Privacy Policy

This policy explains what information Summit Client Inc. (“Summit,” “we”) collects through summitclient.io and its connected portals, how it is used, and the choices available to you. It applies to visitors to our marketing site and to clinics, staff and families who use the product.

Who this covers

Summit is built for healthcare practices operating in Canada. Client and staff health information handled inside the product is governed by the Personal Health Information Protection Act (Ontario) and the Personal Information Protection and Electronic Documents Act (federal), and is processed on behalf of the clinic that is our customer - the clinic remains the data controller for the records its staff and families create in the product.

Information we collect

• Account information you provide: name, email, role, and organization.
• Information a clinic enters or generates in the product on behalf of its staff and the families it serves, including scheduling, clinical and billing records.
• Usage information: pages visited, actions taken, device and browser information, collected to operate and secure the service.
• Communications you send us, such as support requests or a demo inquiry.

How we use it

• To provide, maintain and secure the product for the clinics that use it.
• To communicate with you about your account, a request, or the service.
• To improve the product, using aggregated or de-identified information wherever possible.
• To meet legal, regulatory and contractual obligations.

How it is stored and protected

Client, staff and clinical data are isolated per organization at the database level, and access within an organization is scoped by role and action rather than granted broadly. Any use of a third-party AI model on clinical data is routed through a vendor under a signed agreement covering that data; no identifiable clinical data is sent to a third-party model without one.

Who we share it with

We do not sell personal information. We share information with service providers who help us operate the product (such as hosting and infrastructure providers) under agreements that limit their use of it, and where required by law.

Your choices

If you are a client, family member or staff member of a clinic using Summit, your primary relationship for privacy requests is with that clinic, as the holder of your record. You may also contact us directly using the details below, and we will route your request appropriately.

Retention

We retain information for as long as needed to provide the service to the clinic that is our customer, and afterward as required by law or a clinic’s own record-retention obligations.

Contact

Questions about this policy can be sent to info@summitclient.io.