​​Health Information Custodian: Tara Gratto, M.S.Ed., RP (Qualifying)

 

Our Commitment to Your Privacy

​

We understand that health information is sensitive. We are committed to protecting your privacy and follow the Personal Health Information Protection Act, 2004 (PHIPA). This statement explains how we handle your personal health information (PHI).

​

1. What Information Do We Collect?

​

We collect only the information necessary to provide you with high-quality psychotherapy services. This includes:

• Contact details (name, address, phone number, email).

• Health history and presenting concerns.

• Clinical session notes and treatment plans.

• Administrative data (billing information, insurance details).​

​

2. How We Use and Disclose Your Information

​

We use and share your information for the following purposes:

• To provide care: This includes assessment, treatment, and consultation with my Clinical Supervisor (as required by the College of Registered Psychotherapists of Ontario).

• Circle of Care: We may share information with other healthcare providers involved in your care (e.g., your family doctor) unless you tell us not to.

• Billing and Payment: To process payments through Jane and issue receipts for insurance.

• Legal Requirements: We may disclose information without consent if required by law (e.g., reporting a child in need of protection, preventing serious bodily harm, or if subpoenaed by a court).

​

3. How We Protect Your Information

​

We use modern, secure technology to keep your records safe:

• Electronic Health Record: We use Jane, a secure platform with data stored on encrypted servers in Canada.

• Secure Communication: We use Hushmail for encrypted email and TELUS Business Connect for secure telecommunications.

• Physical Security: Any paper records are kept in a double-locked system and are scanned into Jane and then securely shredded using a cross-cut shredder.

​

4. Your Rights

​

• Access and Correction: You have the right to see your health record and ask us to correct any information you believe is inaccurate.

• The "Lockbox": You have the right to tell us not to share specific parts of your record with other healthcare providers. We will discuss the implications of this with you to ensure your care remains safe.

• Withdrawal of Consent: You can change or withdraw your consent at any time by providing us with written notice, subject to legal requirements.
   

5. How to Contact Us or File a Complaint

​

If you have questions about our privacy practices or wish to access your records, please contact: Tara Gratto, Privacy Officer tara@taragrattotherapy.ca | 437-562-3426

​

If your privacy concern is not resolved to your satisfaction, you have the right to contact the Information and Privacy Commissioner of Ontario: 2 Bloor Street East, Suite 1400, Toronto, Ontario, M4W 1A8 Email: info@ipc.on.ca | Website: www.ipc.on.ca