Privacy Policy

Effective Date: February 3, 2026

Last Updated: February 3, 2026

At Legacy Counselling and Wellness, I am committed to protecting the privacy and confidentiality of my clients' personal health information. This policy outlines how I collect, use, disclose, and safeguard your information in compliance with the Personal Information Act (Alberta), the Personal Health Information Protection Act (Ontario), and the ethical standards of the CRPO and CCPA.

1. Accountability

As the owner of Legacy Counselling and Wellness, I serve as a privacy officer. I am responsible for ensuring that all personal information under my control is handled with the highest level of security and in accordance with provincial and federal laws.

2. Information I Collect

     I collect information necessary to provide safe and effective counselling and psychotherapy services, including:

• Identifying Information: Name, date of birth, and home address.

• Contact Information: Email address and phone number.

• Health Information: Health history, family history, and clinical notes from our sessions.

• Financial Information: Payment details for billing purposes (processed via secure, third-party providers).

3. Purpose of Collection

    Your information is collected solely for the following purposes:

• To provide clinical assessment and psychotherapy services.

• To maintain accurate clinical records as required by the CRPO and CCPA.

• To contact you regarding appointments or billing.

• To meet legal and regulatory requirements.

4. Consent

By engaging in services, you provide informed consent for the collection and use of your data as described. You may withdraw your consent at any time; however, please note that I am legally required to maintain clinical records for a specific period (typically 10 years after the last encounter or 10 years after a minor turns 18).

5. Limits of Confidentiality

    In accordance with professional ethics and law, I will not disclose your information without your written consent except in the following circumstances:

• Safety: If there is a significant risk of serious bodily harm to yourself or others.

• Abuse: If there is reason to believe a child (under 18) or a vulnerable adult is being abused or neglected.

• Legal: If I am served with a subpoena or court order.

• Regulation: During a standard audit by the CRPO as part of their Quality Assurance program.

6. Safeguards & Data Storage

   I employ strict administrative, physical, and technical safeguards to protect your data:

• Electronic Records: I use JaneApp, which is a PHIPA and PIPA-compliant platform. All data is encrypted and stored on secure servers located in Canada.

• Virtual Sessions: Video sessions are conducted through an encrypted, healthcare-grade platform. I do not record sessions without your explicit, written permission.

• Device Security: All devices used for my practice are password-protected and encrypted.

7. Accessing Your Records

   You have the right to request access to your personal health record. Requests must be made in writing. I will respond to your request within 30 days. 

   A reasonable fee may be charged for copying or transferring records.

8. Questions and Complaints

   If you have questions about this policy or wish to file a complaint regarding how your data has been handled, please contact me directly at

   info@legacycounsellingandwellness.ca

You may also contact:

• Office of the Information and Privacy Commissioner (Alberta): www.oipc.ab.ca

• Information and Privacy Commissioner of Ontario: www.ipc.on.ca