Privacy Policy | Second Opinion & Health Strategy

Effective: August 7, 2026 • Last updated: August 7, 2026

Plain-language summary. EndWell Management Inc. coordinates the service and handles the personal information needed for administration, booking, payment, support and secure information transfer. Independent physicians are responsible for their own professional obligations and clinical records. We do not sell personal information. Medical records should not be sent through ordinary email.

1. Who we are and what this policy covers

EndWell Management Inc. ("EndWell," "we," "us," or "our") is a Prince Edward Island company that provides non-clinical management, administrative coordination, wellness-program support, booking facilitation and related services. This Policy applies to this website, our client-support activities and the administrative services supporting the Second Opinion & Health Strategy program.

EndWell does not itself provide medical diagnosis, treatment, prescribing, nursing care or other regulated clinical services. Any regulated healthcare service is provided independently by the applicable licensed healthcare professional.

2. Different privacy roles

Privacy responsibilities depend on who holds the information and why. EndWell is responsible for personal information under its control for administrative and business purposes. Independent healthcare professionals are separately responsible for information and records they create or control in the course of professional practice, including any health-information custodianship obligations that apply to them.

Where an independent physician uses a practice-management or electronic medical record platform, that physician's own privacy notice, consent process and professional obligations may also apply.

3. Information we may collect

We limit collection to information reasonably necessary for identified purposes. Depending on how you use the service, this may include:

name, contact information, date of birth and appointment preferences;
billing, transaction and payment-status information (payment-card details are generally handled by the payment processor rather than stored directly by EndWell);
communications with our support team;
intake information, health questions or health-related information that you voluntarily submit for coordination;
documents you choose to upload through an approved secure transfer or clinical platform;
accessibility, language or accommodation requirements;
website technical data such as IP address, browser/device information, pages visited, referral source and cookie/analytics data.

4. How we collect information

Information may be collected directly from you through this website, booking forms, telephone or text communications, secure forms or upload portals, and interactions with authorized service providers. With appropriate authority or consent, information may also be received from an independent provider, family member, representative or other person involved in your requested service.

5. Why we use information

to respond to inquiries and determine the administrative service requested;
to schedule and coordinate appointments with independent physicians;
to facilitate secure transmission of information you ask us to provide to a participating physician;
to process payments, receipts, refunds and accounting records;
to provide service updates and client support;
to protect our systems, detect misuse, prevent fraud and maintain security;
to meet legal, tax, insurance, audit and regulatory obligations;
to improve website performance and client experience using appropriately limited analytics;
for de-identified or aggregated operational analysis where appropriate.

We do not use personal health information for behavioural advertising, and we do not sell personal information.

6. Consent and choices

We obtain consent where required by applicable law. Consent may be express or, where legally appropriate, implied by your request for an administrative service. You may withdraw consent for future use or disclosure, subject to legal, contractual, professional, security or record-retention requirements and subject to the practical limits of services already performed.

You may choose not to provide information, but that may make it impossible to coordinate the requested service.

7. When information may be shared

We may disclose information only as reasonably necessary for identified purposes, including to:

the independent physician or healthcare professional you ask us to coordinate with;
technology providers supporting booking, secure messaging, document transfer, payments, hosting, communications, analytics or security;
professional advisers, insurers, auditors or contractors under appropriate confidentiality obligations;
a person you authorize, such as a family member or representative;
government, law-enforcement, regulatory or other bodies where disclosure is required or permitted by law;
another party where necessary to respond to a serious and imminent health or safety concern and legally permitted.

8. Service providers and platforms

The program may use third-party platforms for functions such as booking/electronic medical records, secure file transfer, payment processing, website hosting and analytics. Current operational tools may include services such as Jane, Sync, Stripe, Google or other vendors selected from time to time. Those providers process information according to their own contractual and privacy obligations and may operate infrastructure outside Prince Edward Island or outside Canada.

We select service providers with regard to the sensitivity of the information and use contractual, technical or administrative safeguards where reasonably appropriate. Because vendors can change, contact our Privacy Officer if you require current information about a specific provider before submitting sensitive information.

9. Medical records and secure document transfer

Do not send medical records, identification documents or other sensitive health information by ordinary email unless specifically instructed through an approved secure process. Where documents are required, we will direct you to an appropriate secure upload, messaging or clinical platform.

Information transmitted to an independent physician may become part of that physician's professional record and may then be retained under professional and legal record-retention requirements that differ from EndWell's administrative retention schedule.

10. Cookies and analytics

This website may use essential cookies and limited analytics technologies to understand traffic, improve performance and maintain security. Analytics may collect device and usage information but should not be used by us to intentionally place personal health information into advertising profiles. You can control many cookies through your browser settings. Disabling certain cookies may affect website functionality.

11. Cross-border processing

Some service providers may store or process information in other Canadian provinces or outside Canada, including the United States. Information processed in another jurisdiction may be subject to lawful access under that jurisdiction's laws. We take reasonable steps to understand and manage these risks when selecting service providers.

12. Safeguards

We use administrative, technical and physical safeguards proportionate to the sensitivity of the information under our control. Measures may include access controls, role-based permissions, strong authentication, encrypted connections, secure cloud services, confidentiality obligations, staff procedures, device protections, vendor due diligence, logging and incident-response practices. No electronic system can be guaranteed completely secure.

13. Retention and destruction

EndWell retains information only for as long as reasonably necessary for the purposes for which it was collected and to meet legal, accounting, tax, insurance, dispute-resolution, security and operational requirements. When EndWell-controlled information is no longer required, we use reasonable methods to securely delete, destroy, anonymize or de-identify it. Independent healthcare providers control retention of their own professional records.

14. Privacy incidents

If we become aware of a privacy or security incident involving information under our control, we will take reasonable steps to contain it, assess risk, investigate, document the response, reduce future risk and provide notifications where required by applicable law.

15. Access, correction and privacy requests

Subject to applicable law and legitimate exceptions, you may ask whether EndWell holds personal information about you, request access to it, request correction of inaccuracies, withdraw certain consent, or ask questions about our practices. We may need to verify your identity before acting on a request. Requests concerning a physician's clinical record should generally be directed to the physician or record custodian responsible for that record.

16. Minors and representatives

Services involving children, youth or persons represented by another individual require appropriate authority and consent. The applicable physician determines clinical consent requirements within their professional role. EndWell may request documentation or confirmation of authority before disclosing information or coordinating access.

17. Communications

Email, SMS and telephone communications may be used for administrative purposes. Standard email and SMS are not appropriate for detailed medical records. Marketing messages, where used, are subject to applicable consent and unsubscribe requirements. Transactional messages about an appointment or service may still be sent where needed.

18. Applicable privacy framework

We seek to handle information in accordance with privacy laws applicable to EndWell's activities, which may include federal private-sector privacy law and applicable Prince Edward Island requirements. Healthcare professionals remain separately responsible for the legislation, professional standards and record duties applicable to their practices. Because privacy obligations depend on context and jurisdiction, this Policy does not attempt to characterize EndWell as a health-information custodian where the law does not do so.

19. Changes to this Policy

We may update this Policy when our services, vendors, practices or legal requirements change. The current version will be posted here with an updated date. Material changes may be communicated through additional notices where appropriate.

20. Contact the Privacy Officer

Privacy Officer
EndWell Management Inc.
Prince Edward Island, Canada
Email: info@endwellpei.com
Phone: 902-316-1550

If you have a privacy concern, please contact us first so we can investigate and respond. You may also have the right to contact the privacy regulator with jurisdiction over the matter.

Website drafting note: This privacy page is designed as a strong operational starting point, but it should be reviewed against the exact final technology stack, record flows, physician arrangements and legal requirements before public launch.