Privacy Policy

LEYA – Travel Health and Healthcare Clinic

1. Introduction

This privacy policy aims to inform users and patients of LEYA – Travel Health and Healthcare Clinic (“the Clinic,” “we,” “our”) about the practices regarding the collection, use, disclosure, storage, and protection of personal information obtained in the context of our professional services.

We recognize the importance of confidentiality and the security of personal information, particularly health-related data. We are committed to protecting such information in accordance with Quebec’s Law 25 and applicable health data privacy standards.

2. Privacy Officer

The Privacy Officer is:
Dr. Yacine Akani, Pharmacist
Email: privacy@cliniqueleya.ca

The Privacy Officer ensures the Clinic complies with current legislation and implements appropriate measures to maintain the confidentiality and security of data.

3. Collection of Personal Information

In the course of our activities, we collect only the information necessary to provide safe and effective professional services, including:

• Full name, date of birth, contact information;

• Relevant medical information (medical history, allergies, medications, vaccinations, health conditions, etc.);

• Consultation-related information (health condition being assessed, symptoms, clinical parameters, lab results, travel itinerary, treatment choices, etc.);

• Information required for payment processing.

This information is collected exclusively through Typeform forms, compliant with the HIPAA (Health Insurance Portability and Accountability Act) — a U.S. regulation ensuring the confidentiality and security of health information. Personal health information is never collected directly on the main website.

4. Methods of Collection and Tools Used

Personal information is collected and processed through the following platforms:

• Typeform: for submission of clinical consultation forms (HIPAA-compliant).

• Stripe: for consultation payment processing.

• Fax.Plus: for secure transmission of prescriptions and clinical documents to pharmacies.

• Proton: for data hosting, encryption, and secure email communication.

• Hébergement Web Canada and Framer: for website hosting; the website does not collect any clinical information.

All these tools comply with international security standards, including HIPAA.

5. Use of Personal Information

Personal information is used solely for the following purposes:

• Clinical evaluation and determination of the appropriate treatment;

• Transmission of prescriptions to the patient’s chosen pharmacy and to answer any questions from pharmacists receiving the prescription;

• Communication with the patient (confirmation, follow-up, or sending secure clinical documents);

• Accessing the Dossier Santé Québec (DSQ) when required to complete the clinical assessment (vaccination, lab results, drug interactions).

No data is used for advertising or commercial purposes.

6. Communication and Sharing of Information

Personal information may be disclosed to:

• The pharmacy chosen by the patient, solely for prescription transmission and to respond to any pharmacist questions;

• Authorized clinicians and staff of LEYA Clinic (pharmacists, pharmacists, nurses, nurses, administrative personnel);

• Any other entity required by law.

No information is shared with unauthorized third parties or for marketing purposes.

7. Data Retention and Security

Clinical data collected on Typeform is deleted from the platform once transferred.
It is then stored on an encrypted local drive and on Proton services, also encrypted and HIPAA-compliant.
Access is strictly limited to authorized clinicians and staff of LEYA Clinic.
Personal information is retained indefinitely for clinical follow-up and medical traceability.
Administrative, technical, and physical measures are implemented to prevent unauthorized access, use, or disclosure.

8. Electronic Communications

Automated emails may be sent to confirm receipt of forms or to communicate clinical information.
Confidential and sensitive data is transmitted via ProtonMail, with password protection to ensure confidentiality.
No promotional or advertising emails are sent.
Any changes to these practices will be reflected in updates to this policy.

9. Your Rights

Under Law 25, any individual may:

• Request access to their personal information;

• Request correction of inaccurate, incomplete, or ambiguous information;

• Withdraw consent for the use or disclosure of their data, within the limits permitted by law.

All requests must be sent to: privacy@cliniqueleya.ca

10. Policy Changes

LEYA Clinic reserves the right to modify this policy at any time. Any updates will be published on cliniqueleya.ca, along with the date of the latest revision.

11. Contact

For any questions or requests regarding this policy, please contact:
Dr. Yacine Akani, Pharmacist
Privacy Officer
Email: privacy@cliniqueleya.ca