Privacy policy

1. The person in charge

Logiciel Swelio Inc. (doing business as Talvia), with its head office at 2835 rue Bélanger, Montréal, Québec H1Y 1A8, is responsible for protecting the personal information it holds. The designated person in charge, within the meaning of Law 25, can be reached at confidentialite@talvia.ca. They answer any request for access, correction or complaint within 30 days.

2. What we collect, and why

• Identity and contact details (name, date of birth, address, email, phone): to create your file, verify your eligibility and reach you.
• Health information (clinical questionnaires, professionals’ notes, prescriptions, documents you upload): to allow the professionals to treat you. This information is the most sensitive and receives the highest level of protection.
• Payment: processed by our payment provider; we never keep your full card number.
• Technical data (login log, device): for account security and the access log required by law.

We collect nothing beyond what is necessary, and the screening test on the ADHD page does not save any answer.

3. Your consents

Two separate consents are collected and recorded before your first consultation: one for care, one for telemedicine technology. Any secondary use (for example sending you our newsletter) is subject to a separate consent, never presumed, that you can withdraw in one click.

4. Where your data lives

Your information is hosted in data centres located in Canada (Montréal region). Video consultations go through an infrastructure whose Canadian servers are used. Every provider that handles your information is bound by a written data protection agreement compliant with Law 25, and a privacy impact assessment is carried out before any new transfer.

5. Who has access

• You, through your portal.
• The professionals involved in your care, for the duration of the care relationship.
• Our technical staff, only when necessary and with logging.
• Another healthcare professional (your family doctor, your pharmacy), only with your consent.
• The authorities, only when the law requires it.

Every access to your file is recorded in a log you can ask to see. We never sell your information and never share it for advertising purposes.

6. How long we keep it

Clinical records are kept for the periods required of professionals by their order, then securely destroyed. Account information is deleted no later than 12 months after your account is closed, unless the law requires otherwise.

7. How we protect it

Encryption in transit and at rest, strong authentication, role-based access separation, logging, encrypted backups, security testing before every production release. In the event of a privacy incident presenting a risk of serious harm, we notify you, as well as the Commission d’accès à l’information, as required by law.

8. Your rights

• View the information we hold about you and obtain a copy.
• Have inaccurate information corrected.
• Withdraw a consent, at any time.
• Request that dissemination stop or that information be deleted, within the limits of clinical record retention obligations.
• File a complaint with the person in charge, then with the Commission d’accès à l’information du Québec if the answer does not satisfy you.

9. Cookies

The site uses only the cookies needed for it to work (session, security, chosen language). No advertising cookies, no third-party trackers. If audience measurement cookies are ever added, they will be off by default and subject to your choice.

10. Changes

Any significant change to this policy is announced to you by email and in your portal before it takes effect, with the date of the new version shown at the top of this page.