Privacy Policy
Last Updated: August 4, 2026
This Privacy Policy explains how this practice collects, uses, protects, and discloses personal information and Personal Health Information (PHI) in accordance with the Personal Health Information Protection Act, 2004 (PHIPA). The practice operates in Ontario, Canada.
Information Collected
The practice collects only the information required to provide psychotherapy services. This includes your name, contact information, date of birth, Personal Health Information related to mental health concerns, session notes, treatment plans, emergency contact details, and billing information. Information submitted through the website contact form is also collected.
How Information Is Used
Information is used to provide psychotherapy services, maintain clinical records, communicate with you, schedule appointments, manage billing, and meet regulatory requirements. Information is not used for marketing.
Consent
By engaging in psychotherapy services, you provide implied consent for the collection and use of your information for treatment. You may withdraw or limit consent at any time unless disclosure is required by law.
Disclosure Without Consent
PHIPA permits or requires disclosure without consent in situations involving risk of serious harm, child protection concerns, court orders, legal requirements, regulatory investigations, or lawful audits. Only the minimum necessary information is disclosed.
Safeguards
The practice uses administrative, physical, and technical safeguards to protect your information. These include secure digital records, password‑protected devices, encrypted communication where possible, locked storage for physical files, and limited access for authorized personnel.
Record Retention
Records are retained for ten years after the last appointment. Records for minors are retained for ten years after the client turns eighteen. Records are securely destroyed when the retention period ends.
Your Rights
You have the right to access your records, request corrections, obtain copies, and request restrictions on how your information is shared. Requests must be made in writing.
Electronic Communication
Electronic communication such as email, text messaging, or telehealth involves privacy risks. By communicating electronically, you acknowledge these risks. Secure platforms are used whenever possible.
Website Privacy
Website contact forms may collect your name, email, and message. Basic analytics may collect non‑identifying information. Cookies may be used to improve functionality. No Personal Health Information is stored in cookies.
Third‑Party Service Providers
The practice may use service providers for practice management, telehealth, secure email, cloud storage, or payment processing. These providers must meet Canadian privacy standards.
Contact
For questions or concerns about privacy practices, contact:
Privacy Officer Susan Alexander
London, Ontario, Canada
(519) 200 5763
Email: thinlinetraining@gmail.com
If concerns are not resolved, you may contact the Information and Privacy Commissioner of Ontario at ipc.on.ca or 1‑800‑387‑0073.