Effective date: June 1, 2020
Last Updated: June 1, 2020
Welcome to Inner Flux Counselling Service’s website http://www.innerfluxcounselling.com operated by Inner Flux Counselling Service [we, us, our].
Personal health information (PHI) is required to be collected and must correspond accurately with the individual’s correct identity. Therefore, access to services must be made by the person seeking psychotherapy and identity must be confirmed, services cannot be provided anonymously. Due to jurisdiction restrictions, individuals must reside in Ontario, Canada to receive psychotherapy services. Services can only be provided to individuals 16 years of age and older. Authentication measures will be used to ensure the accuracy of an individual’s identity: request for identification and residential information. Please note, these measures are to ensure compliance with regulatory bodies; this information will be collected and stored securely and will only used for identification purposes. In circumstances of preferred name use, your legal name will need to be collected initially while further services will reflect your preferred name.
WHY DO YOU COLLECT PERSONAL HEALTH INFORMATION?
PHI is required to be collected in order to provide psychotherapy services that can best support you. It is used to: compile a full picture of your background, history and current situation, helps to understand your needs, and assists in being compliant with regulatory requirements. All shared PHI is strictly protected within the limits of the law.
WHAT INFORMATION IS COLLECTED?
Information collected, but not limited to demographic information: name, age, race, ethnicity, gender, sex, sexual orientation, marital status, income, education, and employment. Along with emergency contact information, historical and current relational, physical, and emotional health information.
Email addresses may be collected for subscription to receive updates from the blog on the Website. Web services may automatically capture: name of domain and host from which you access the internet, the internet address of the Website from which you enter the Website, the pages you visit on the Website and the amount of time spent on the Website. This user information may be used to improve the Site and will not be shared with any third-parties. By browsing this Website you consent to the collection of the above personal information.
DISCLOSURE OF INFORMATION
There are legal limitations in which PHI would be required to be released without your consent:
Reason to believe you are a harm to yourself or another person
Reason to believe a child is in danger of or is in situations of neglect, abuse, or harm
If clinical notes and files are court ordered by a judge (subpoena)
If any historical child sexual abuse is revealed and the offender currently has access to minors
Information that reveals sexual abuse by another health practitioner
HOW IS MY PERSONAL HEALTH INFORMATION STORED AND FOR HOW LONG?
The security of your information is of upmost importance and is required by regulatory bodies. Owl Practice is the virtual platform used to communicate over webcam and text-based modalities. Your information transmitted along virtual technologies is securely stored at bank-level encryption (SSL) on servers located in Canada and is also PHIPA compliant. Your PHI is kept safe from loss, modification, disclosure (unless you provide consent), and unauthorized access. Technology safeguards such as prompt software updates, security software, end-to-end encryption, and computer facial recognition are incorporated to ensure your PHI is secure. Your Client Record and PHI are stored for a period of 10 years after the date your file is closed, after the 10 year mark all PHI is destroyed or erased.
All email communication is end-to-end encrypted using a third-party service called Hushmail. Hushmail servers are located within Canada and is HIPAA compliant. Our administrative correspondence will be kept for 14 days and then erased. Any therapeutic exchanges will be kept until the end of our work together and then erased while pertinent information will be transferred to your Client Record as outlined above.
Your written or electronic authorization of consent (check box) will be required for the collection, use, or disclosure of your PHI. You may withdraw your permission to the collection, use, and disclosure of PHI at any time.
USE OF INFORMATION
PHI is used to provide psychotherapy services and accounting purposes. Payments are processed by a third-party company called Stripe. Stripe is Level-1 (highest security and compliance) PCI complaint; Payment Card Industry Security Standards Council (PCI SSC) which is responsible for protecting cardholder data and minimizing the threat of credit card fraud. No session information will be available to third parties.
REGISTRATION AND USE OF PERSONAL INFORMATION
Registration is not required to access or browse this Website. However, this site may make blogs and third-party links available to its users. Your personal information will be required when requesting services. All information sent through contact forms and emails are linked directly to an end-to-end encryption email service- Hushmail. Any information you provide will not be shared with any third-party organization unless user’s consent it expressed.
If you have any concerns or questions regarding your PHI and the procedures stated above, please connect with me directly.