Privacy and Personal Information Protection Policy

Effective As of: October 9, 2025
Last updated : June 10, 2026

RadX Clinics (hereinafter “RadX”, “we”, “our”, or “us”) recognize the importance of protecting the privacy and security of the personal and medical information entrusted to us.

This Policy is intended to inform patients, website visitors, employees, healthcare professionals, and partners about how RadX collects, uses, discloses, retains, and protects personal information in accordance with applicable laws in Québec.

1. Personal Information Collected
As part of its activities, RadX may collect various types of personal information, including:

• First and last name;
• Date of birth;
• Health insurance number;
• Contact information (address, telephone number, email address);
• Health information required to perform medical imaging examinations;
• Administrative and financial information required for billing or claims processing;
• Information provided through communications with the clinic or through the website.

RadX limits the collection of personal information to what is necessary for the provision of its services and compliance with its legal and professional obligations.

2. Use of Personal Information
Personal information is used solely for the following purposes:

• Scheduling, performing, and following up on examinations and services provided;
• Communicating with patients regarding appointments or their medical records;
• Transmitting results to authorized healthcare professionals;
• Complying with legal, regulatory, and professional obligations;
• Ensuring the quality, safety, and continuous improvement of services;
• Managing the clinic’s administrative and financial activities.

Personal information is never sold or used for unauthorized commercial purposes.

3. Consent
RadX collects and uses personal information with the consent of the individual concerned, except where otherwise authorized or required by law.

Consent may be obtained verbally, electronically, or in writing, depending on the context and the nature of the information involved.

4. Disclosure of Personal Information
Personal information may be disclosed when required for the provision of care or when permitted or required by law.

Depending on the circumstances, personal information may be disclosed to:

• Referring physicians;
• Radiologists and other healthcare professionals involved in patient care;
• The Régie de l’assurance maladie du Québec (RAMQ);
• The Québec Breast Cancer Screening Program (PQDCS), where applicable;
• Authorized healthcare systems such as the DSQ or other authorized government platforms;
• Technology and information service providers acting on behalf of RadX;
• Government authorities when required by law.

When personal information is disclosed to a service provider, RadX ensures that appropriate confidentiality and security measures are in place.

Compliance with Québec Law 25

RadX is committed to complying with Québec’s Law 25 , which modernizes privacy legislation and strengthens the protection of personal information in the private sector. In accordance with Law 25, we ensure the following:

• Consent: We obtain your explicit consent before collecting or using your personal information, except where otherwise permitted or required by law.
• Data Minimization: We collect only the personal information needed to provide our services and make sure it is used only for the purposes it was collected for.
• Transparency: We clearly inform you about how your personal information will be used and who may have access to it, including service providers and business partners.
• Security Measures: We implement appropriate security measures to protect your personal information in accordance with the requirements of Québec's Law 25.
• Access and Correction Rights: You have the right to access your personal information and request corrections if any of that information is inaccurate or incomplete.
• Data Protection Officer: We have designated a Data Protection Officer to make sure we follow Bill 25 and to answer any questions or concerns you may have about your personal information.

To exercise any of these rights or for any other questions regarding compliance with Québec's Law 25, please contact our Privacy Officer at David Tobaly, privacy-policy@radx.ca

5. Protection and Security of Personal Information
RadX implements appropriate administrative, physical, and technological safeguards to protect personal information against:

• Unauthorized access;
• Loss;
• Theft;
• Accidental disclosure;
• Alteration;
• Unauthorized destruction;
• Any improper use.

These safeguards are reviewed periodically to ensure a level of protection appropriate to evolving risks and technologies.

6. Privacy Incident Reporting and Management
RadX takes very seriously any incident that may compromise the confidentiality, integrity, or security of personal information.

When a privacy incident is reported or detected, RadX promptly assesses the situation in order to:

• Limit its consequences;
• Assess the risk of harm;
• Implement appropriate corrective measures;
• Notify affected individuals when required;
• Comply with obligations under applicable laws.

RadX promotes a culture of prevention, transparency, and continuous improvement to protect the personal information entrusted to it.

7. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to improve your experience. Cookies are small files stored on your device. You can control or disable them in your browser settings, but doing so may impact how our website functions.

8. Data Security
We take reasonable precautions to protect your personal information from unauthorized access, modification, or disclosure. Our website is secured using industry-standard security protocols, and we regularly review our practices to maintain the security of your information.

9. Your Rights
Depending on your jurisdiction, you may have the right to:

• View, update, or delete your personal information
• Object to the processing of your information;
• Withdraw your consent at any time regarding the use of your information;
• File a complaint with a privacy or data protection authority.

To exercise these rights, please contact: David Tobaly, privacy-policy@radx.ca

10. Third-Party Links
Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites, and we are not responsible for their content or privacy practices.

11. Changes to This Privacy Policy
We may occasionally update this Privacy Policy. Any changes will be posted on this page, with the date of the latest update shown at the top. We recommend checking this policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or how we manage your personal information, please reach out to us at the following address:

RadX
5300 Chem. de la Côte-des-Neiges Suite 600, Montréal, QC H3T 1Y4
privacy-policy@radx.ca
514-738-5306