Privacy Policy
(Last modified: July 31, 2025)
This Privacy Policy sets out how the Industrial Medicine Clinic, CMIL, collects, uses, discloses, retains, and destroys your personal information. For ease of reading, we will use the terms “we” or “the clinic” from time to time in the Policy.
We may provide you with additional information regarding the processing of your personal information in certain cases at the time we collect your personal information. We may also obtain your specific consent in certain cases regarding the collection, use, disclosure, and retention of your personal information.
The Policy applies to personal information and sensitive personal information that we collect, regardless of the manner in which it is collected, whether in person, by telephone, by email, or via our website.
Definitions:
Personal information, or PI, is information that relates to a natural person and allows that person to be identified directly or indirectly. Examples include last name, first name, and date of birth.
Sensitive personal information, hereinafter referred to as SP, is information that, given its nature or the context in which it is used, raises a reasonably higher level of expectation in terms of privacy. Examples include medical records, medical notes, medical test results, and medication lists.
A privacy incident, as defined below, is:
Unauthorized access to personal information;
Unauthorized use of personal information;
Unauthorized disclosure of personal information;
The loss of personal information or any other breach of the protection of such information.
By accepting this Policy or providing us with personal information after having had the opportunity to review the Policy or any additional notice, you agree that your personal information will be processed in accordance with the Policy and any additional notice, if applicable.
1. About us
Here is our complete identification information:
Clinique de médecine industrielle des Laurentides (CMIL)
352 Curé-Labelle Blvd., Suite 200
Fabreville, Laval, Quebec H7P 2P1
Phone: 450-624-9990
Fax: 450-624-9991
If you have any questions about our Policy, how we process your personal information, or how to exercise your rights regarding your personal information, please contact our Privacy Officer, Ms. Danielle Michaud.
You can reach the Privacy Officer by email at:
Or by mail at the address mentioned above.
This Policy applies to our employees, professionals, subcontractors, suppliers, consultants, clients, and service requesters.
2. How we will process your Personal Information
How do we collect personal information?
By telephone, email, fax, questionnaire completed by the individual, or online.
What personal information do we collect?
RP: last name, first name, date of birth, telephone number, address, social insurance number (employees only).
Sensitive PR: medical records, CNESST records, disability management records, medical test results, legal records.
From whom do we collect your personal information?
From the person requesting services;
From the person who is the subject of a request for services;
From public or private organizations, if necessary to complete a mandate, with the written authorization of the person concerned.
Why do we collect your personal information?
For identification purposes;
To issue a medical opinion;
To issue a medical opinion
mandates;
For employee management purposes;
For accounting management;
For communication with users and clients;
For the management of administrative or clinical questionnaires.
What happens if you do not consent to the collection of your personal information?
The PI required for identification purposes is essential for opening and managing our medical assessment mandates.
Who will have access to your personal information?
Our employees and healthcare professionals;
The following service providers:
CDL Laboratories, Biron Medical Laboratory, Radiologix, or other medical service providers (medical imaging, pharmacy, or other relevant service providers);
Service requesters, depending on the nature of the mandate and applicable laws.
These third parties also have privacy policies that comply with applicable laws.
How will we share your personal information with third parties?
As a general rule, we will not share your PI or Sensitive PI without the requester of this information providing written authorization from the person concerned.
Furthermore, our medical assessment mandates are governed by professional standards (Collège des médecins du Québec) that require rigor and relevance with regard to the transmission of PI and Sensitive PI.
Detailed explanations on the processing of information collected for each service option are provided to the user.
How long will we keep your personal information?
We retain personal information for as long as necessary to fulfill the purposes for which it was requested. The retention period therefore depends on the reason for the service in question.
The clinic irreversibly and securely destroys paper documents.
Documents that must be retained in accordance with applicable rules or laws are stored on reliable, encrypted, restricted-use Canadian servers.
The Collège des médecins du Québec requires medical records to be backed up.
3. What are the risks associated with the processing of your personal information?
We are aware of the importance of protecting the sensitive information (PII and SII) that is sent to us.
With this in mind, we strive to maintain high standards for the protection of personal information at all stages of our processes.
We raise awareness among our staff and professionals through the following activities:
Regular training and updates on the protection of PI and sensitive PI.
Reference materials and guidance are always available for the implementation of PI and sensitive PI protection in the course of our activities.
However, no method of electronic storage or transmission can guarantee complete security.
Where will we store your personal information?
We retain personal information for as long as necessary to fulfill the purposes for which it was requested. The retention period therefore depends on the reason for the service in question.
The clinic irreversibly and securely destroys paper documents.
Documents that must be retained in accordance with applicable rules or laws are stored on reliable, encrypted, restricted-use Canadian servers.
The Collège des médecins du Québec requires medical records to be backed up.
3. What are the risks associated with the processing of your personal information?
We are aware of the importance of protecting the sensitive information (PII and SII) that is transmitted to us.
With this in mind, we strive to maintain high standards for the protection of personal information at all stages of our processes.
We raise awareness among our staff and professionals through the following activities:
Regular training and updates on the protection of PI and Sensitive PI.
Referencing and supervision always available for the implementation of RP and Sensitive RP protection in the course of our activities.
However, no method of electronic storage or transmission can guarantee infallible security.
Where will we store your personal information?
4. Technologies and inherent risks
We have implemented a rigorous information security governance program to protect personal information, particularly with regard to cybersecurity.
5. Security measures
Our website uses cookies. A cookie is a piece of information that is transmitted by the server to the browser when you visit our website.
These cookies can be disabled or reactivated by visitors by changing the preferences in your Internet browser settings or via the cookie consent pop-up on the website.
6. Security measures and inherent risks
Aware of the importance of protecting the confidentiality of sensitive data that characterizes our mission, we have made numerous changes to both our technical environment and our processes to implement best practices.
Our employees have secure, personalized access to their work consoles, and their tasks are clearly defined.
Best practices related to information management are reviewed during team meetings and continuously monitored by assistants dedicated to this supervision.
Despite these measures and given the risks inherent in the use of digital and IT tools, we cannot ensure or guarantee the security and confidentiality of the information you send us.
However, we are committed to maintaining ongoing vigilance in our practices related to the processing of PR and PSR.
7. How and under what conditions will we disclose your personal information for public safety or law enforcement purposes?
7.1. In the event of a serious risk of death or serious injury
We may disclose personal information that we hold in order to protect a person or group of persons when there are reasonable grounds to believe that a serious risk of death or serious injury, related in particular to a disappearance or an act of violence, including a suicide attempt, threatens that person or group and that the nature of the threat inspires a sense of urgency.
The information may then be disclosed to the person or persons exposed to this risk, their representative, or any person likely to come to their aid. Only the information necessary for the purposes of the disclosure will be disclosed.
7.2. Law enforcement agencies
We may also disclose information to the Director of Criminal and Penal Prosecutions or to a person or group responsible for preventing, detecting, or suppressing crime or violations of the law when the information is necessary for the prosecution of an offense under a law applicable in Quebec.
Finally, we may disclose information to a police force when it is necessary for the planning or execution of an intervention tailored to the characteristics of a person or situation, in either of the following cases: 1° the police force intervenes, at our request, to provide us with assistance or support in connection with the services we provide to a person; 2° we are acting in consultation or partnership with the police force in the context of joint psychosocial and police intervention practices.
8. Is your personal information transferred outside Quebec?
Your personal information may be transferred outside Quebec if the service applicant is outside the province of Quebec.
9. What are your rights regarding your personal information?
You have the right to access your personal information and have it corrected if it is inaccurate. To do so, you must submit a written request, with proof of identity (RP), to access the personal information we hold and request that corrections be made, if necessary, subject to applicable laws.
The complaint must include the following information:
First and last name of the complainant;
Home address;
Phone number;
Email address, if available;
Reasons for the complaint, description of the harm, if any, and expected corrective action.
The complaint must be sent to the person responsible for the protection of personal information:
Danielle Michaud
Clinique de médecine industrielle des Laurentides (CMIL)
352 boul. Curé-Labelle, suite 200
Fabreville, Laval (Québec) H7P 2P1
Phone: 450-624-9990
cmil@cmideslaurentides.ca
The complaint will be treated confidentially. You will receive an acknowledgment of receipt, and a written response will be provided within 30 days, unless there are exceptional circumstances, in which case you will be notified.
*Legal framework relating to our sector of activity:
Rules of practice, Collège des médecins du Québec
Act respecting industrial accidents and occupational diseases
Act respecting the protection of personal information in the private sector
Act respecting the protection of personal information in the public sector
Act to modernize legislative provisions as regards the protection of personal information (Bill 25)
Coordonnées
352, boul Curé-Labelle suite 200,
Fabreville (Laval), Québec H7P 2P1
450-624-9990
Heures d'ouverture
Business hours
Administration Office:
Monday-Friday
7 am - 12 pm and 1 pm - 4 pm
