CCMI operates a website (CompleteConcussions.com) which is used to provide information and education on concussion management to both healthcare providers and the general public for the purposes of education as well as the marketing of CCMI’s clinical and educational services. This website also links to a course website (Courses.CompleteConcussions.com) where CCMI hosts educational courses for healthcare professionals as well as the general public on concussion injuries.
- The CCMI website: CompleteConcussions.com
- The CCMI online course portal: Courses.CompleteConcussions.com
For information about how we collect, use and disclose personal information in connection with the CCMI Concussion Management Program, please see our CCMI Concussion Management Program Privacy Notice https://network.completeconcussions.com/register/personal.
Our collection, use and disclosure of personal information
In most cases, we collect personal information (e.g., name, email address and phone number) directly from you when you purchase, register for or interact with us for our Services. For this purpose “Services” indicates the submission and processing of a request for a concussion assessment or baseline test at one of our partnered clinic facilities, request to become a recognized CCMI clinic, registration to take part in our online training programs, or to sign up for one of our newsletters. In these cases, you will know what personal information we collect from you because you will have actively submitted it to us.
In some cases, it may be optional for you to create an account, or consent to the collection, use or disclosure of your personal information, in order to access our Services across various platforms. We will typically identify to you the purposes for which we may collect, use and disclose your personal information at the time that we collect such information. In general terms, such purposes include:
- To deliver Services to you which you have requested or signed up for;
- To establish and manage your subscriptions and accounts with us;
- To respond to your requests, questions and inquiries;
- To advise you of information, products and services which may be of interest to you;
- To meet our legal obligations and as permitted by law.
Below we describe in more detail how we collect, use and disclose information for certain Services.
Automatically Collected Information
Some information concerning your use of the Services will be collected automatically as you use them. These are:
- Computer IP address
- Geographical location when you enable location tracking on your app; and
- Information from cookies
We collect and use this information to generate aggregate/non-identifiable information in order to further develop, provide and manage the Services and for research purposes.
When you sign up for a Subscription available through our Services (e.g., CCMI newsletters, courses, webinars, etc.), you are required to provide your name and email address. This information is used to deliver information to your email address, contact you and administer your Subscription, and enable you to log in to manage your subscription.
We may also ask for additional, optional, information, which is not required to participate in the Subscription service, for example, address and profession/occupation. We collect and use this information in order to gain a better understanding of our subscribers to improve our Services, and to generate aggregate/non-identifiable demographic information. To opt out of such use, please do not provide the optional information, or you may contact our Privacy Officer at any time as indicated below.
When you submit an inquiry using our online forms, we request your name and email address, along with the comment or inquiry for the purpose of acting on the information and responding to you. This information may be shared with persons outside of Complete Concussion Management Inc. as required to respond.
How CCMI Responds to Do Not Track signals
CCMI does not track its customers over time and across third party websites and therefore does not respond to Do Not Track (DNT) signals.
Retaining and safeguarding personal information
We will take steps to retain personal information for as long as necessary to fulfill the purposes for which it was collected and as permitted or required by law. For our continuing education courses, we will take steps to retain personal information for a period of 5 years (minimum) and as long as necessary afterwards to fulfill the purpose for which it was collected and as permitted or required by law. We have implemented physical, organizational, contractual and technological measures designed to help protect your personal information from loss or theft, and unauthorized access, disclosure, copying, use or modification. However, complete confidentiality and security is not possible or guaranteed. For example, internet use and communication is subject to potential interception, loss and alteration. You acknowledge and agree that Complete Concussion Management Inc., its affiliates and related companies shall not be responsible for any damages you may suffer as a result of the transmission of confidential or sensitive information in relation to the Services.
Where we store your personal information
The data that we collect from you is stored in Canada. However, non-identifiable information that we share with third parties may be stored in a location outside of Canada. By submitting your personal data, allowing us to collect your personal data or using the Services, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this policy.
Links to other Websites and services
The Services may contain links to other websites and services, or be available only in connection with certain third parties and their websites, apps or services (e.g. social media providers). Complete Concussion Management Inc. is not responsible for the content or privacy practices of such third parties, or the information disclosed to them, and encourages you to review the privacy policies of such websites, apps and services.
Questions, complaints and requesting access to personal information
If you have any questions or complaints about privacy, or to request access or correction to your personal information, please submit a written request to us by mail or email at:
Attention: Privacy Officer
Complete Concussion Management Inc.
2655 Bristol Circle, Oakville, ON, Canada, L6H 7W1
Please note that if your request concerns your personal health information, we may refer you to your Primary Clinic.
Supplemental GDPR Privacy Statement
Complete Concussion Management Inc. (collectively “we”, “us”, “our”) is committed to protecting and respecting the privacy of our users and safeguarding personal data they provide to us in the course of accessing and using the services we provide.
Attn. Data Protection Officer
Complete Concussion Management Inc.
2655 Bristol Circle
Canada, L6H 7W1
Personal Data We May Collect & Why We Need It
We collect the following personal data for the following purposes:
|What is Collected and When||Why We Need the Information|
||In order to:
We may use your personal data in the following ways:
- To deliver our Services to you and allow you to participate in the interactive features of our Services, when you choose to do so;
- To provide information to your healthcare provider so that they may contact you to set up an appointment;
- To establish and manage your subscriptions/accounts with you;
- To ensure that content from our Services is presented in the most effective manner for you and for your computer and/or mobile device;
- To administer our Services and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- With your consent, to make suggestions and recommendations to you about goods or services that may interest you;
- To meet our legal obligations.
You do not have to provide any personal data to us. Use of our Services is purely voluntary. You maintain control over the personal information you have provided to us. Users who have created an account with us can change their permissions at any time by contacting firstname.lastname@example.org.
Automatically Collected Information
Each time you visit the website(s) or use the app, we automatically collect the following information:
(i) Technical information including: the Internet protocol (IP) address used to connect your computer and/or mobile device to the Internet; your username if you have created an account with us;
(ii) Information about your visit: services or pages you viewed; length of visits on certain pages; and methods used to browse away from the page
We do not use automated decision-making, including profiling, as referred to in Article 22(1) of the EU GDPR; that is, in a way that produces legal effects concerning you or significantly affects you.
Legal Basis of Processing
The legal basis for our processing of your personal data in connection with our Services is Article 6(1)(a) of the EU GDPR, which allows processing of personal data once you provide us with your consent. When you first sign up for an account on our website we request consent for the collection of your personal data in order to provide you with the Services and satisfy our obligations with respect to the other purposes listed in this Policy. You also have the right to withdraw consent at any time for the collection or storage of your data provided that CCMI does not need to process your personal data for legitimate reasons, such as to perform a contract or to comply with its legal obligations. These are dealt with on a case by case basis.
Disclosure of Your Personal Data
We may disclose your personal data in the following circumstances, as required or permitted by applicable law:
|Who Is It Given To?||Why?|
Our third-party business partners and service providers need to receive and process your information in order to help us provide you with our Services. Any transfers of your personal data to these entities is based on the European Commission’s decision in 2001 that Canada provides adequate protection of personal data or in compliance with the EU-U.S. Privacy Shield.
We also disclose aggregated de-identified data of our users to third parties:
|Who Is It Given To?||Why?|
This data does not constitute personal data because it cannot reasonably be used to identify you.
Links and Other Websites
Our Services may, from time to time, contain links to and from websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
CCMI does not process or store payment information. This is done through Stripe. Please check with their policy prior to submitting any personal data.
Safeguarding Your Personal Data
We use a variety of technological, physical and organisational protections and procedures to help protect your personal data from unauthorised access, use, or disclosure, such as encryption, passwords, and physical security measures. While we strive to protect your personal data, we cannot ensure or warrant that the personal data or private communications you transmit to us will always remain private. The transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Services; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to proactively prevent unauthorised access.
Your Rights to Your Personal Data
The EU GDPR provides you with a right to request access to the personal data we have collected from you, a right to request rectification of the data or that the data be erased, and a right to request that we restrict the processing of the personal data.
If you have created an account with us, consented to direct marketing emails or other data processing, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You have the right to lodge a complaint with a supervisory authority.
You also have the right to data portability. You have the right to receive your personal data which has been provided to CCMI and/or our partnered clinic facilities and have the ability to transmit those data to another controller.
You can exercise any of these rights by contacting us at email@example.com.
Additional Privacy Documentation
Complete Concussion Management is a private full-service concussion management organization that is committed to providing the highest level of concussion care around the world. CCMI understands the importance of and is committed to respecting privacy, safeguarding confidential information and ensuring the security of PHI within its custody or control. Click here to review how CCMI meets this commitment through its Privacy Program.
CCMI has also created this frequently asked questions (FAQs) document to give patients and their families information about the services and safeguards CCMI employs with respect to our web-based EMR system called the CCMI Concussion Database System.