Privacy Policy

1. Introduction

This Privacy Policy explains how BlossomEd Counselling (“the Practice,” “we,” “our,” or “us”) collects, uses, stores, discloses, and protects personal information and personal health information in accordance with applicable laws in Ontario and Canada, including:

The Personal Health Information Protection Act, 2004 (PHIPA)
The Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable
Standards and guidelines established by the College of Registered Psychotherapists of Ontario (CRPO)

Protecting your privacy and maintaining the confidentiality of your personal information are fundamental to our therapeutic relationship.

2. Personal Information We Collect

We may collect the following information:

Personal Information

Full name
Date of birth
Address
Telephone number
Email address
Emergency contact information
Payment and billing information

Personal Health Information

Mental health history
Medical history relevant to treatment
Clinical notes and assessments
Treatment plans
Session records
Information shared during therapy sessions
Referral information from healthcare providers

Website and Electronic Information

If you use our website or electronic systems, we may collect:

IP address
Browser type
Device information
Website usage data through cookies or analytics tools
Information submitted through online forms

3. Purpose of Collection

We collect personal and personal health information for the following purposes:

Providing psychotherapy and related services
Assessing and planning treatment
Maintaining clinical records
Communicating with clients
Scheduling appointments and sending reminders
Processing payments and insurance claims
Complying with legal and regulatory obligations
Improving our services and website functionality

We collect only the information reasonably necessary for these purposes.

4. Consent

Your consent is required for the collection, use, and disclosure of your personal health information, except where permitted or required by law.

Consent may be:

Express (written or verbal)
Implied through your participation in services

You may withdraw consent at any time, subject to legal or professional obligations. Withdrawal of consent may affect our ability to provide services.

5. Confidentiality and Disclosure of Information

Your information is kept confidential except in the following circumstances:

With Your Consent

We may disclose information:

To other healthcare professionals involved in your care
To insurance providers for claims processing
To family members or others authorized by you

Without Your Consent

We may disclose information where required or permitted by law, including:

If there is a risk of serious bodily harm to yourself or another person
If there are concerns regarding the abuse or neglect of a child
If records are subpoenaed or ordered by a court
If disclosure is required for regulatory or legal investigations
If required by public health authorities or other legislation

6. Electronic Communication and Virtual Services

If services are provided electronically (e.g., email, phone, video conferencing), reasonable safeguards are used to protect your information.

However, electronic communication carries some risks, including unauthorized access, interception, or technical failure. By participating in virtual services or communicating electronically, you acknowledge and accept these risks.

Clients are encouraged to:

Use private internet connections
Protect their devices with passwords and antivirus software
Avoid sharing sensitive information through unsecured channels

7. Storage and Security of Information

We take reasonable administrative, physical, and technical measures to safeguard personal information and personal health information against:

Unauthorized access
Loss or theft
Misuse
Disclosure
Alteration or destruction

Safeguards may include:

Password-protected electronic systems
Encryption where appropriate
Secure storage of paper records
Limited access to records
Confidentiality agreements with service providers

8. Retention of Records

Client records are retained in accordance with legal, regulatory, and professional requirements.

In Ontario, psychotherapy records are generally retained for at least:

10 years from the date of the last client contact
For minors, 10 years after the client reaches age 18

After the retention period, records are securely destroyed or permanently anonymized.

9. Access and Correction Requests

You have the right to request access to your personal information and personal health information, subject to limited legal exceptions.
You may also request corrections to inaccurate or incomplete information.
Requests should be submitted in writing to the contact person listed below.

10. Website Cookies and Analytics

Our website may use cookies or analytics tools to improve functionality and user experience.
Cookies are small files stored on your device that help websites recognize users and remember preferences.
You may disable cookies through your browser settings, although some website features may not function properly.

11. Third-Party Service Providers

We may use third-party providers for services such as:

Electronic health record systems
Appointment scheduling
Secure video conferencing
Payment processing
Website hosting
Email communication

These providers may have access to personal information only as necessary to perform services on our behalf and are expected to maintain appropriate privacy and security standards.

12. Cross-Border Data Storage

Some electronic service providers may store or process information outside Ontario or Canada.

Where this occurs, information may be subject to the laws of the jurisdiction in which it is stored.

We make reasonable efforts to work with providers that maintain appropriate safeguards for personal information.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in legal requirements, technology, or professional practices.

The most current version will be made available upon request and posted on our website where applicable.