Privacy Practices under Ontario Law (PHIPA)
This notice explains how SmileKonnect relates to Ontario’s Personal Health Information Protection Act, 2004 (PHIPA), and how responsibilities are shared among patients, dental professionals, and the platform. It should be read together with our Privacy Policy.
1. Roles under PHIPA
Health information custodian
Your dentist or dental practice is typically the health information custodian for personal health information used to provide your dental care.
Agents
Clinic staff acting for that practice are generally agents of the custodian when performing their duties.
Electronic tools
SmileKonnect provides electronic tools that enable custodians and authorized users to collect, use, retain, and communicate personal health information digitally. Where the platform is used by more than one health information custodian to exchange personal health information with one another, additional Ontario rules for electronic service providers or health information network providers may apply.
2. Privacy supports in SmileKonnect
SmileKonnect includes the following measures that support the protection of personal health information:
Access controls and encryption
Signed-in access with role-based permissions, and encryption of many sensitive fields stored in the system.
Consent and signing workflows
Consent steps for certain messaging and file-sharing activities, and electronic signature disclosures in document workflows.
Auditability and document delivery
Audit logging of relevant activities for authorized clinic review, and directing many clinical documents to secure portal access rather than email attachments.
Dentists and clinics remain responsible for taking reasonable steps to protect personal health information in their custody or control, including how they configure and use the platform in day-to-day practice.
3. Scope of this notice
What we describe here
This notice describes SmileKonnect’s relationship to PHIPA and the privacy supports built into the platform. Operational details such as hosting locations, third-party services used in production, and how a particular clinic responds to privacy incidents are addressed in the Privacy Policy and through the clinic’s own privacy practices.
Record requests and deletion
Deletion of personal information is handled through a review process with the dental team and remains subject to legal and professional retention requirements. See the Data Deletion Request page and Privacy Policy for details.
4. Your rights under PHIPA
Access, correction, and complaints
Subject to the Act, individuals may request access to and correction of their personal health information, and may raise concerns about privacy practices. Health information custodians remain responsible for responding to access and correction requests for records in their custody or control.
Contact SmileKonnect at smilekonnect@drrameshagrawal.com.
5. Professionals
Professional obligations
Dentists and clinics using SmileKonnect remain responsible for meeting their obligations under PHIPA and the standards of the Royal College of Dental Surgeons of Ontario. Individual dentists hold certificates of registration with the College; those professional duties continue when care is coordinated through digital tools.