Who We Are
Belleisle Clinics Inc. facilitates access to services tailored to client needs through a network of independently practicing, qualified, and duly registered professionals. These services may include psychoeducational, neuropsychological, psychological, and psychotherapy services.
For health records in Ontario, the Clinic is a Health Information Custodian (HIC) under Ontario’s Personal Health Information Protection Act, 2004 (PHIPA).
In Québec, health and social services information is governed by the Act respecting health and social services information (LRSSS / Loi 5), which came into force on July 1, 2024. This Act establishes a dedicated legal framework for health information held by health and social services organizations, including private professional offices. For personal information that does not fall within the scope of Loi 5 (e.g., administrative, billing, or website data), we comply with the Act respecting the protection of personal information in the private sector (Loi 25).
For website and other non-health personal information, we also follow Canada’s federal PIPEDA.
How to Contact Us About Privacy
Person responsible for the protection of personal information (Loi 25 / Loi 5) and Privacy Officer (PHIPA):
Pierre Huguet, Technical Co-founder
Contact: belleisleclinic.com/contact-us (select “Privacy/Records”). If you need accommodations to make a request, please indicate this in your message.
What We Collect
Health information (PHI) for care: identity and contact details; referral information; presenting concerns; clinical notes and test results; impressions/diagnoses; appointment and billing history; communications related to care; information received from or shared with other providers involved in your care.
Website and inquiry information: contact-form details, appointment preferences, information you share about reasons for seeking care, and limited technical data necessary for site performance and security (see Cookies and Analytics). Where this information relates to your health, it is protected to the same standards as PHI.
Why We Use Your Information
We use your information to provide and coordinate assessment, diagnosis, treatment, and other related services within the circle of care. This includes communicating with you about appointments, follow-ups, reports, and anything related to your care. We also rely on certain information for quality assurance, training, and routine administrative tasks needed to support Clinic operations. Billing and payments you authorize require the use of specific information as well. Finally, we handle personal information as needed to meet legal and regulatory obligations and to ensure the secure operation of our website.
AI-Assisted Report Writing
Belleisle Clinics uses Aurel Technologies Inc. (Aurel), a platform that uses artificial intelligence to assist clinicians in drafting assessment reports (e.g., neuropsychological reports). Aurel is a drafting tool only — it does not make clinical decisions, render diagnoses, or replace professional judgment. The clinician reviews, edits, and approves every section of the report before finalization.
De-identification Before AI Processing
Before any clinical information is processed by the AI engine, Aurel applies a systematic de-identification process: your name, date of birth, contact information, health card number, and all other identifying details are removed using a two-stage protocol (name replacement and 19 pattern-based filters). Only de-identified data is transmitted to the AI. The AI engine has no access to your identity.
Data Residency and Non-Retention
Your identifiable health information is stored exclusively in Canada (Montreal). De-identified data is processed transiently by the AI engine (Anthropic Claude API) and is not retained by the AI provider. Anthropic’s non-retention policy means your data is not stored by the AI and is not used for model training.
Your Right to Opt Out
You may request that your report be prepared without AI assistance at any time. This will have no impact on the quality of your assessment or the services you receive. Inform your clinician or our Privacy Officer.
Sharing and Consent
Within the circle of care, we may rely on implied consent to collect, use, and disclose PHI with other health information custodians for the purpose of providing or assisting in providing health care. Outside that context, we obtain express consent unless a legal exception applies (for example, risk of serious harm, mandatory reporting, court order, or regulator audit).
We use electronic service providers (for example, EHR, telehealth, secure cloud, eFax, and client inquiry/CRM systems). Some may store information outside your province; they are contractually required to protect information and may not use it for their own purposes.
You may limit or withdraw consent (the lockbox). Tell your clinician or our Privacy Officer; we will record and honour your instructions within legal limits and explain any impacts on care.
Email and Texting
With your consent, we may use email or text for limited purposes (for example, scheduling). These methods carry risks (misdelivery, interception). We will discuss alternatives and record your preferences.
Your Rights
Ontario (PHIPA): You may access your record and request corrections. You have the right to be informed about our information practices and to file a complaint with Ontario’s Information and Privacy Commissioner (IPC) at www.ipc.on.ca.
Québec (Loi 5 / Loi 25): You may access and correct your personal information and, for computerized information, request data portability (when technically feasible). Under Loi 5, you have the right to restrict or refuse access to your health information by specific providers or categories of providers. If a confidentiality incident presents a risk of serious injury, we notify the Commission d’accès à l’information (CAI) and affected individuals.
Safeguards
We apply administrative, technical, and physical safeguards: role-based access, two-factor authentication where available, encryption at rest (AES-256) and in transit (TLS 1.2+), secure disposal, staff training, and electronic access logging with regular audits.
Breach Notification
Ontario: In the event of a theft, loss, or unauthorized use or disclosure of personal health information, we will notify affected individuals at the first reasonable opportunity and report to the IPC as required under PHIPA.
Québec: In the event of a confidentiality incident presenting a risk of serious injury, we will notify the CAI and affected individuals in accordance with the LRSSS (Loi 5) for health information, or Loi 25 for non-health personal information.
Retention and Destruction
Clinical records. We keep clinical records for the period required by applicable law in the province where services are provided (including PHIPA in Ontario and the LRSSS/Loi 5 and professional regulations in Québec), and any other legal requirements. When the applicable retention period ends, we securely destroy or, where appropriate, anonymize the records.
Administrative and website records. Under PIPEDA and Loi 25, we keep personal information only as long as needed to fulfill the purposes for which it was collected, then securely destroy or anonymize it.
Technology Register (Loi 5)
In accordance with section 68 of the LRSSS, the following technology products and services are used by Belleisle Clinics in connection with health and social services information:
| Product | Description | Used for Clinical Decisions? |
|---|---|---|
| Aurel Technologies Inc. (Aurel) | AI-assisted clinical report drafting platform. De-identifies data before AI processing. Clinician reviews and approves all content. | No. The AI assists drafting only. The clinician retains full responsibility for clinical conclusions. |
A privacy impact assessment (EFVP) has been completed for Aurel. The complete register is available upon request.
Cookies and Analytics
We use only the cookies necessary to operate this site. If we add analytics or profiling/marketing technologies, we will request your express consent in Québec (and offer opt-out controls elsewhere), and provide details on the vendor, purpose, and retention. You can change your preferences at any time via the cookie banner (where available).
Regulators
Ontario — Information and Privacy Commissioner (IPC) — www.ipc.on.ca
Québec — Commission d’accès à l’information (CAI) — www.cai.gouv.qc.ca
Canada — Office of the Privacy Commissioner (OPC) — www.priv.gc.ca