Privacy Policy

1.Who we are and what this policy covers

This Privacy Policy explains how Carepath Caribbean, carrying on business as Carepath Caribbean (“we” or “us”), collects, uses, shares, and protects personal information, including personal health information. It covers our Website, the free consultation, the navigation program and our communications with patients, families and Website visitors.

2.Information we collect

3.How we use it

• to provide the free consultation, including navigation, coordination and your Personalised Care Summary;
• to communicate with you and, with the member’s consent, with family members and healthcare providers;
• to process payments, send reminders, and manage your account;
• to maintain the quality and safety of our service, meet legal obligations, and handle complaints;
• to understand and improve our services, using de-identified information wherever possible.

We do not sell personal information. We do not use health information for marketing. We use patient stories or testimonials only with the patient’s written consent.

4.Consent

We ask for your express consent to collect and use your health information when you book a consultation and when you enroll. The patient decides which family members may receive information. You may withdraw consent at any time, subject to legal requirements; withdrawal does not affect information already shared, and it may limit the support we can provide.

5.Who we share it with

• Your healthcare providers, including doctors, hospitals, and specialists, with your consent, to coordinate your care.
• Oncologists and specialists who support our nurses, including for treatment plan review.
• Second-opinion providers, including in Canada, only when you ask us to arrange a second opinion.
• Family members you have named.
• Payment providers (PayPal and our card processor), and/or our payment agent in Barbados. These receive only the information needed to process payments and receive no health information.
• Service providers who host data or provide communications, such as email, cloud storage, and WhatsApp, under confidentiality obligations.
• Website service providers: our web hosting is provided by HostGator and Google provides reCAPTCHA to protect our contact form from spam, and HeyGen, which hosts the video on our website. See section 13.
• Authorities, where required by law or court order.

6.Where your information is stored

Our nurses and supporting oncologists work from Canada, and your information is stored in Canada. If you are in Barbados or elsewhere in the Caribbean, your information is therefore transferred outside your country. Information held in another country is subject to that country’s laws, including lawful access by its authorities. Some service providers may process information in other countries, such as the United States.

7.WhatsApp, email and video

These channels are convenient but not risk-free. WhatsApp messages are end-to-end encrypted, but WhatsApp’s own terms apply to your use of it, and anyone with access to your device may see your messages. Use a private setting and your own device, and tell us if you would prefer a particular channel not be used for health information.

8.How we protect it

We use administrative, technical, and physical safeguards appropriate to health information. These include confidentiality agreements and training for staff, need-to-know access, secure systems with strong authentication, and contracts requiring our service providers to protect information. No system is completely secure; if a breach occurs that creates a real risk of significant harm, we will notify you and the relevant authorities as required by law.

9.How long we keep it

We keep health records for a ten-year period after your navigation ends, or longer where the law requires. Information from people who had a free consultation but did not enroll is kept for a one-year period. Payment records are kept as required for tax and accounting purposes. Information is then securely destroyed or de-identified.

10.Your rights

You may ask to see the personal information we hold about you, ask us to correct it, withdraw consent, and ask how it has been used and shared. Contact us at info@carepathcaribbean.com. We may need to verify your identity or your authority to act for someone else before responding.

11.If you are in Barbados

Barbados’s Data Protection Act, 2019 applies to our handling of personal information about people in Barbados. Under it you have rights including to be informed about, access, correct and object to the processing of your personal data. We process your health information for medical purposes, including the provision of care and the management of health care services, and with your consent. As described in section 6, your information is transferred to and stored in Canada. You may complain to the Barbados Data Protection Commissioner as well as to us.

12.If you are in Canada

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial law. You may complain to the Office of the Privacy Commissioner of Canada.

13.Website cookies and analytics

Our website does not use analytics or advertising cookies, and we do not track your activity across other websites. We use only the following:

• Essential website cookies, set by WordPress so the site works properly.
• Google reCAPTCHA, which protects our contact form from spam. Google may collect device and usage information to check that a visitor is human. Its use is subject to Google’s Privacy Policy and Terms of Service.
• HeyGen video player, which loads and may set cookies, which may set cookies when you visit our Virtual Cancer Navigation page.

14.Children

Our services are for adults. Where a patient is under 18, a parent or legal guardian must enrol and consent on their behalf.

15.Changes and contact

We may update this policy and will post changes here with a new effective date. Questions or requests: please send an email to info@carepathcaribbean.com