PIPEDA, PHIPA and CASL in plain language
Security & privacy
Clinics trust us with the names and numbers of the people they care for. Here is exactly how that information is handled, and only what the product does today.
Collect less
Review outreach only needs a way to say thank you and ask how it went.
- Minimal client data
- A name, a phone number or an email, and the rating they choose to give. No health records, diagnoses or treatment notes.
- Not a medical record
- Staff notes carry a reminder not to record clinical details, and public replies are checked for wording that could confirm someone is a patient.
- Automatic retention
- Inactive client records, old conversations and appointments are removed on a schedule you set. Feedback and request history is anonymized.
Control access
Each person sees only what their job needs, at their own location.
- Roles per location
- Owner, manager, reception and marketing roles. Marketing staff never see client contact details, private feedback or messages.
- No privilege creep
- Nobody can give another person a role higher than their own, and every location's data is kept separate.
- Protected sign-in
- Passwords are stored as salted scrypt hashes, sessions are signed, and repeated sign-in or reset attempts are rate-limited.
Protect and record
Keys are sealed, traffic is encrypted, and important actions leave a trail.
- Encrypted provider keys
- Twilio, email and Google credentials are sealed with AES-256-GCM before they're stored.
- Encrypted in transit
- All traffic uses HTTPS with HSTS, and pages can't be framed by other sites except the widgets you embed.
- Audit log
- Changes, data exports and privacy actions are logged with who did them and when.
Respect the people you contact
Built around Canadian privacy and anti-spam rules.
- Access and erasure (PIPEDA)
- Look up everything held about one person by phone or email, export it as a file, or erase it. Each request is recorded.
- Unsubscribes (CASL)
- Unsubscribe links in every email, STOP and ARRÊT replies for texts, a do-not-contact list, and a re-ask cooldown.
- Fair to every reviewer
- Every client can post a public review whatever they rate — no review gating, in line with Google's policies.
Where data lives
WESN Reviews can be hosted with a database in a Canadian region. Your clinic remains the custodian of client information and decides on consent wording, retention and who on your team has access. Questions from your privacy officer are welcome.