EndWell Management Inc. Privacy Policy

Effective Date: Sept 9, 2026
Last Updated: Sept 28, 2026

​

EndWell Management Inc. Portfolio Privacy Policy

Effective date: September 21, 2026
Last updated: September 28, 2026

​

EndWell Management Inc. ("EndWell," "we," "us," or "our") respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how EndWell collects, uses, discloses, protects, retains, and provides access to personal information across its businesses, websites, and services

​

1. Scope of this Policy

This Policy applies to EndWell and to the EndWell websites, brands, programs, and services that link to it, including:

• PEIDoctor.com;

• Form5.ca;

• Doc5.ca and Understand My Health;

• Stay5.ca;

• Team5.ca;

• Pain5.ca;

• EndWellPEI.com;

• StartWellPEI.com;

• OnCallPEI.com; and

• any other EndWell website, service, or program that links to this Policy.

Some services may provide an additional privacy notice, consent form, intake notice, employer or insurer authorization, or clinician-specific privacy notice. If a more specific notice applies to a particular service or transaction, it will supplement this Policy and will govern to the extent of any inconsistency.

This Policy does not apply to third-party websites or services that have their own privacy policies.

​

2. EndWell's Role and the Role of Healthcare Providers

EndWell provides non-clinical management, administrative, technology, payment, scheduling, communication, and care-coordination services. EndWell does not itself practise medicine or make independent clinical decisions.

Physicians and other regulated healthcare providers who deliver clinical services through or in connection with an EndWell service are independent professionals. They are responsible for their own clinical decisions, professional obligations, and clinical records.

Depending on the service and the information involved, EndWell may:

1. collect and manage ordinary business or administrative personal information under EndWell's control;

2. act as an authorized agent, service provider, or information manager for an independent healthcare provider who is the custodian of personal health information; or

3. maintain administrative, billing, scheduling, or transaction records that are separate from a provider's clinical record.

For services such as PEIDoctor.com, Form5.ca, Doc5.ca, Pain5.ca, or other clinician-supported services, information submitted for clinical review—including intake answers, medical history, supporting documents, consultation notes, and completed medical forms—may become part of the independent healthcare provider's clinical record. EndWell may facilitate the secure collection, transfer, scheduling, payment, and return of this information on the provider's behalf.

Healthcare providers only complete medical forms, issue medical opinions, or recommend treatment when they determine that it is clinically appropriate. Submission or payment does not guarantee that a particular form, certificate, prescription, referral, or medical opinion will be provided.

​

Where a physician is the custodian of a medical record, EndWell Management Inc. may provide authorized administrative support on behalf of that physician. Such administrative access does not transfer clinical responsibility or custodianship of the medical record to EndWell. The physician remains responsible for clinical documentation and health-information custodianship in accordance with applicable law and professional requirements.

 

​

 

3. Privacy Laws and Standards

Our privacy practices are designed to comply with applicable Canadian and Prince Edward Island privacy requirements, which may include:

• the Personal Information Protection and Electronic Documents Act (PIPEDA), where it applies to personal information handled in commercial activities;

• Prince Edward Island's Health Information Act, where personal health information is held by a health information custodian or handled by EndWell as the custodian's agent or information manager;

• Canada's Anti-Spam Legislation (CASL) for commercial electronic messages; and

• applicable professional, regulatory, contractual, tax, employment, and record-retention requirements.

Prince Edward Island's Freedom of Information and Protection of Privacy legislation generally governs designated public bodies. It may apply to information handled for or on behalf of a public body, but it does not ordinarily govern EndWell's private-sector business records.

​

4. Information We Collect

The information we collect depends on the service you use and may include:

Identity and contact information

• name, date of birth, preferred name, and pronouns;

• address, email address, and telephone number;

• identity-verification information; and

• information about a parent, guardian, substitute decision-maker, caregiver, or authorized representative.

Eligibility and service information

• location, residency, visitor, or eligibility information;

• appointment requests, scheduling information, and service preferences;

• referral source and the reason for requesting a service; and

• communications with EndWell or a participating provider.

Personal health information

• symptoms, medical history, medications, allergies, diagnoses, treatment information, and other health details;

• intake questionnaires, medical forms, photographs, reports, test results, and supporting documents;

• consultation notes, clinical assessments, and provider communications; and

• information needed to assess whether a requested form, service, or appointment is clinically appropriate.

Payment and transaction information

• service selected, fees, invoices, receipts, refunds, and payment status;

• billing contact information; and

• limited payment information received from our payment processor. We generally do not receive or store complete payment-card numbers.

Employer, insurer, legal, and referral information

• the identity and contact details of an employer, insurer, law firm, case manager, or other referring or paying organization;

• authorization and consent records; and

• information necessary to arrange, pay for, or deliver the specifically authorized service.

Website and technical information

• IP address, browser and device type, operating system, referring pages, and general location derived from an IP address;

• pages viewed, links selected, timestamps, session information, and website performance data; and

• cookie identifiers, preferences, and similar technical information.

We ask that you provide only information that is relevant to the service requested.

​

5. How We Collect Information

We may collect information:

• directly from you through a website, secure form, portal, telephone call, email, text message, appointment, or other communication;

• from your authorized representative, parent, guardian, caregiver, or substitute decision-maker;

• from an independent healthcare provider involved in your service;

• from an employer, insurer, law firm, case manager, or referral partner when you have authorized the collection or when the law otherwise permits it;

• from service providers that support payments, scheduling, communications, identity verification, or technology operations; and

• automatically when you use our websites or online services.

If you provide personal information about another person, you are responsible for confirming that you have authority to do so.

​

6. How We Use Information

We may use personal information to:

• respond to inquiries and provide information about our services;

• create and manage service requests, accounts, bookings, and appointments;

• confirm identity, location, eligibility, authorization, or suitability for a service;

• coordinate administrative and clinical workflows with independent healthcare providers;

• enable a healthcare provider to assess a request, conduct a consultation, maintain a clinical record, and return a clinically appropriate form or other result;

• communicate service updates, instructions, appointment information, or follow-up requirements;

• collect fees, process refunds, issue invoices and receipts, and maintain financial records;

• securely transfer information to authorized providers, recipients, or representatives;

• operate, secure, troubleshoot, and improve our websites and services;

• prevent fraud, misuse, unauthorized access, or threats to safety;

• meet legal, regulatory, professional, insurance, accounting, and contractual obligations;

• investigate and respond to privacy or security incidents; and

• create aggregated or de-identified information for service planning, quality improvement, and business analysis, where appropriate.

We use personal information for marketing only with appropriate consent or as otherwise permitted by law. You may unsubscribe from commercial electronic messages at any time using the unsubscribe option in the message or by contacting us. You may still receive non-promotional messages needed to deliver a requested service.

​

7. Consent and Your Choices

We obtain consent in a manner appropriate to the sensitivity of the information and the purpose for which it is collected, used, or disclosed. Consent may be express or implied where permitted by law. We generally seek express consent for sensitive health information and for disclosures outside the direct service relationship.

You may withdraw consent, subject to reasonable notice and any legal, contractual, professional, safety, or record-retention restrictions. Withdrawing consent may limit our ability, or a provider's ability, to deliver a requested service. Withdrawal does not require deletion of information that must be retained by law or as part of a healthcare provider's clinical record.

For children and other individuals whose capacity may be in question, consent is assessed based on the individual's ability to understand the relevant information and reasonably foreseeable consequences. A parent, guardian, or legally authorized substitute decision-maker may act where required or permitted by law.

​

8. When We Disclose Information

We may disclose personal information only as reasonably necessary for an identified purpose, with consent, or as permitted or required by law, including to:

• independent physicians and other healthcare providers involved in the requested service;

• EndWell personnel and authorized agents who need the information to perform their duties;

• technology, payment, hosting, communications, professional, insurance, accounting, and other service providers that support our operations;

• a person you authorize, such as a family member, caregiver, representative, employer, insurer, lawyer, or case manager;

• government, regulatory, law-enforcement, court, or emergency authorities where disclosure is required or permitted by law;

• another organization in connection with a proposed or completed business transaction, subject to appropriate confidentiality and legal safeguards; and

• any other recipient clearly identified to you at or before the time of consent.

We do not sell or rent personal information. We do not use personal health information for interest-based advertising.

​

Employer-, insurer-, and third-party-paid services

An employer, insurer, law firm, or other organization may arrange or pay for a service. Payment or referral alone does not entitle that organization to receive your clinical information. EndWell and the healthcare provider will disclose only the information you have authorized, or that the law otherwise permits or requires. The applicable consent form or service terms will identify the intended recipient and the type of information to be returned.

Information that an employer, insurer, or other third party receives and holds may be governed by different privacy laws and that organization's own privacy practices.

​

9. Service Providers

We use service providers to support functions such as:

• website and cloud hosting;

• appointment booking, practice management, and electronic records;

• secure messaging, document transfer, electronic fax, and communications;

• payment processing;

• email, telephone, and customer support;

• analytics, security, and website performance; and

• legal, accounting, insurance, and other professional services.

Service providers are given only the information reasonably required to perform their functions and are expected to protect it through contractual, organizational, and technical safeguards appropriate to the circumstances.

​

10. Cookies and Analytics

Our websites may use cookies and similar technologies to operate essential features, remember preferences, understand website use, improve performance, and protect against misuse.

You can control many cookies through your browser settings and, where available, through our cookie-preference tools. Disabling certain cookies may affect website functionality. Information collected through analytics tools is used in accordance with this Policy and the applicable provider's terms and privacy practices.

​

11. Information Processed Outside Prince Edward Island or Canada

Some service providers may store or process information outside Prince Edward Island or outside Canada. When information is processed in another jurisdiction, it may be accessible to courts, law-enforcement agencies, or regulators under that jurisdiction's laws.

We assess service providers and use contractual, technical, and organizational safeguards appropriate to the sensitivity of the information. Personal information under our control remains subject to applicable Canadian privacy requirements even when processed by a service provider elsewhere.

You may contact our Privacy Officer for more information about service-provider processing outside Canada.

​

12. Security Safeguards

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity, amount, format, and location of the information. These may include:

• role-based access and least-privilege controls;

• identity verification and multi-factor authentication where appropriate;

• encryption in transit and other secure transmission methods where appropriate;

• secure portals, file-upload tools, and controlled storage;

• confidentiality commitments, privacy training, and access monitoring;

• service-provider assessment and contractual protections;

• system maintenance, backups, and security monitoring; and

• incident-response and breach-management procedures.

No method of electronic transmission or storage is completely secure. Please do not send sensitive health records through ordinary email unless specifically instructed to do so. Use the secure portal or upload method provided for your service whenever available.

​

13. Retention and Disposal

EndWell retains administrative, financial, consent, communication, and transaction records only for as long as reasonably necessary for the purpose for which they were collected and to satisfy legal, tax, insurance, contractual, security, and dispute-resolution requirements.

Independent healthcare providers control their clinical records and retain them in accordance with the Health Information Act, professional standards, and other applicable requirements. EndWell may retain or process those records on a provider's behalf for the same period.

When information is no longer required, it is securely destroyed, deleted, or de-identified in a manner appropriate to its sensitivity and format, subject to backup cycles and legal preservation requirements.

​

14. Access, Correction, and Privacy Requests

You may request access to personal information under EndWell's control and ask that inaccurate or incomplete information be corrected. We may need to verify your identity before responding. Access may be limited, delayed, or refused where permitted or required by law, and reasonable fees may apply where authorized.

Requests involving a healthcare provider's clinical record are handled by the provider who is the health information custodian. EndWell can help route the request to the appropriate provider but may not have authority to make decisions about access, correction, retention, or disclosure of the clinical record.

To make a request, contact the Privacy Officer using the details below. Please do not include unnecessary medical details in ordinary email.

​

15. Privacy and Security Incidents

If we become aware of a privacy or security incident, we will take reasonable steps to contain it, assess the risk, investigate its cause, preserve required records, and reduce the risk of recurrence. Where EndWell acts for a healthcare provider, we will notify and cooperate with the responsible custodian. We will notify affected individuals, regulators, or other parties when required by applicable law.

16. Complaints

We encourage you to contact our Privacy Officer first so that we can understand and address your concern. If the concern relates to an independent provider's clinical record or care, we may direct or forward it to that provider.

Depending on the information and law involved, you may also have the right to contact:

• the Office of the Information and Privacy Commissioner of Prince Edward Island regarding matters governed by the Health Information Act; or

• the Office of the Privacy Commissioner of Canada regarding matters governed by PIPEDA.

​​

17. Third-Party Websites and Links

Our websites may link to services operated by other organizations. EndWell is not responsible for the content, security, or privacy practices of those third parties. Review their privacy policies before submitting personal information.

​

18. Emergency and Urgent Care

EndWell websites and online services are not emergency services and are not continuously monitored for urgent medical needs. If you believe you are experiencing a medical emergency, call 911 or go to the nearest emergency department. For urgent but non-emergency health advice in Prince Edward Island, use the current provincial health-advice service available in your location.

​

19. Changes to this Policy

We may update this Policy as our services, practices, technology, or legal obligations change. The revised Policy will be posted with a new "Last updated" date. We will provide additional notice or obtain consent where required by law for a material change.

​

20. Contact the Privacy Officer

Questions, access or correction requests, consent withdrawals, and privacy complaints may be directed to:

Privacy Officer
EndWell Management Inc.
Summerside, Prince Edward Island, Canada
Email: info@endwellpei.com
Telephone: (902) 316-1550

Please avoid including sensitive medical details in ordinary email. We will direct you to a secure communication method when needed.