Client Consent

TelePortUs™ is committed to ensuring that every client provides meaningful, informed consent before using our platform for telehealth consultations. We recognize that consent is a fundamental right under Canadian privacy law. Our consent framework is designed to comply with BC's Personal Information Protection Act (PIPA), Ontario's Personal Health Information Protection Act (PHIPA), Alberta's PIPA, and the federal Personal Information Protection and Electronic Documents Act (PIPEDA). We also consider the consent requirements of all provincial health information statutes including Manitoba and Nova Scotia's PHIA, Saskatchewan's HIPA, New Brunswick's PHIPAA, Newfoundland and Labrador's PHIA, Quebec's Law 25, and Yukon's HIPMA.

Canadian privacy law recognizes several forms of consent. On the TelePortUs™ platform, we obtain consent as follows:

Express Consent — Before their first telehealth consultation, each client is presented with a clear consent form that explains how their personal health information will be collected, used, and disclosed. The client must actively indicate their agreement (e.g., by checking a box and clicking 'I Consent'). This is the primary form of consent for telehealth services.

Implied Consent — Within the circle of care, consent for the collection, use, and disclosure of personal health information necessary for providing treatment may be implied. For example, when a client voluntarily provides health information to their provider during a consultation, consent to use that information for treatment is implied.

Consent for Electronic Communication — Clients specifically consent to receive communications (appointment confirmations, reminders, follow-up messages) via email. This can be withdrawn at any time.

Consent for Appointment Booking — When a client books an appointment through a provider's booking page, they consent to the collection of their name, email, and phone for scheduling and to receive appointment confirmation and reminder emails. This consent is separate from general telehealth consent.

Consent for File Exchange & Shredding — When participants exchange files during a call, they consent to the files being encrypted in transit and at rest, retained for a default maximum of 90 days, and securely shredded (bytes overwritten before deletion) at the end of retention or on request.

Withdrawal of Consent — Clients may withdraw their consent at any time by contacting their provider or our Privacy Officer. Withdrawal does not affect the lawfulness of information processed before withdrawal. Clients understand that withdrawing consent may limit their ability to receive telehealth services through the platform.

When a client provides consent to use TelePortUs™, they are consenting to the following:

Collection: Their name, contact information, and any health information shared during the consultation.

Use: Their information will be used solely for the purpose of providing healthcare services, scheduling appointments, and managing their care.

Storage: Their information will be stored securely on Canadian servers (Toronto, ON) for the period required by applicable law.

Video/Audio: Their video and audio will be transmitted using end-to-end encryption. TelePortUs™ cannot decrypt, record, or store the content of consultations.

Disclosure: Their information may be shared with their healthcare provider and, where required by law, with public health authorities or regulatory bodies.

Consent requirements vary by province. Our platform is designed to meet the highest standard across all jurisdictions:

British Columbia (PIPA): Express consent is required for collection, use, and disclosure of personal information. PIPA allows implied consent where information is voluntarily provided for a reasonable purpose. Clients must be informed of the purposes before consent is given.

Ontario (PHIPA): Consent may be express or implied. Within the circle of care, implied consent is generally relied upon for treatment purposes. Express consent is required for disclosures outside the circle of care. Health information custodians must document all consent decisions.

Alberta (PIPA): Express consent is required unless information is voluntarily provided. Albertans have strong rights regarding collection and use of their personal information.

Quebec (Law 25): Requires express consent for the collection and use of personal information. Consent must be clear, free, and informed. Quebec imposes some of the strictest consent requirements in Canada.

All Other Provinces: We follow the principles set out in PIPEDA, which requires meaningful consent — organizations must clearly explain the purposes for collection, use, and disclosure in language that is understandable.

TelePortUs™ maintains a permanent record of each client's consent. Our consent documentation includes:

- The client's full name and contact information

- The date and time consent was given

- The specific purposes for which consent was provided

- The version of the consent form presented to the client

- Whether consent was express or implied

- Any restrictions placed on consent by the client

- Records of any consent withdrawals or modifications

Consent records are stored securely in our Canadian database and are accessible to the client's healthcare provider. Clients may request a copy of their consent documentation at any time.

Under Canadian law, individuals must have the capacity to consent to the collection, use, and disclosure of their personal health information. Capacity is determined on a case-by-case basis:

Minors: In BC, the Infants Act allows minors to consent to healthcare if the healthcare provider determines the minor is capable. In Ontario, PHIPA allows a person who is capable of making a decision regarding their own health to consent. Other provinces have varying age-of-consent rules. Healthcare providers using TelePortUs™ are responsible for assessing a client's capacity to consent.

Substitute Decision-Makers (SDMs): Where a client lacks capacity, consent may be obtained from an authorized substitute decision-maker as defined by provincial legislation. The SDM's consent must be documented the same as the client's would be.

Emergency Situations: Where immediate healthcare is required and consent cannot be obtained, PHIPA and other provincial statutes allow for the collection, use, and disclosure of personal health information without consent to the extent necessary to provide emergency care.

If you have questions about our consent practices or wish to exercise your rights regarding consent, please contact:

Privacy Officer: privacy@totuslife.org

Security: security@totuslife.org

General Inquiries: support@totuslife.org

We aim to respond to all consent-related inquiries within 2 business days.