This system is the operating platform of the care home operator (the “Operator”). It holds personal health information of residents protected under The Health Information Protection Act (Saskatchewan) and personal information protected under PIPEDA. Access is restricted to authorized users for the purposes of providing and administering resident care and operating the homes.

All data entered into or generated by this system — including messages, records, documents, and files — belongs to the Operator. The Operator may access, review, and disclose system content as required for care, compliance, audits, and lawful requests. Nothing in the system should be treated as private to the individual user.

Users access only the information needed for their duties; use their own account; keep credentials private; sign out on shared devices; and never copy, photograph, email, or otherwise share records — including signed PDFs — outside the system. Every action is recorded in an audit trail attributed to the signed-in account.

The system enforces two-factor authentication, automatic session expiry (15 minutes of inactivity; 5 minutes on shared community devices), Canadian data residency, role-based access, encryption of sensitive fields at rest, and comprehensive audit logging. Users must not attempt to bypass these controls.

The Operator designates Waqas as Privacy Officer, responsible for privacy compliance, access reviews, and breach response. Suspected privacy breaches — lost devices, wrong recipient, unauthorized access — must be reported to the Privacy Officer immediately at hello@prairiefalconseniorliving.ca.

Misuse of the system or of the information in it may result in access revocation, discipline up to termination, and reporting to regulators or law enforcement where required.