top of page

PRIVACY POLICY

PRIVACY POLICY

Effective Date: [Insert Date]

 

1. INTRODUCTION

This Privacy Policy ("Policy") describes how [Clinic Name] ("we," "us," or "our") collects, uses, discloses, and protects personal information when you use our website and online psychotherapy services within Canada. Our privacy practices comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including but not limited to Ontario’s Personal Health Information Protection Act (PHIPA) and Alberta’s Health Information Act (HIA).

By accessing or using our services, you agree to the collection and use of your personal information in accordance with this Policy.

 

2. INFORMATION WE COLLECT

We collect personal information that is necessary for providing psychotherapy services, ensuring compliance with legal obligations, and improving our services. This includes:

 

a) Personal Information Provided by You:

  • Full name, date of birth, and contact information (email, phone number, address)

  • Emergency contact details

  • Medical and mental health history, treatment notes, and appointment records

  • Payment and billing information (if applicable)

  • Insurance provider details (if applicable)

  • Comments, feedback, reviews, and direct communication with our clinic

 

b) Automatically Collected Information:

  • Internet Protocol (IP) address

  • Browser type and operating system

  • Website usage data through cookies, tracking pixels, and analytics tools

  • Communication logs when you contact our clinic via email or chat

  • Session information, including page response times and visit duration

 

3. HOW WE COLLECT INFORMATION

We collect personal information through the following methods:

  • When you submit information via contact forms, appointment requests, or direct communication with our clinic

  • When you schedule an appointment for psychotherapy services

  • When you process payments through our secure platform

  • When you subscribe to newsletters or opt into updates

  • Through automated tracking tools such as cookies and analytics services

 

4. PURPOSE OF DATA COLLECTION

We collect and process your personal information for the following purposes:

  • To provide psychotherapy services, including online therapy sessions

  • To schedule, confirm, and manage appointments

  • To assess treatment progress and maintain accurate clinical records

  • To process payments, issue invoices, and manage insurance claims

  • To provide technical and customer support

  • To comply with legal and regulatory obligations under Canadian privacy and healthcare laws

  • To prevent unauthorized access, fraud, and misuse of services

  • To improve the functionality and security of our website and services

​

5. HOW WE STORE, USE, SHARE, AND DISCLOSE PERSONAL INFORMATION

  • Our company is hosted on a secure platform that allows us to offer online psychotherapy services.

  • Your data may be stored through our secure data storage, databases, and the general platform we use for operations.

  • Data is stored securely on encrypted servers behind a firewall.

  • Payment transactions adhere to PCI-DSS standards to ensure the secure handling of credit card information.

  • We will never sell or share your personal information without consent, except as required by law.

 

6. DISCLOSURE OF PERSONAL INFORMATION

We do not sell or share personal information except as required or permitted by law. Your information may be disclosed in the following situations:

  • With Your Consent: We may disclose your personal information if you provide explicit consent.

  • Legal and Regulatory Compliance: If required by a court order, subpoena, or regulatory authority, we may disclose personal information in accordance with applicable laws.

  • Duty to Report: If there is an immediate risk of harm to yourself or others, we are legally required to notify appropriate authorities.

  • Third-Party Service Providers: Your information may be shared with secure third-party vendors for payment processing, encrypted data storage, or secure telehealth video conferencing (e.g., Zoom for Healthcare, JaneApp, or OWL Practice). All vendors are required to comply with Canadian privacy laws.

 

7. DATA SECURITY MEASURES

We implement strict security protocols to protect your personal information, including:

  • Secure, encrypted electronic health record (EHR) storage

  • SSL encryption for data transmission

  • Restricted access to authorized personnel only

  • Routine security audits and risk assessments

  • Data backup systems to prevent loss or unauthorized modifications

 

8. RETENTION AND DESTRUCTION OF RECORDS

We retain psychotherapy records in compliance with Canadian healthcare laws:

  • Records are kept for at least 10 years after the last treatment session (or as required by provincial guidelines).

  • For minors, records are retained 10 years past the age of majority (typically age 18 or 19, depending on the province).

  • After the required retention period, records are securely destroyed or anonymized.

​

9. CLIENT RIGHTS UNDER PIPEDA

Under PIPEDA, you have the following rights:

  • Access Your Records: You may request a copy of your personal information.

  • Correction of Information: If any information is inaccurate or incomplete, you have the right to request corrections.

  • Withdraw Consent: You may withdraw consent for the collection or use of your information, subject to legal and professional obligations.

  • Request Deletion: You may request deletion of your personal data where permitted by law.

To exercise your rights, submit a written request to [Insert Contact Email].

 

10. COOKIES AND WEBSITE TRACKING

Our website may use cookies and analytics tools to enhance user experience. These tools collect non-identifiable information about website usage patterns. Third-party services, such as Google Analytics, may place cookies or use other tracking technologies. As these are external services, their data collection policies are not covered under this Privacy Policy.

You may disable cookies in your browser settings if you prefer.

 

11. COMMUNICATION WITH USERS

We may contact you for the following purposes:

  • Appointment confirmations and reminders

  • Account troubleshooting and support

  • Updates regarding our services, policies, or legal obligations

  • Marketing promotions (only with your consent)

  • Surveys or feedback requests

If you no longer wish to receive communications, you can opt out by contacting us at [Insert Email].

 

12. HOW TO WITHDRAW CONSENT

If you no longer wish for us to collect or process your personal data, you may withdraw your consent by contacting us at:

[Insert Contact Email] or mailing us at [Clinic Address].

​

13. CHANGES TO THIS POLICY

We reserve the right to modify this Privacy Policy at any time. Changes and clarifications will take effect immediately upon posting on our website. If we make material changes, we will notify you here so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

​

14. CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact:

[Clinic Name]
[Clinic Address]
[Phone Number]
[Email Address]

By using our services, you acknowledge and consent to the terms of this Privacy Policy.

bottom of page