, or request related to this Privacy Policy or your information, contact:

Privacy Officer, Windflower Vein and Vascular

Sean Gregg

Email: sean@windflowerhealth.ca

Head office: Suite 325-3917 University Avenue NW, Calgary, Alberta