Privacy Policy
This is the default text value
Governing Legislation: PIPEDA | PHIPA (Ontario) | RHPA | CMA Telemedicine Polic
The Panday Group (“TPG,” “we,” “our,” or “us”) operates pandaygroup.com and delivers private, elective hormone optimization and performance health services via telemedicine to patients across Canada. This Privacy Policy governs how we collect, use, disclose, retain, and protect personal information and personal health information (“PHI”) in compliance with:
By accessing our website or engaging with our services, you acknowledge that you have read, understood, and consented to the practices described in this Privacy Policy.
The Panday Group is a health information custodian as defined under PHIPA. Our licensed healthcare practitioners — which may include physicians regulated by the CPSO and/or nurse practitioners regulated by the CNO, depending on clinical assignment and availability — are the regulated health professionals responsible for the collection and use of personal health information within this clinic. All personnel who handle patient information are bound by confidentiality obligations consistent with PHIPA and applicable college standards.
2.1 Personal Information You Provide
We collect information you voluntarily submit through our patient assessment and intake forms, which are completed at the time of initial registration. This includes:
Patient intake and consent is completed electronically through our assessment form at pandaygroup.com/performance. By submitting that form, you provide express consent to the collection and use of your PHI as described in this Policy.
2.2 Laboratory and Diagnostic Information
With your consent, we receive bloodwork results and laboratory data from our approved laboratory service providers. This information is PHI and is handled under the same standards as all other patient health information.
2.3 Automatically Collected Information
Our website may collect technical data including IP address, browser type, device type, pages visited, and navigation behaviour. This information is used for website analytics only and is never linked to your PHI.
Under PHIPA, we collect and use PHI on the basis of your express consent, which is obtained at intake through our patient assessment form. Consent covers:
You may withdraw consent at any time in writing. Withdrawal of consent will result in the inability to continue providing care. All PHI collected prior to withdrawal is retained in accordance with professional college record-keeping standards.
We use your personal and health information exclusively for the following purposes, consistent with PHIPA ss.29–30:
We do not use PHI for marketing profiling, advertising, or any commercial purpose beyond the direct delivery of your clinical care.
5.1 Internal Access
Access to your PHI is restricted to: your assigned healthcare practitioner, and patient coordination staff who require access to provide administrative support. All personnel operate under strict confidentiality obligations.
5.2 Third-Party Service Providers
We disclose necessary information to trusted third-party service providers performing functions on our behalf, including:
Vendors are not named in this Policy as technology partners may change. All vendors are contractually bound to PHIPA-compatible data handling and may use your information only to perform their specific function. We do not disclose identifiable PHI to vendors for any other purpose.
5.3 Your Treating Healthcare Practitioner
Your PHI is shared with the licensed practitioner assigned to your care. That practitioner holds a current licence with the applicable Ontario regulatory college (CPSO or CNO) and is independently bound by professional confidentiality and regulatory obligations.
5.4 Legal Disclosure
We may disclose your information as permitted or required under PHIPA ss.40–43:
5.5 No Sale of Personal Information
We do not sell, rent, trade, or otherwise commercially disclose your personal information or PHI to any third party under any circumstances.
Upon written request, patients are entitled to receive their laboratory bloodwork results, consistent with PHIPA s.52. Additional clinical documentation may be provided at the discretion of the clinic and treating practitioner.
Your laboratory bloodwork results will be provided upon written request. Where the clinic determines it appropriate, additional clinical documentation may also be released to support your continuity of care.
Note that the release of a patient’s health record does not constitute, and should not be interpreted as, the transfer or reissuance of a prescription under a different clinical arrangement. Prescription issuance is a separate clinical act governed by our integrated care model and pharmacy fulfillment policy.
Patient health records are retained in accordance with professional college standards:
To exercise any of these rights, submit a written request to medical@pandaygroup.com. We will acknowledge within 7 business days and respond within 30 days.
We implement safeguards consistent with PHIPA s.12, appropriate to the sensitivity of the information:
In the event of a privacy breach creating a real risk of significant harm, we will notify affected patients and report to the Information and Privacy Commissioner of Ontario as required under PHIPA s.12(2) and Ontario Regulation 329/04.
Our website may use essential cookies (required for functionality), analytics cookies (aggregate visitor behaviour), and marketing cookies (only where explicit consent is obtained). Cookies do not contain or transmit PHI and are never linked to patient health records.
The Panday Group delivers all clinical services via telemedicine. Our licensed practitioners hold current licences with the applicable Ontario regulatory college and prescribe from Ontario. Our approved pharmacy partners are Ontario-based and are legally authorized to dispense and ship medication to patients across Canada. This model is compliant with applicable federal and provincial pharmaceutical regulations and does not require our practitioners to hold licences in the patient’s province of residence.
You acknowledge that telemedicine has inherent limitations compared to in-person care, that our practitioner will advise you if in-person assessment is clinically warranted, and that you have the right to seek in-person care at any time.
Our services are exclusively for adults aged 18 and over. We do not knowingly collect PHI from individuals under 18. If such information is discovered, it will be promptly deleted and services will not be rendered.
We may update this Policy to reflect changes in our practices, legal obligations, or college standards. Material changes will be communicated to active patients by email with a minimum of 30 days’ notice. Continued engagement with our services constitutes acceptance of the current policy.
The Panday Group
Attention: Privacy Contact
Email: medical@pandaygroup.com
Phone: 1-844-272-6329
Address: 46 Routledge Drive, Richmond Hill, Ontario, L4C 0E3
Website: pandaygroup.com
