Privacy Policy

Privacy Policy

Last Updated: May 6, 2026

Kanata Health is committed to protecting your privacy and safeguarding the personal information you provide to us.

This Privacy Policy explains how Kanata Health collects, uses, discloses, stores, and protects personal information when you visit our website, submit a consultation request, communicate with us, book or attend a consultation, or use our services.

Kanata Health provides physician-guided access to advanced testing for Canadians. Some services may involve virtual consultation with Dr. Ali Sanei-Moghaddam and coordination with U.S.-based providers, laboratories, or testing companies. Dr. Sanei is licensed in British Columbia and Washington State.

This Privacy Policy should be read together with our Terms of Use. By accessing our website, submitting information through our forms, or using our services, you acknowledge that your personal information will be handled as described in this Privacy Policy.

This policy has been developed with reference to applicable Canadian privacy requirements, including British Columbia's Personal Information Protection Act and, where applicable, Canada's Personal Information Protection and Electronic Documents Act.

1. Personal Information We Collect

We collect only the personal information reasonably required to respond to your inquiry, assess your request, provide services, coordinate care, and meet legal or professional obligations.

Information you provide directly

Depending on how you interact with us, we may collect:

  • name;

  • email address;

  • phone number, if provided;

  • province or territory of residence;

  • information submitted through our website forms;

  • testing area or service interest;

  • brief details about your health goals, questions, concerns, or reason for contacting us;

  • appointment or scheduling information;

  • billing or payment-related information, where applicable;

  • health-related information you choose to provide during consultation, intake, or follow-up;

  • medical history, medications, allergies, test results, reports, or other health information, if required for consultation, testing coordination, or follow-up.

Health-related information may include sensitive personal information. We collect this information only where it is reasonably required to provide physician-guided consultation, assess whether testing may be appropriate, coordinate testing, interpret results, or provide follow-up.

Information collected automatically

When you use our website, we may collect limited technical information such as:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • pages visited;

  • referring website;

  • date and time of access;

  • general website usage information.

This information helps us understand website performance, improve user experience, maintain security, and analyze how visitors use the site.

2. Adults and Minors

Kanata Health's services are intended for adults aged 19 or older.

We do not knowingly collect personal information from minors through our website consultation request form. If we become aware that a minor has submitted personal information without appropriate parent or guardian involvement, we may delete the information or take other appropriate steps.

If Kanata Health later agrees to provide services involving a minor, a parent or legal guardian must provide appropriate consent and participate in the process.

3. Why We Collect Personal Information

We collect personal information for the following purposes:

  • to respond to consultation requests;

  • to communicate with you about appointments, questions, or services;

  • to verify your identity where appropriate;

  • to assess whether a consultation or testing pathway may be appropriate;

  • to provide physician-guided consultation;

  • to coordinate testing through U.S.-based providers or laboratories where applicable;

  • to review and interpret test results;

  • to provide follow-up guidance;

  • to process payments or billing, where applicable;

  • to maintain clinical, administrative, and legal records;

  • to improve our website and services;

  • to comply with legal, regulatory, professional, or reporting obligations;

  • for any other purpose to which you consent.

We do not collect personal information for purposes that are not reasonably related to the services we provide.

4. Consent

We collect, use, and disclose personal information with your consent, except where permitted or required by law.

Consent depends on the context.

Website browsing

When you browse our website, limited technical and usage information may be collected through cookies, analytics, or similar technologies, as described in this Privacy Policy.

Consultation request form

When you submit a consultation request form, you consent to Kanata Health collecting and using the information you provide to respond to your request and communicate with you about a possible consultation.

Consultation and clinical assessment

If you proceed with a consultation, we may collect additional health-related information that is reasonably required for Dr. Sanei to assess your goals, history, risk factors, current concerns, and whether testing may be appropriate.

Testing coordination

If testing is appropriate and you choose to proceed, we may seek additional express consent, authorization, or confirmation before disclosing relevant personal or health information to U.S.-based providers, laboratories, or testing companies.

Your consent may be expressed, such as when you submit a form, sign an authorization, or provide written or electronic consent. It may also be implied where the purpose is obvious and you voluntarily provide information for that purpose.

You may withdraw consent at any time, subject to legal, regulatory, professional, contractual, or practical limitations. If you withdraw consent, Kanata Health may not be able to provide certain services, coordinate testing, obtain results, or continue with a testing pathway. We will explain the likely consequences of withdrawal where applicable.

5. Website Consultation Request Form

Our website consultation request form is intended for consultation inquiries only. It is not a medical intake form and should not be used for emergencies or urgent medical concerns.

Please do not submit urgent medical information through the website. If you are experiencing a medical emergency, call 911 or seek urgent medical care.

Submitting a website form does not create a physician-patient relationship. A physician-patient relationship is only established when a consultation is confirmed and accepted by the physician.

6. How We Use Personal Information

Kanata Health may use your personal information to:

  • contact you about your consultation request;

  • schedule and manage appointments;

  • understand your goals and service interests;

  • provide consultation and clinical assessment;

  • determine whether testing may be appropriate;

  • coordinate testing logistics;

  • communicate with U.S.-based providers, testing companies, or laboratories where required;

  • receive, review, and explain test results;

  • maintain patient and administrative records;

  • respond to your inquiries;

  • improve our website, forms, and service experience;

  • protect against fraud, misuse, unauthorized access, or security threats;

  • comply with applicable laws, professional standards, or regulatory requirements.

We may also use de-identified or aggregated information to understand service patterns and improve our operations. This information does not identify you.

7. Disclosure of Personal Information

We do not sell your personal information.

We may disclose personal information only where necessary and appropriate, including in the circumstances described below.

Health care and testing providers

If you proceed with testing, we may disclose relevant personal information to health care providers, U.S.-based providers, testing companies, laboratories, or other parties involved in your care or testing pathway.

This may include:

  • information needed to determine whether testing is appropriate;

  • information needed to arrange sample collection or testing;

  • demographic and contact information;

  • relevant health information;

  • test requisitions or supporting documentation;

  • test results and reports.

Disclosure to U.S.-Based Providers, Laboratories, and Testing Companies

Some testing pathways available through Kanata Health involve providers, laboratories, or testing companies located in the United States.

If you choose to proceed with U.S.-based testing, Kanata Health may disclose relevant personal information and health-related information to U.S.-based providers, laboratories, or testing companies for purposes such as:

  • assessing testing eligibility;

  • arranging sample collection;

  • completing requisition or ordering processes;

  • coordinating logistics;

  • performing testing;

  • receiving test reports;

  • reviewing and interpreting results;

  • supporting follow-up care.

We limit disclosure to the information reasonably required for the applicable testing or care-related purpose.

Personal information transferred to or processed in the United States may be subject to U.S. laws. We are required to inform you that your information may be accessible to U.S. courts, law enforcement, regulators, or government authorities in accordance with U.S. law.

Where Kanata Health uses service providers or testing providers outside Canada, we use contractual, technical, administrative, or other reasonable safeguards intended to protect personal information in a manner appropriate to its sensitivity.

However, Kanata Health does not control the privacy practices of independent U.S.-based testing companies or laboratories once information has been lawfully transferred to them for testing purposes. Each U.S. provider may have its own privacy policy, which we encourage you to review.

Service providers

We may use third-party service providers to help operate our website, manage communications, support scheduling, process payments, maintain records, host data, analyze website use, or support clinical and administrative workflows.

Service providers may be located in Canada, the United States, or other jurisdictions. We take reasonable steps to ensure service providers use personal information only for authorized purposes and protect it using safeguards appropriate to the sensitivity of the information.

U.S.-based testing companies and laboratories are independent organizations that operate under their own privacy policies and legal obligations. Kanata Health selects reputable providers and limits disclosure to information reasonably required for testing, but is not responsible for the independent privacy practices of these organizations once your information has been lawfully transferred.

Legal or regulatory disclosure

We may disclose personal information without consent where permitted or required by law, including:

  • in an emergency involving risk to life, health, or safety;

  • to comply with a court order, subpoena, legal process, or regulatory request;

  • to obtain legal advice;

  • to protect against fraud, security threats, or misuse;

  • to comply with professional, regulatory, or reporting obligations;

  • to collect a debt or enforce agreements;

  • as otherwise authorized or required by applicable law.

With your consent

We may disclose your personal information to other third parties where you have provided consent.

8. Cross-Border Testing and Travel

Kanata Health serves Canadian patients who may be seeking access to advanced testing not routinely available through Canadian provincial health systems.

Some testing pathways may require involvement of U.S.-based providers, laboratories, or testing companies. Depending on the test, you may be required to travel to the United States for sample collection, testing, or related clinical steps.

If U.S.-based testing is being considered, Dr. Sanei or Kanata Health will explain the general process, expected costs, logistics, and privacy implications before testing is arranged.

Before U.S.-based testing is arranged, Kanata Health will provide information about the relevant testing pathway and may request additional consent or authorization for disclosure of information to U.S.-based providers, laboratories, or testing companies.

Kanata Health does not control the privacy practices of U.S.-based testing companies or laboratories once your information has been lawfully transferred for testing purposes. Each U.S.-based provider may have its own privacy policy, which we encourage you to review.

9. Test Results and Reports

If you proceed with testing, test results and reports may be created by U.S.-based laboratories or testing companies.

Test results may be transmitted to Kanata Health, Dr. Sanei, or another provider involved in your care through the method used by the testing provider, such as a secure provider portal, electronic report, encrypted transmission, or another method used by the testing provider in accordance with applicable standards.

Kanata Health may retain copies of test reports and related clinical notes as part of your clinical record, in accordance with applicable legal and professional obligations.

The U.S.-based testing provider or laboratory may also retain your information and test results in accordance with its own policies, legal obligations, and privacy practices.

If you withdraw consent after testing has been arranged or completed, we will stop using or disclosing your personal information where reasonably possible and where required by law. However, withdrawal of consent may not require Kanata Health, Dr. Sanei, or a testing provider to delete records that must be retained for legal, regulatory, professional, clinical, billing, or compliance reasons.

At your request, and where appropriate, Kanata Health may send test results or summaries to your family physician, specialist, or another health care provider involved in your care.

10. Email and Electronic Communications

Email may not be a fully secure method of communication. Please avoid sending sensitive health details, test results, or urgent medical information by regular email unless specifically instructed.

If detailed health information needs to be shared, Kanata Health may provide or recommend a more secure method where available.

By communicating with us by email, you acknowledge that email communication may involve some privacy and security risks.

11. Cookies and Website Analytics

Our website may use cookies and similar technologies to support website functionality, understand website usage, improve performance, and enhance user experience.

Cookies may collect information such as:

  • pages visited;

  • time spent on the website;

  • device and browser information;

  • referring pages;

  • general interaction with website content.

We may use third-party analytics tools, such as Google Analytics, to help understand how visitors use the website.

You can adjust your browser settings to block or delete cookies. If a cookie management tool is available on our website, you may also use that tool to adjust your preferences. If you disable cookies, some website features may not function properly.

Our website does not currently respond to browser "Do Not Track" signals. You may manage cookie preferences through your browser settings or, where available, a cookie tool on our website.

12. Marketing and Educational Communications

We may contact you about a consultation request, appointment, service inquiry, or care-related matter.

Where you submit an inquiry or request information, Kanata Health may respond to that inquiry and communicate with you about the services you asked about.

We will only send optional marketing or educational electronic communications where you have provided express consent or where a recognized exemption or form of implied consent applies under Canada's Anti-Spam Legislation.

If we send optional marketing or educational communications, we will identify Kanata Health as the sender and provide a way to unsubscribe.

13. Safeguards

We use reasonable physical, administrative, and technical safeguards appropriate to the sensitivity of the personal information we hold.

These may include:

  • access controls and role-based access where appropriate;

  • password protection and secure authentication;

  • encryption in transit and at rest where feasible;

  • confidentiality obligations for staff, contractors, and providers who access personal information;

  • secure storage and transmission practices;

  • service provider due diligence where appropriate;

  • policies and procedures for handling personal information;

  • secure disposal or deletion practices when information is no longer required.

No electronic system, transmission method, or storage system is completely secure. While we take reasonable steps to protect personal information, we cannot guarantee absolute security.

14. Retention of Personal Information

We retain personal information only as long as necessary for the purposes for which it was collected, or as required for legal, regulatory, professional, accounting, insurance, or business purposes.

Clinical records created in the context of a physician consultation are retained in accordance with applicable professional standards. In British Columbia, medical records are generally retained for at least 16 years from the date of last entry, and for minors, from the age of majority, subject to applicable professional requirements.

When personal information is no longer required, we securely destroy, delete, anonymize, or otherwise dispose of it.

15. Your Privacy Rights

Subject to legal and professional limitations, you may have the right to:

  • request access to your personal information;

  • ask how your information has been used or disclosed;

  • request correction of inaccurate or incomplete information;

  • withdraw consent for certain uses or disclosures;

  • ask questions about our privacy practices;

  • make a privacy complaint.

To make an access or correction request, please contact us using the contact information below. We may need to verify your identity before responding.

Kanata Health will respond to access and correction requests within the timeframe required by applicable law. Where British Columbia's Personal Information Protection Act applies, we will generally respond within 30 business days after receiving a complete written request, unless an extension is permitted or required by law.

In rare circumstances, access to certain information may be limited or denied where permitted by law, including where disclosure would create a significant risk to you or another person, reveal confidential information about another person, or interfere with legal, regulatory, or professional obligations.

16. Accuracy of Information

We make reasonable efforts to keep personal information accurate and up to date for the purposes for which it is used.

Please notify us if your contact information or other relevant information changes.

17. Third-Party Websites

Our website may contain links to third-party websites, including testing companies, laboratories, scheduling tools, payment processors, or external resources.

We are not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review the privacy policy of any third-party website you visit.

18. Privacy Breaches

If a privacy breach occurs involving personal information under Kanata Health's control, we will take reasonable steps to contain, investigate, assess, and address the breach.

If we become aware of a privacy breach involving a third-party service provider, processor, testing provider, laboratory, platform, or other organization that handles personal information for or with Kanata Health, we will take reasonable steps to understand the nature and scope of the breach, work with the third party where appropriate, and determine whether notification or other action is required.

Where required by law, we will notify affected individuals, regulators, or other relevant parties. If PIPEDA applies and a breach creates a real risk of significant harm, notification to affected individuals will be provided as soon as feasible after that determination, and required reports will be made to the appropriate regulator.

We may also notify other organizations or government institutions where doing so may help reduce the risk of harm.

19. Complaints

If you have concerns about how we handle your personal information, please contact us first so we can review and respond to your concern.

You may also have the right to contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada, depending on the nature of your concern.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify you by posting an updated version on our website or by other appropriate means.

The "Last Updated" date at the top of this page indicates when the policy was last revised.

21. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact:

Kanata Health
Attn: Privacy Officer / Dr. Ali Sanei-Moghaddam
Suite 210
1465 Salisbury Avenue
Port Coquitlam, BC V3B 6J3

Email: privacy@kanatahealth.ca
Phone: 604-941-8277