Legal
Privacy Policy
Your privacy is fundamental to the therapeutic relationship. This policy explains how we collect, use, disclose, and safeguard your personal and health information.
Last updated: October 18, 2026
Who We Are
Thrive Connection: Mind and Wellness Therapy is a private psychotherapy practice operated by Tamara Morton, Registered Psychotherapist (Qualifying) and Registered Nurse, providing online therapy services to clients in Ontario (including Sudbury and Toronto), Alberta, and Manitoba, Canada. Our website is located at thriveconnectiontherapy.ca. Tamara Morton is the Privacy Officer for this practice and is responsible for compliance with applicable privacy legislation.
Applicable Privacy Legislation
This practice is governed by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Ontario's Personal Health Information Protection Act (PHIPA), and the standards of the College of Registered Psychotherapists of Ontario (CRPO). Where provincial legislation in Alberta (PIPA) or Manitoba (PHIA) applies to a client's health information, we comply with those requirements as well. In the event of a conflict between applicable laws, the more protective standard applies.
Information We Collect
We collect personal and health information only for purposes that a reasonable person would consider appropriate in the circumstances. This may include: (a) identifying information such as your name, date of birth, address, phone number, and email address; (b) health information including presenting concerns, mental health history, medications, and session notes; (c) billing and payment information; (d) emergency contact details; (e) information you provide through our contact form or client portal; and (f) non-identifying technical data such as browser type, pages visited, and approximate geographic region collected through analytics tools. We collect only the minimum information necessary to provide safe, effective care.
Consent
We obtain your express consent before collecting, using, or disclosing your personal health information, except where the law permits or requires otherwise. Consent is obtained through your signed Informed Consent and Therapeutic Agreement prior to the commencement of services. You may withdraw consent at any time, subject to legal and ethical obligations. Withdrawal of consent may affect our ability to continue providing services. Implied consent may apply in limited circumstances, such as when you contact us to enquire about services.
How We Use Your Information
Your information is used to: (a) provide, coordinate, and follow up on psychotherapy and counselling services; (b) schedule and manage appointments; (c) process payments and issue receipts; (d) communicate with you about your care; (e) meet our legal and professional obligations under CRPO standards; (f) improve the quality and safety of our services; and (g) respond to your enquiries. We do not sell, rent, trade, or share your personal information with third parties for marketing or commercial purposes.
Therapeutic Records and Confidentiality
All clinical records and session notes are kept strictly confidential in accordance with CRPO standards, PHIPA, and applicable provincial legislation. Confidentiality is a cornerstone of the therapeutic relationship. There are limited circumstances in which confidentiality may be overridden without your consent, as required by law: (a) where there is a serious and imminent risk of harm to you or an identifiable third party; (b) where there is a reasonable suspicion of child abuse or neglect, as required under the Child, Youth and Family Services Act (Ontario) or equivalent provincial legislation; (c) in response to a valid court order or subpoena; or (d) as otherwise required by law. Where possible, we will inform you before disclosing your information in these circumstances.
Third-Party Services
We use the following third-party services that may process your information: (a) Jane App — our appointment booking and electronic health record platform. Jane App is a Canadian company and is PHIPA-compliant. Their privacy policy is available at jane.app/privacy. (b) Google Analytics — we use Google Analytics to understand how visitors use our website. This data is anonymised and aggregated and does not identify you personally. You may opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on. (c) Our client portal uses industry-standard encrypted authentication. We have entered into appropriate data processing agreements with third-party service providers where required by law.
Telehealth and Online Services
All therapy sessions are conducted online via secure video platforms. While we take reasonable steps to ensure the security of online communications, you should be aware that no internet transmission is completely secure. We recommend that you access sessions from a private location using a secure, password-protected internet connection. By participating in online therapy, you acknowledge and accept the inherent limitations of electronic communication.
Data Retention
Clinical records are retained for a minimum of ten (10) years from the date of the last service, or seven (7) years after a minor client reaches the age of majority, in accordance with CRPO standards and applicable provincial regulations. Non-clinical personal information collected through our website is retained only as long as necessary for the purpose for which it was collected. When information is no longer required, it is securely destroyed or anonymised.
Privacy Breaches
In the event of a privacy breach involving your personal health information that poses a real risk of significant harm, we will notify you and the applicable regulatory authority as required by PIPEDA and PHIPA. We maintain a breach response protocol and a record of all privacy breaches. If you believe your privacy has been breached, please contact our Privacy Officer immediately.
Your Rights
Under PIPEDA, PHIPA, and applicable provincial privacy legislation, you have the right to: (a) be informed of the existence, use, and disclosure of your personal information; (b) access the personal information we hold about you, subject to limited exceptions; (c) request corrections to inaccurate or incomplete information; (d) withdraw consent for non-essential uses of your information; (e) file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca or the applicable provincial privacy commissioner if you believe your rights have been violated. To exercise any of these rights, please contact our Privacy Officer in writing.
Cookies and Tracking Technologies
Our website may use cookies and similar tracking technologies to improve your browsing experience and analyse site traffic. Cookies are small text files stored on your device. You may configure your browser to refuse cookies or to alert you when cookies are being sent; however, some features of our website may not function properly without them. We do not use cookies to collect personal health information.
Security Safeguards
We implement physical, administrative, and technical safeguards appropriate to the sensitivity of the information we hold. These include encrypted connections (TLS/HTTPS), secure session management, access controls, and regular review of our security practices. Our electronic health records are stored on PHIPA-compliant platforms. Employees and contractors with access to personal health information are bound by confidentiality obligations.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the revised policy.
Contact Our Privacy Officer
If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact: Tamara Morton, Privacy Officer, Thrive Connection: Mind and Wellness Therapy. Email: [email protected]. Phone: 705-280-8287. You also have the right to contact the Office of the Privacy Commissioner of Canada at 1-800-282-1376 or priv.gc.ca, or the Information and Privacy Commissioner of Ontario at 1-800-387-0073 or ipc.on.ca.