Privacy Policy
At The Mental Health Clinic, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that are collected and recorded by The Mental Health Clinic and how it is used.
This policy (together with our terms of website use and any other documents referred to on it) sets out the basis on which The Mental Health Clinic (“Clinic”, “us”, “we”, or “our”) will collect and process any personal data we collect from you, or which you provide to us, in the course of using our site www.mentalhealthclinic.co. We may change or add to this privacy notice, so we encourage you to come back and read it periodically.
By using the site, you agree to the collection and use of information in accordance with this policy. By providing us with your data, you also warrant to us that you are over 18 years of age.
Data Collection
While using our site, we may ask you to provide us with certain personal data that can be used to identify or contact you. Personally Identifiable Information (PII) may include, but is not limited to:
- First and last name, age, and gender
- Postal address, email address, telephone number, and other contact information
For clients who work with the clinic, we may also collect Protected Health Information (PHI) to provide appropriate services. Protected Health Information may include:
- Your medical history, family history, medical diagnosis, health background, and current health status
- Age, gender, sexual behavior and sexual orientation
- Demographic information, including race, ethnicity, marital status, salary, education, criminal convictions, political, religious, and trade union information
- Information related to the diagnosis and treatment of health conditions, over-the-counter and prescription medications, laboratory test results, and payments for treatment and health insurance information
We may collect this information voluntarily from you to provide appropriate services. Where we are required to collect personal data by law, or under the terms of the contract between us and you do not provide us with that data when requested, we may not be able to perform the contract (for example, to deliver goods or services to you). If you don’t provide us with the requested data, we may have to cancel a product or service you have ordered but if we do, we will notify you at the time.
We will only use your data for the purpose it was collected for or a reasonably compatible purpose if necessary. For more information on this please email us at [email protected]. In case we need to use your details for an unrelated new purpose we will let you know and explain the legal grounds for processing. We may process your data without your knowledge or consent where this is required or permitted by law.
Technical Data
Communication Data includes any communication that you send to us whether that be through the contact form on our website, through email, text, social media messaging, social media posting or any other communication that you send us. We process this data for the purposes of communicating with you, for record keeping and for the establishment, pursuance or defense of legal claims. Our lawful ground for this processing is our legitimate interests which in this case are to reply to communications sent to us, provide appropriate services and to establish, pursue or defend legal claims.
Order & Billing Information. If you place an order through our website, we track certain information about the products and services you purchase. At checkout, you will also be required to provide additional information required for processing your payment. This generally includes a debit or credit card or other payment information, expiration dates, card security codes, your billing address, or similar information. This information is generally processed and captured by third-party vendors, such as payment processors and merchant account providers. To the fullest extent possible, we make an effort not to capture or retain this information ourselves (unless, for example, we are requested to process a refund, follow up on the delivery of goods or services, or work with customers or vendors on resolving any errors or other scenarios.) Third-party vendors who assist us in any of our business functions will also be doing so pursuant to their own terms and conditions, including privacy policies and terms of use. Our lawful ground for this processing is the performance of a contract between you and us and/or taking steps at your request to enter into such a contract.
User Data that includes data about how you use our website and any online services together with any data that you post for publication on our website or through other online services. We process this data to operate our website and ensure relevant content is provided to you, to ensure the security of our website, to maintain back- ups of our website and/or databases and to enable publication and administration of our website, other online services and business. Our lawful ground for this processing is our legitimate interests which in this case are to enable us to properly administer our website and our business.
Information Collected Automatically
Like many websites, we and our service providers, such as Google and Facebook, use cookies, web beacons, and other technologies to receive and store certain types of information when you interact with us through your computer or mobile device. Using these technologies helps us recognize you, customize your experience, and make relevant marketing messages. Here are some of the types of information we collect:
Marketing Data includes data about your preferences in receiving marketing from us and our third parties and your communication preferences. We process this data to enable you to partake in our promotions such as competitions, prize draws, and free giveaways, to deliver relevant website content and advertisements to you and measure or understand the effectiveness of this advertising. Our lawful ground for this processing is our legitimate interests which in this case are to study how customers use our products/services, to develop them, to grow our business, and to decide our marketing strategy.
Technical Data that includes data about your use of our website and online services such as your Internet Protocol (“IP”) addresses, operating systems, browser types, device types, URLs, access dates and times; Website pages that you visit; referring website information; universally unique identifiers (“UUID”), advertising identifier (“IDFA”), carrier and country location, hardware and processor information, network type, and other related data. The source of this data is from our analytics tracking system. We process this data to analyze your use of our website and other online services, to administer and protect our business and website, to deliver relevant website content and advertisements to you and to understand the effectiveness of our advertising. Our lawful ground for this processing is our legitimate interests which in this case are to enable us to properly administer our website and our business to grow our business and to decide our marketing strategy.
Third-Party Analytics. We use third-party analytics services (such as Google Analytics) to evaluate and aggregate visitor data. These services help us evaluate Visitors’ use of the Website, including time spent on certain pages, which areas of the Website receive the most traffic, how often visitors visit pages within the Website and also provide general geographic location about visitors, the source of referred traffic (from other websites, vs search engines, etc). These third-party analytic services use cookies and other technologies to help analyze and provide us the data. By providing your consent to this Privacy Policy, you consent to the collection and review of data about you by these analytics providers in the manner and for the purposes set out herein.
For more information on Google Analytics, including how to opt-out from certain data collection, please visit https://www.google.com/analytics. If you opt out of any service, you may not enjoy the full functionality of the Website.
Other Third-Party Tracking Tools. We may also collect or receive information from third parties, such as Facebook, Instagram, and/or other third-party social media and similar sites.
We may use the above forms of data to deliver relevant website content and advertisements to you (including Facebook adverts or other display advertisements) and to measure or understand the effectiveness of the advertising we serve you. Our lawful grounds for this processing are legitimate interests which is to grow our business. We may also use such data to send other marketing communications to you. Our lawful ground for this processing is either consent or legitimate interests (namely to grow our business).
Cookies
Our website may use cookies to deliver a better experience for you. Cookies are files with small amounts of data that a website stores on your computer or mobile device’s hard drive so that certain information about your visit and web-browsing preferences will be recognized upon a return visit. Cookies serve functions such as “remembering” log-in names and passwords. An example of cookies you may be familiar with during online shopping is saving shopping cart contents. Like many websites, we may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer until you delete them) to help us improve the experience you have with our website. Most web browsers have a function that allows you to delete existing cookies on your device or you can set your browser options to that your device does not receive or accept cookies.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
How we keep your information secure
As a mental health clinic, we are committed to protecting your PII and PHI. As such, we have applied appropriate administrative, technical, and physical safeguards designed to protect your Information from illegal access, use, or sharing. All information you provide to us through the website is protected and encrypted within dedicated Cloud servers. We have ensured services are HIPAA, PIPEDA, and PHIPA compliant in providing safeguards that encrypt all PII and PHI. If you are an ongoing client, rest assured that video and tele meetings are secured through Owl Practice as well as all documentation. Owl Practice is a HIPAA, PIPEDA, and PHIPA-compliant software for counselors, therapists, and medical practitioners.
HIPAA Compliance
Health Insurance Portability and Accountability Act (HIPAA) outlines Privacy Rule standards for the use and disclosure of individuals’ health information (known as “protected health information”) by entities subject to the Privacy Rule. A major goal of the Privacy Rule is to ensure that individuals’ health information is properly protected while allowing the flow of health information needed to provide and promote high-quality health care and to protect the public’s health and well-being. The Privacy Rule strikes a balance that permits important uses of information while protecting the privacy of people who seek care and healing.
To learn more: https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html
PIPEDA Compliance
The Personal Information Protection and Electronic Documents Act (PIPEDA) is Canada’s version of HIPAA. The PIPEDA provides a set of rules that protects the confidentiality of personal health information and the privacy of the individual to whom that information relates. While the act is similar to the United States HIPAA, PIPEDA has some significant differences to ensure more stringent protection.
PHIPA Compliance
The Personal Health Information Protection Act (PHIPA) is Ontario’s health privacy legislation. The PHIPA also outlines a set of rules regarding the collection, use, and storage of personal health information (PHI).
To learn more: https://www.ipc.on.ca/health-individuals/file-a-health-privacy-complaint/your-health-privacy-rights-in-ontario/
GDPR Data Protection Rights
If you live in the EU, your data may be subject to protection by the General Data Protection Regulation (“GDPR”), a privacy regulation intended to help you have greater control over your data.
To learn more: https://gdpr.eu/