Privacy policy: how The Spine Page handles personal information
This policy explains what personal information may be collected when you use The Spine Page, why it is used, who may process it, how long it is retained, and how you may exercise your privacy rights.
The Spine Page is a bilingual educational publication about spinal health. It is not a clinic and its general contact mechanisms are not intended for medical records, imaging files, treatment requests or emergency information.
1. Scope and responsibility
This policy applies to personal information collected through www.thespinepage.com, including its English and French pages, contact mechanisms, technical logs, consent tools and website features. It does not govern independent websites reached through external links.
A personal information item is information about an identifiable individual. Depending on context, this may include direct identifiers such as a name or email address and technical information that can reasonably be linked to an individual.
Privacy Officer
Title: Privacy Officer, The Spine Page
The Privacy Officer oversees questions, access and correction requests, privacy complaints and the application of this policy.
2. Information that may be collected
The categories below describe information that may be collected according to the page used, the features enabled and the choices made by the visitor.
| Category | Examples | How it is collected |
|---|---|---|
| Contact information | Name, email address and any other contact detail voluntarily included in a message | Contact form or direct correspondence |
| Message content | Editorial question, broken-link report, correction request, source suggestion or privacy request | Information entered by the visitor |
| Technical and usage data | IP address, browser type, device type, operating system, referral page, visited pages, date and time | Server logs, security tools and, when enabled, analytics tools |
| Consent and preference data | Language, cookie preferences, consent status and time of choice | Consent-management or preference tools |
| Security information | Failed access attempts, suspicious requests, firewall events and identifiers used to prevent abuse | Hosting, content-delivery and website-security services |
| External-service data | Information generated when a visitor activates an embedded video, map, social feature or external link | The independent third-party service involved |
3. Why information is used
Respond to messages
Answer editorial questions, receive source suggestions, correct errors and process privacy requests.
Operate the website
Deliver pages, remember necessary preferences, maintain language functions and diagnose technical problems.
Protect the website
Detect abuse, malicious traffic, unauthorized access, spam and other security events.
Measure performance
Understand aggregated traffic and improve navigation when optional analytics have been enabled appropriately.
Meet legal obligations
Maintain records required to respond to complaints, incidents, lawful requests or compliance obligations.
Manage consent
Record and respect choices about optional cookies, analytics and embedded third-party content.
Personal information is not used for an unrelated purpose unless additional consent is obtained or the use is otherwise permitted or required by law.
4. Cookies and similar technologies
Cookies are small files or identifiers stored or read when a website is used. The Spine Page may use different categories of cookies and similar technologies depending on the page, installed services and the visitor’s choices.
- Strictly necessary technologies: support core website operation, security, load management, language selection and storage of consent choices.
- Analytics technologies: may measure visits, navigation and performance in aggregated or pseudonymous form when enabled and permitted.
- Embedded-content technologies: may be activated when a visitor loads or interacts with content supplied by an external provider, such as a video.
- Referral or affiliate identifiers: may identify that a visitor followed a disclosed external or affiliate link, when such a link is used.
Where consent is required, non-essential technologies should not be activated before the visitor has had an opportunity to make a clear choice. Visitors may withdraw or modify consent through the available preference mechanism. Browser settings may also block or delete cookies, although some necessary functions may then operate differently.
5. People and service providers that may have access
Access is limited to people who need information for the purposes described in this policy. Depending on the service used, information may also be processed by providers acting for the website.
| Recipient or provider category | Purpose | Information involved |
|---|---|---|
| Website administration | Respond to requests, manage content and administer privacy rights | Contact details, messages and request records |
| Hosting and database providers | Store and deliver the website | Website data, technical logs and backups |
| Content-delivery and security providers | Improve availability, filter malicious traffic and investigate incidents | IP addresses, device and request information, security events |
| Form and email providers | Transmit and manage messages | Name, email address, message and delivery metadata |
| Analytics and consent providers | Measure performance and store visitor choices when enabled | Usage, device, cookie and consent information |
| Professional advisers or authorities | Obtain legal, security or compliance assistance or respond to a lawful requirement | Only information reasonably necessary in the circumstances |
Service providers are expected to process information only for authorized purposes and to apply appropriate safeguards. They may operate in Québec, elsewhere in Canada or in another country. When personal information is communicated outside Québec, applicable privacy requirements and appropriate contractual or organizational safeguards are considered.
6. Contact messages and health information
The Spine Page is an educational blog. Its contact form is intended for editorial comments, technical problems, accessibility concerns, source suggestions and privacy requests. It is not designed to create a patient file or provide individualized health advice.
Appropriate messages
Broken links, factual corrections, translation comments, source suggestions and website questions.
Information to avoid
Medical imaging, diagnostic reports, insurance records, dates of treatment and identifiable patient histories.
Urgent situations
Do not use the site for emergencies. Contact emergency services or an appropriate healthcare provider.
If sensitive health information is submitted without being requested, it may be used only as reasonably necessary to understand and redirect the message, protect safety, comply with law or delete the information according to applicable obligations.
7. Retention, destruction and anonymization
Personal information is retained only for as long as reasonably necessary for the identified purpose, to maintain security, to resolve a request or complaint, or to satisfy applicable legal obligations. Retention periods vary according to the type of information and the reason it is held.
- Contact messages are retained for the time needed to answer, follow up and document the resolution.
- Security logs are retained for a limited period appropriate to detecting abuse and investigating incidents.
- Consent records may be retained to demonstrate and respect the visitor’s choices.
- Analytics information, when enabled, is subject to the settings and retention controls of the configured tool.
- Information related to a complaint or legal requirement may be retained for the period needed to protect rights and meet obligations.
At the end of the applicable retention period, information is securely destroyed or, where permitted and technically appropriate, anonymized so that it can no longer identify an individual.
8. Security and confidentiality incidents
Reasonable administrative, technical and physical safeguards are used according to the sensitivity, amount, purpose, format and location of the information. These safeguards may include access controls, strong authentication, secure hosting, encryption in transit, firewalls, malware protection, backups, software updates and restricted administrative access.
No security method can eliminate every risk. When a confidentiality incident is discovered, the site operator may take steps to contain it, investigate what occurred, reduce possible harm, correct weaknesses and document the incident. Where the law requires it, the appropriate privacy authority and affected individuals will be notified.
9. Your privacy rights
Subject to applicable law and any authorized exceptions, a person may request information about the personal information held about them and how it has been handled.
Access
Ask whether personal information is held and request access to it in an intelligible form.
Correction
Request correction of information that is inaccurate, incomplete or equivocal.
Withdrawal of consent
Withdraw consent for an optional use, subject to legal or operational limits and consequences explained at the time of the request.
Portability
Where applicable, request eligible computerized information collected from you in a structured, commonly used technological format.
Complaint
Raise a concern about privacy practices and receive information about the complaint process.
Dissemination and indexing
Where the legal conditions are met, request cessation of dissemination or de-indexing of certain personal information.
The site does not currently make decisions about visitors based exclusively on automated processing of their personal information. If that practice changes, the policy and the required notices will be updated.
Reasonable identity verification may be requested before responding to an access, correction or portability request. Only the information necessary to verify and process the request should be collected.
10. Children and minors
The Spine Page is intended for a general adult audience and does not knowingly seek personal information from children under 14 through its contact mechanisms. A child under 14 should not submit personal information without the consent of a parent or legal guardian, except where permitted by law.
If information from a child appears to have been collected unintentionally, a parent or guardian may contact the Privacy Officer so that the situation can be assessed and appropriate action taken.
11. External links, embedded content and independent websites
Some pages link to independent websites, including scientific organizations, professional resources, specialized health information and clinics. Embedded videos, maps or other third-party content may communicate technical information to the external provider when the visitor chooses to load or use that feature.
The Spine Page does not control the privacy, cookies, security or content practices of independent websites. Review the privacy information supplied by the destination service before providing personal information.
Medical disclaimer
Understand the limits of the educational health information published on the site.
Frequently asked questions about privacy
Does The Spine Page sell personal information?
No. The Spine Page does not sell or rent visitors’ personal information.
Does the contact form create a patient record?
No. The site is an educational publication, and the general contact form is not intended for diagnosis, treatment or clinical records.
Should I send an MRI or medical report?
No. Do not send imaging, clinical reports or identifiable health records through the general website form.
Can I refuse optional cookies?
Where optional technologies are used and consent is required, the available preference mechanism should allow you to accept, refuse or later change your choice.
Are necessary cookies optional?
Some technologies are required to deliver, secure or remember essential website functions. Blocking them may affect how the site works.
Can service providers process information outside Québec?
Yes, depending on the provider and infrastructure. Applicable assessments, agreements and safeguards are considered where required.
How can I request access or correction?
Use the privacy contact section and clearly describe the information and request. Reasonable identity verification may be required.
Can I withdraw consent?
You may withdraw consent for an optional use, subject to legal or operational limits. Withdrawal does not normally invalidate processing that was lawful before the change.
How long is personal information retained?
Only for as long as reasonably necessary for the stated purpose, security, complaint handling or applicable legal obligations.
Can I complain to a privacy authority?
Yes. You may first contact the Privacy Officer. You may also contact the Commission d’accès à l’information du Québec or, where applicable, the Office of the Privacy Commissioner of Canada.
Contact the Privacy Officer
Use this section to ask a question about this policy, request access or correction, withdraw an optional consent, report a privacy concern or submit a complaint.
Privacy Officer: Privacy Officer, The Spine Page
Submit a privacy request
To request access or correction, withdraw an optional consent, report a privacy concern or submit a complaint, use the website contact form and clearly indicate that your message concerns privacy.
Official privacy references
- Commission d’accès à l’information du Québec — Guide for drafting a privacy policy
- Québec — Act respecting the protection of personal information in the private sector
- Office of the Privacy Commissioner of Canada — PIPEDA requirements in brief
- Government of Canada — Canada’s anti-spam legislation
Effective date: August 3, 2026. Last substantive update: August 3, 2026.
Understand your choices before submitting information
Use the contact mechanism only for the information necessary to your request, and review the site’s terms and medical disclaimer for the limits of this educational publication.
The Spine Page — Privacy Officer