OPTIMIZE VITALITY 360 | BY NP KAYLA
Website: www.npkayla.com | Effective date: October 14, 2026
1. Introduction
Optimize Vitality 360 by NP Kayla (the “Clinic,” “we,” “our”) respects your privacy. This policy explains how we collect, use, disclose, protect and retain information when you visit www.npkayla.com, contact the Clinic, book services or receive care.
We distinguish general website information from personal health information. Where applicable, personal health information is governed by Ontario’s Personal Health Information Protection Act, 2004 (PHIPA), and other personal information may be subject to applicable Canadian privacy laws.
2. Information We Collect
We may collect your name, email, telephone number, contact preferences, booking requests, appointment details, billing and payment information, correspondence, and information you voluntarily submit through forms.
When providing clinical care, we may collect medical history, symptoms, medications, allergies, laboratory findings, assessments, diagnoses, treatment plans, prescriptions, clinical notes and related health records.
Our website or its service providers may automatically collect technical information such as browser type, device details, IP address, referring pages and website usage through cookies or similar technologies, where enabled.
3. Sources of Information
Information may come directly from you; from your authorized representative; from referring clinicians, laboratories, pharmacies or other care providers; and from booking, payment or technology vendors acting within their permitted roles.
We collect indirectly only as authorized by law or appropriate consent.
4. How We Use Information
We use information to respond to inquiries, arrange appointments, provide and coordinate care, document clinical decisions, communicate about treatment, send service-related reminders, process payments, maintain security, comply with legal and professional obligations, and improve website operations.
Marketing emails or text messages, if offered, are sent only as permitted by applicable law and consent requirements.
You may unsubscribe from promotional communications without affecting your care.
5. Consent and Health Information
We collect, use and disclose personal health information with consent or as otherwise permitted or required by PHIPA.
Consent may be express or implied where legally appropriate. You may withdraw consent subject to legal, professional and practical limits; withdrawal may affect our ability to provide services.
Website inquiries and advertising forms are not substitutes for a secure clinical intake process. Please do not submit detailed medical records through general website contact fields or public social media.
6. When Information May Be Shared
Information may be shared, where authorized, with treating clinicians, pharmacies, laboratories, referral partners and others involved in your care; with administrative and technology service providers acting under appropriate safeguards; with payment processors for transactions; and with regulators, courts or public authorities where lawfully required.
We do not sell patient medical records. We do not intentionally provide identifiable personal health information to advertising platforms for targeted advertising.
7. Website Analytics, Cookies and Advertising
The website may use essential cookies, analytics tools or advertising measurement technologies. These tools may collect device or browsing data. Non-essential technologies should be configured with appropriate notices and consent where required.
Advertising tools, including Google Ads if used, must be configured to avoid sending sensitive patient information, appointment reasons or health-related form responses to advertising platforms. Actual tools used by the website should be identified in the published version of this policy.
8. Booking, Video Care and Third-Party Services
Online scheduling, forms, virtual visits, electronic records and payment functions may be provided by third-party platforms. Their privacy terms may also apply. We seek to use service providers and safeguards appropriate to the sensitivity of the information involved.
Some service providers may process information outside Ontario or Canada. Where this occurs, information may be subject to the laws of the jurisdiction in which it is processed. Specific vendors and data locations should be confirmed before publication.
9. Safeguards and Retention
We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the information. No internet transmission or storage system can be guaranteed completely secure.
Clinical records are retained in accordance with applicable laws and professional record-retention requirements. Other information is retained only as long as reasonably necessary for its purpose and legal obligations, then securely disposed of or de-identified as appropriate.
10. Access, Correction and Privacy Rights
You may request access to your personal health information or ask that inaccurate or incomplete records be corrected, subject to legal exceptions. We may need to verify your identity before responding. You may also inquire about our information practices or request information about consent and communications preferences.
11. Children and Substitute Decision-Makers
Health information relating to children and individuals requiring substitute decision-makers is managed in accordance with applicable consent, capacity and privacy laws. A parent or guardian does not automatically have unrestricted access in every circumstance.
12. Privacy Questions and Complaints
Contact the Clinic’s privacy contact to raise a concern, request access or correction, or ask about how information is handled.
Privacy contact: Optimize Vitality 360 by NP Kayla, via the contact information published at www.npkayla.com.
Privacy contact email: info@npkayla.com
If your concern is unresolved, you may contact the Information and Privacy Commissioner of Ontario at www.ipc.on.ca.
13. External Websites and Policy Updates
Links to other websites are provided for convenience. We are not responsible for their separate privacy practices. We may update this policy to reflect operational, technology or legal changes; the revised version will be posted with a new effective date.