How your personal health information is collected, used, protected, and retained under New Brunswick law.
Draft for review. This policy is built from the May 2026 audit's PHIPAA + CMTNB compliance research. Before the site goes live, Mathieu should review it and confirm the specifics, the retention period, the exact list of vendors that handle client data, and the contact details for access requests.
Effective date: August 1, 2026
Mathieu Boudreau, RMT is the custodian of your personal health information under New Brunswick's Personal Health Information Privacy and Access Act (PHIPAA). The clinic follows PHIPAA and any applicable federal privacy requirements, including PIPEDA, where it applies. This policy explains what information is collected, how it is used and protected, how long it is retained, and your rights regarding that information.
To provide safe and effective treatment, we collect your name and contact information, relevant medical and health history, the conditions you're seeking treatment for, treatment notes, and payment and insurance information.
We collect, use, and disclose personal and health information only as necessary to provide your care, administer your appointments, process payments, and meet legal and regulatory obligations. In practice that means delivering massage therapy, scheduling appointments, billing and direct-billing to your insurer (where you've authorized it), and any reporting required by the College of Massage Therapists of New Brunswick (CMTNB). Personal information may also be used to process direct-billing claims and communicate with insurance providers where authorized by the client. It is never sold or used for unrelated purposes.
Client health records are retained for a minimum of 16 years from the client's last visit. If the client was under 19 at the time of their last visit, the record is retained for 16 years after the date they turn, or would have turned, 19. This means the record is kept until at least age 35.
After the required retention period, records are securely destroyed in accordance with applicable privacy and professional requirements.
To operate the clinic, Mathieu uses third-party service providers that may process information on the clinic's behalf. These services support booking, clinical documentation, appointment communication, payments, direct billing, email, and website messaging.
Mathieu remains responsible for personal health information under his custody and selects providers with contractual privacy and security protections appropriate to the information they handle.
By contacting us through this site or booking an appointment, you consent to your information being processed by these providers for the purposes described above.
Some service providers may process or store information outside Canada. Information processed in another country may be subject to the laws and lawful access procedures of that country.
Payment information is processed through secure third-party providers, and the clinic does not store full credit-card information directly.
Email and online messages are convenient but cannot be guaranteed fully secure. Please avoid including detailed health information in email, and let us know if you'd prefer another way to share anything sensitive.
Under PHIPAA you have the right to:
To exercise these rights, contact the clinic using the details below.
Mathieu Boudreau, RMT
126 Halifax Street, Unit 6
Moncton, NB E1C 0N4
info@mathieuboudreaurmt.com
If your personal health information is stolen, lost, or disclosed without authorization in a way that may harm you, we will notify you and, where required, Ombud NB.
First contact Mathieu at info@mathieuboudreaurmt.com.
If your concern is not resolved, you may contact Ombud NB, which handles complaints under New Brunswick privacy legislation.
Toll-free: 1-888-465-1100
See also: Cancellation Policy · Terms & Conditions