Privacy Policy
Last Updated: September 2026
WellNext Health Services ("WellNext," "we," "us," or "our") is committed to protecting your privacy and maintaining the security of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you inquire about or use our preventive health services at workplaces, residential buildings and office buildings.
1. Information We Collect
Personal Health Information
We collect and process the following types of health information:
- Biometric measurements collected during your appointment
- Laboratory test results (blood work, cholesterol levels, glucose, etc.)
- Medical history and current health conditions
- Medications and supplements
- Lifestyle information (diet, exercise, smoking status)
Personal Identification Information
- Name, date of birth, and contact information
- Workplace or building details provided with your inquiry or registration
- Health insurance information (if applicable)
2. How We Use Your Information
- Health Services: To conduct health screenings, analyze results, and provide personalized health recommendations
- Communication: To deliver your test results securely and follow up on health concerns
- Research: To conduct de-identified research studies that improve workplace health programs (with your consent)
- Compliance: To comply with legal obligations and healthcare regulations
- Quality Improvement: To improve our services and ensure quality care
3. Information Sharing and Disclosure
We Do NOT Share Your Personal Health Information Without Your Consent, Except:
- Healthcare Providers: With your physician or healthcare provider (with your written authorization)
- Legal Requirements: When required by law, court order, or regulatory authority
- Emergency Situations: To prevent serious health threats or emergencies
- Service Providers: With trusted third parties who assist in our operations (laboratories, IT providers) under strict confidentiality agreements
Employer and Building Host Reporting
- Employer Reporting: Employers currently receive participation information only, without individual health information.
- Individual Health Information: Your intake responses, laboratory values, clinical report and individual results are not shared with your employer or building management as part of the hosted clinic program.
4. Data Security
Protecting your information is part of our responsibility. Our privacy policy requires reasonable safeguards against loss, theft and unauthorized access, use or disclosure, including how records are kept, transferred and disposed of.
Access is intended for authorized people who need the information for their role. TELUS Health supports clinical records, and Dynacare provides laboratory services. Contact us with questions about how your information is handled.
5. Your Rights
You have the right to:
- Access: Request copies of your health records
- Correction: Request amendments to inaccurate information
- Restriction: Request limits on how we use your information
- Withdrawal: Withdraw consent for specific uses of your data
- Portability: Receive your health data in a transferable format
- Deletion: Request deletion of your data (subject to legal retention requirements)
6. Data Retention
Clinical records must be retained in accordance with the legal and professional obligations that apply to the responsible healthcare provider. Website inquiries and clinical records may have different retention periods. Contact us for the arrangements that apply to your record.
Withdrawing consent or closing a portal account does not automatically erase records that must be retained.
7. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
WellNext Health Services
Privacy Officer
Email: privacy@wellnext.ca
Phone: 416 602 7911
Address: Toronto, Ontario, Canada
We will respond to your inquiry within 30 days.
8. Applicable Privacy Requirements
Ontario’s Personal Health Information Protection Act (PHIPA) establishes requirements for personal health information held by health information custodians. Other privacy requirements, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA), may apply depending on the information and activity involved.
By using WellNext services, you acknowledge that you have read, understood, and agree to this Privacy Policy.