Privacy Policy

Privacy Policy

1. Introduction

I take your privacy and the confidentiality of your personal information seriously. This Privacy Policy explains how I collect, use, disclose, store, and protect personal information through my website and in connection with the psychological services I provide. By accessing this website or receiving services from me, you consent to the practices described in this policy.

This policy is developed in accordance with applicable provincial and federal privacy laws, including the Personal Health Information Protection Act, 2004 (PHIPA) and the Personal Information Protection and Electronic Documents Act (PIPEDA).

2. What Information I Collect

I collect only the personal information necessary to provide services and administer my practice, including:

• Information you directly provide:

• Contact details (e.g., name, email address, telephone number)

• Details entered in contact or intake forms

• Clinical information provided during intake and treatment

• Automatic technical information collected through the website:

• IP addresses and browser information via Wix analytics and cookies

This information may include personal health information when collected in the context of clinical services. Personal health information is protected under PHIPA.

3. How I Use Your Information

I use your personal information for the following purposes:

• Responding to your inquiries

• Booking, scheduling, and managing appointments

• Providing assessment and treatment services

• Storing and managing clinical records

• Communicating with you securely via email (Hushmail)

I do not sell or rent your personal information.

4. Use of Third‑Party Service Providers

I use the following third-party platforms for secure practice management and communication. These platforms have their own privacy and security measures, but I remain responsible for safeguarding your personal health information under applicable law.

• Jane (Practice Management)
I use Jane to manage clinical records, scheduling, billing, and secure documentation. Jane is designed to support compliance with privacy obligations for healthcare practices. (jane.app)

• Hushmail (Secure Email)
I use Hushmail to send and receive encrypted email communications that may contain personal and health information, ensuring secure transmission where appropriate. (hushmail.com)

• Wix (Website Hosting & Forms)
This website is hosted on Wix. Wix may collect technical information about visitors through analytics and cookies. Information entered in website forms is controlled by me and is used only for the purposes described in this policy. (wix.com)

5. Cookies and Tracking

I may use cookies and similar technologies to enhance website functionality and analyze usage. You may disable cookies in your browser settings; however, some website features may not function properly without them.

6. Disclosure of Personal Information

I will not disclose your personal information except:

• With your consent

• To comply with legal or regulatory requirements

• For purposes related to treatment, payment, or healthcare operations

• As required by a court order or subpoena

Any disclosure without consent is only done when legally authorized or required.

7. Data Retention and Secure Disposal

I retain personal and clinical information in accordance with applicable laws and the Standards of Professional Conduct of the College of Psychologists and Behaviour Analysts of Ontario.

Record retention periods:

• Adults: I retain client records for at least 10 years after the date of last material contact.

• Clients first seen as minors: I retain records for at least 10 years after the client’s 18th birthday.

When retention periods expire and the information is no longer required, I may securely destroy personal information. If collected, paper records are shredded or incinerated, and electronic records are deleted in a manner that prevents reconstruction.

8. Security of Your Personal Information

I apply reasonable technical, administrative, and physical safeguards to protect your personal information from loss, unauthorized access, disclosure, or misuse. These safeguards include secure platforms (Jane, Hushmail), password-protected systems, encrypted data transmission where appropriate, and secure storage.

9. Your Rights

You have the right to:

• Request access to your personal information

• Request correction of inaccurate or incomplete information

• Withdraw consent to certain uses of your information

Requests should be made in writing, and I will respond within a reasonable timeframe as required by law.

10. Changes to This Policy

I may revise this Privacy Policy from time to time. Updates will be posted on this website with a new effective date.

11. Contact Information

If you have questions or concerns about this Privacy Policy or about how I handle your information, please contact me:

 

Paul Grunberg, PhD. C.Psych.

Email: contact@grunbergpsychology.com
Phone: PHONE NUMBER