Our Role

Heeges Care acts as a data processor. Care agencies using our platform are the data controllers and are responsible for how personal and care-related data is collected and used.

We process data only on behalf of and under the instruction of our clients.

Information We Collect

We collect only what is necessary to provide our services:

• Personal Information: names, email addresses, phone numbers, and user roles
• Care Information: care notes, schedules, tasks, and client records
• Sensitive Data: health and care-related information entered by authorized users
• Usage Data: login activity, device information, and system interactions
• Communications: support requests and feedback

How We Use Information

We use data to:

• Operate and maintain the platform
• Enable care coordination and communication
• Manage user access and permissions
• Improve system performance and security
• Meet legal obligations
• Provide support

We do not sell personal data.

Data Access and Sharing

• Within Organizations: Access is controlled by roles and permissions set by the agency
• Families & Guardians: Access is granted only through agency-controlled permissions
• Service Providers: We use secure infrastructure providers, including hosting in Canada
• Legal Requirements: We may disclose data where required by law

Sensitive Data Handling

Heeges Care supports the processing of health and care-related data.

This data is:

• Accessible only to authorized users
• Restricted through role-based permissions
• Protected with enhanced safeguards

Data Security

We implement safeguards, including:

• Encryption of data in transit and at rest
• Role-based access control
• Secure hosting in Canada (DigitalOcean)
• Activity logging for audit and traceability

Data Storage and Transfers

Data is hosted in Canada. Where limited processing involves other jurisdictions, appropriate safeguards are applied.

Data Retention

We retain data only as long as necessary.

Upon account termination:

• Data can be exported by the client
• Data is retained for up to 60 days
• After this period, data is securely deleted or anonymized

Data Breach Response

In the event of a breach posing a real risk of harm:

• Affected clients will be notified without undue delay
• We will provide relevant details and actions taken
• We will contain, investigate, and resolve the issue

User Responsibilities

Users and agencies are responsible for:

• Keeping login credentials secure
• Managing permissions appropriately
• Ensuring data accuracy and lawful use

Your Rights

Under laws including PIPEDA, individuals may have rights to:

• Access their data
• Request corrections
• Request deletion where applicable

Requests should generally be directed to the care provider.

Compliance

We operate in alignment with applicable laws, including the Health Information Act, where relevant.

Changes

We may update this policy. Continued use indicates acceptance.

Acceptance

By using Heeges Care, you agree to these Terms.

Use of the Platform

You agree to use the platform only for lawful purposes related to care operations.

User Accounts

You are responsible for:

• Maintaining account confidentiality
• All activity under your account
• Providing accurate information

We may suspend or terminate accounts for violations.

Client Responsibilities

Care agencies are responsible for:

• Lawful data collection and use
• Obtaining required consents
• Managing user roles and access
• Compliance with applicable regulations

Data Ownership

All data remains the property of the client (care agency). Heeges Care does not claim ownership of client data.

Availability

We aim for reliable service, but do not guarantee uninterrupted access. Maintenance or updates may affect availability.

Limitation of Liability

To the extent permitted by law, Heeges Care is not liable for:

• Indirect or consequential damages
• Data loss caused by user actions
• Interruptions outside our control

Termination

We may suspend or terminate access if these Terms are violated. Upon termination:

• Access is revoked
• Data is handled per the Privacy Policy

Changes

We may update these Terms. Continued use indicates acceptance.

Governing Law

These Terms are governed by applicable Canadian laws.

What Are Cookies

Cookies are small data files stored on your device to support platform functionality.

How We Use Cookies

We use cookies to:

• Maintain secure sessions
• Keep users logged in
• Improve performance
• Understand usage patterns

Types of Cookies

• Essential Cookies: Required for core functionality
• Performance Cookies: Help improve the platform
• Functional Cookies: Enhance user experience

Managing Cookies

You can control cookies through your browser settings. Disabling cookies may affect functionality.

Updates

We may update this policy as needed.