Your Privacy

Privacy Policy & Personal Health Information

We are committed to protecting your personal health information. This document explains clearly how your data is collected, stored, protected, and used in our virtual practice.

Last updated: August 2026

Section 1

Introduction and Scope

This Privacy Policy applies to all virtual psychotherapy services, consultations, website visits, and digital communications provided by our practice. As a health information custodian under Ontario law, we follow strict legal and ethical guidelines to safeguard your personal health information.

Our obligations are governed by the Ontario Personal Health Information Protection Act (PHIPA) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA). We also follow the recordkeeping and confidentiality standards established by the College of Registered Psychotherapists of Ontario (CRPO).

Section 2

Personal Information We Collect

We collect only the information that is necessary to provide safe, effective care.

  • Contact Information: Your full legal name, email address, phone number, physical address, and emergency contact details.
  • Health and Clinical Records: Session notes, intake questionnaires, medical and psychological history, treatment goals, and relevant assessments.
  • Financial Data: Payment details, billing records, and official receipts generated for insurance reimbursement. We do not store raw credit card numbers on our local servers.
  • Website Data: Basic technical logs, browser types, and standard analytics used strictly to keep our website running smoothly.

Section 3

How We Use Your Information

We use your personal health information solely to provide safe, effective, and collaborative virtual psychotherapy care.

  • To manage scheduling, send automated appointment reminders, process session payments, and issue insurance receipts.
  • To maintain accurate clinical records and track your progress over time.
  • To meet professional regulatory obligations set by the College of Registered Psychotherapists of Ontario (CRPO).

Section 4

Confidentiality and Legal Exceptions

Everything you share with your therapist is strictly confidential. Your personal health information will never be sold, rented, or shared with third parties without your explicit written consent, except in specific situations required by Ontario law:

  • Clear risk of imminent serious physical harm to yourself or someone else.
  • Reasonable suspicion of abuse, neglect, or harm involving a child or youth under 16 years of age.
  • Reports of sexual abuse or professional misconduct by another regulated health professional.
  • A formal court order, subpoena, or search warrant issued by a legal authority.

Section 5

Secure Telehealth and Data Storage

  • Secure Video Platforms: All virtual sessions take place over encrypted, PHIPA and PIPEDA compliant video platforms designed specifically for medical and mental healthcare.
  • Electronic Health Records (EHR): Your clinical notes and intake files are stored in a secure, encrypted cloud record management system located within Canadian data centres.
  • Record Retention: In compliance with CRPO regulatory standards, adult client clinical records are securely retained for a minimum of 10 years following the last date of service. Records for clients who began therapy as minors are kept for 10 years after their 18th birthday.

Section 6

Your Rights and Access to Records

You have the right to request access to your personal health record at any time.

You have the right to request corrections to factual errors within your records.

You may withdraw your consent for future communication or care at any time, subject to legal record retention requirements.

Section 7

Privacy Officer Contact Information

If you have questions regarding this privacy policy, wish to access your health records, or want to raise a concern about how your information is handled, please contact our designated Privacy Officer:

  • Practice Name: Understory Psychotherapy
  • Privacy Officer: Rebecca Pinkhasov, Registered Psychotherapist
  • Direct Email: privacy@understorypsychotherapy.com

You may also contact the Information and Privacy Commissioner of Ontario (IPC) if you feel a privacy matter has not been resolved satisfactorily.

Book Your Free 15 Minute Call