Privacy Policy

Privacy Policy

MyCarePortal Privacy Policy 

Version Date: August 27, 2025 

1. Overview 

This privacy policy (Policy) sets out the information gathering and dissemination practices for the MyCarePortal (“MCP”). Your use of the MCP is governed by the terms of this Policy and the Terms of Use, and by using or accessing the MCP, you agree to be bound by this Policy.  

MCP is a program managed by London Health Sciences Centre (LHSC) in cooperation with the other hospitals in and around London who share an Electronic Medical Record System (EMR) (see the MCP website for a list of the participating hospitals). 

2. How the Health Information in MCP is Obtained 

The London and area hospitals that share an EMR are committed to safeguarding your privacy and the security of the information you entrust with us. Under PHIPA, each hospital is a Health Information Custodian (HIC) and has specific obligations with respect to the collection, use and disclosure of Personal Health Information (PHI) that is in their custody and control. Details about how each hospital manages your PHI can be found on their respective public websites. 

MCP is a web and app-based portal that allows users to access records in the shared EMR, which are made available by participating hospitals. MCP does not separately maintain or manage your PHI hosted within the shared EMR – that is each hospital’s role as a HIC. Also, the information available for you to view through MCP is not a comprehensive view of all data in the shared EMR. Information about the types of records that are available through MCP can be found on the MCP website. 

3. How Your Information is Collected and Used 

MCP collects certain information from you in the following ways:    

a)  Registration (Information directly supplied by you). MCP enrollment requires that you provide your contact information (such as your name and e-mail address) and demographic information (such as your date of birth, address, and health card information). This information is used for the following purposes: 

• To enroll (or unenroll) you as a MCP account holder, 

• To provide you with ongoing MCP Help Desk technical support,  

• Program planning, evaluation and other purposes that are permitted under law, and 

• To provide you with information on public health announcements, emergencies (e.g., medication recalls) and/or research opportunities.  

MCP uses your MCP Account (user name and password) to confirm your identity when you  sign into the portal. 

        b) IP Addresses (Server Log Information). An IP address is a number automatically assigned to your  computer whenever you access the Internet. All computer identification on the Internet is  conducted with IP addresses, which allow computers and servers to recognize and communicate  with each other. MCP collects IP addresses to conduct system administration and to conduct  web site analysis. MCP will also use IP addresses to identify any users who refuse to comply with  the Terms of Use Agreement, and to identify users who threaten the MCP service, web site,  users, clients or others. 

c)  Cookies and Web Analytics Tools. MCP places a text file called a “cookie” in the browser files of your computer. Cookies are pieces of information that a website transfers to an individual's hard disk for record-keeping purposes. MCP uses cookies during your online session, to secure your information and improve performance of MCP. These cookies do not contain any personal information. You may disable cookies in your browser but doing so will restrict your access to only public pages and you will no longer be able to access MCP. In addition to cookies, some web analytics tools used by MCP place a single-pixel GIF file on a computer as a tracking indicator. 

4. How Your Information is Shared and Disclosed 

We may provide your personal information to affiliates, subsidiaries, service providers (including service providers located in the United States), and trusted partners who work on our behalf and assist us with the operations of MCP. 

We may also provide information about you to respond to subpoenas, court orders or legal process, or to establish or exercise our legal rights or defend against legal claims. We believe it is necessary to share information in order to investigate, prevent or take legal action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of the Terms of Use, or as otherwise required by law. 

5. MCP and Your Privacy Rights  

All PHI available in MCP will be held in the strictest confidence by LHSC and any third parties who are contracted to support MCP operations. 

The PHI in MCP is password protected and only authorized personnel will have access to your information in MCP.  

Note that any restrictions you may have applied at any of the participating hospitals regarding access to your PHI (also known as Lockbox or Consent Directive) are not accepted or honored within MCP. 

If you are concerned about the accuracy or completeness of your PHI in MCP, please contact the Privacy Department at the hospital that is listed as having provided the health records in MCP.  

MCP creates and maintains a log of your accesses within the MCP and that activity, which includes what information was accessed and when, is made available to you within MCP (see the MCP website for more details). Should you have questions or concerns about the information in the Access Log within MCP, please contact the Oracle Health Consumer Support Centre at 1-800-390-0123, available 24/7.  

If you have any privacy-related questions or concerns about your PHI available through the MCP, please contact the Privacy Office at the hospital where you received your health care.  

6. Unenrollment from MCP 

If you no longer wish to receive communications from or use MCP, please request unenrollment by filling out this form: MyCarePortal Unenrollment Form. 

The restrictions imposed on you with respect to material downloaded from MCP, and the disclaimers and limitations of liabilities defined in this Agreement, shall survive any discontinuance or termination of MCP or this Privacy Policy.    

7. Children's Privacy Protection 

MCP is not designed for nor targeted at children.  

8. Questions About MCP 

If you have any questions or suggestions about how we treat personal information, please contact the MCP Support Team at mycareportal@lhsc.on.ca. 

9. Changes to this Privacy Policy 

You are responsible for regularly reviewing this Policy. We display an effective date on the policy above so that it will be easier for you to know when there has been a change. Your continued use of MCP constitutes your acceptance of the revised terms. While we will make reasonable efforts to notify you of material  changes to this Privacy Policy, small changes or changes that do not significantly affect individual privacy interests may be made at any time and without prior notice.