Privacy Policy
Last updated: 21 Jul 2026
Mental Majesty ("we," "us," "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information — including personal health information — when you visit https://mentalmajesty.ca, book a therapy session, or enroll in one of our online psychoanalysis courses.
This policy is intended to comply with Ontario's Personal Health Information Protection Act (PHIPA) and Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Who We Are
[Business Legal Name] is a [sole proprietorship / professional corporation] operated by Bahareh Babaei, a [Registered Psychotherapist / other designation] registered with the [College of Registered Psychotherapists of Ontario (CRPO) / applicable regulatory college], practicing in Ontario, Canada.
2. Our Privacy Contact Person
As required under PHIPA, we have designated a contact person responsible for our privacy practices:
Name: [Name] Role: Privacy Contact / [Practitioner Name] Email: [Email address] Phone: [Phone number]
You can direct any privacy question, access request, correction request, or complaint to this contact person.
3. Information We Collect
a) Information you provide directly:
-
Contact details (name, email, phone number)
-
Booking and scheduling information
-
Intake forms, clinical notes, session records, and other personal health information shared during therapy
-
Payment and billing information (processed via our payment provider — see Section 6)
-
Information submitted when enrolling in an online course (name, email, payment details, progress/quiz responses if applicable)
-
Any information you send us by email, contact form, or during sessions
b) Information collected automatically:
-
Website usage data (pages visited, time on site, general location, device/browser type) via cookies and analytics — see our Cookies page for details
c) Information from third parties:
-
[If applicable: information from a referring provider, with your consent]
4. Why We Collect and Use Your Information
We collect and use personal information to:
-
Provide, coordinate, and bill for therapy services (online and in-person)
-
Communicate with you about appointments, cancellations, and reminders
-
Maintain clinical records as required by our regulatory college and Ontario law
-
Deliver and administer online courses you purchase, including access, support, and certificates of completion (if applicable)
-
Process payments
-
Improve our Site and services
-
Meet legal, regulatory, and professional obligations
-
With your express consent, send you newsletters or marketing communications (you may withdraw this consent at any time)
5. Consent
For the provision of therapy services, we generally rely on your implied consent — the fact that you are seeking care and providing information for that purpose — consistent with PHIPA. For anything outside providing your care (for example, marketing communications, or disclosure to anyone who is not part of your circle of care), we will ask for your express consent.
You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting us using the details in Section 2. Withdrawing consent may affect our ability to continue providing certain services.
6. How We Share Your Information
We do not sell your personal information. We may share information only in the following circumstances:
-
Service providers who help us operate: our website host (Wix), payment processor (Wix Payments/Stripe/PayPal), scheduling/booking tools, email service provider, and course-hosting platform. These providers are contractually restricted to using your information only to provide services to us.
-
Legal and safety obligations: where required by law, court order, or where necessary to prevent serious harm to you or another person (e.g., imminent risk of harm, suspected child abuse, or other circumstances where PHIPA permits or requires disclosure without consent).
-
Regulatory college: if required as part of a professional or regulatory review.
-
With your express consent: for example, if you ask us to share information with another healthcare provider.
7. Where Your Information Is Stored
Our Site is hosted on Wix, and some service providers we use may store or process data on servers located outside Canada, including in the United States. This means your information may be subject to the laws of those jurisdictions, including potential access by foreign authorities. By using our Site and services, you acknowledge this cross-border storage. [Confirm current Wix/vendor data-residency options and adjust this section accordingly — Wix has historically offered limited data-residency choices; verify what applies to your account.]
Clinical records specifically (session notes, intake forms) are stored in [describe your clinical record-keeping system, e.g., "a dedicated practice management platform" — name it].
8. Data Retention
We retain personal health information for as long as required by our regulatory college's record-keeping requirements and applicable law. [Confirm the specific retention period required by your college — this commonly ranges around 10 years from the date of last contact, or longer for records relating to a minor, but requirements vary by profession, so confirm the exact figure with your college before publishing.]
Non-clinical information (e.g., website analytics, course enrollment records) is retained only as long as necessary for the purposes described in this policy.
9. Security Safeguards
We take reasonable administrative, technical, and physical measures to protect your personal information against loss, theft, and unauthorized access, use, or disclosure, including:
-
Secure, access-controlled clinical record systems
-
Encrypted transmission for online sessions and secure messaging
-
Limiting access to personal health information to those who need it to provide your care
-
[Any additional measures — e.g., two-factor authentication, encrypted storage]
No method of transmission or storage is 100% secure. If a breach occurs that creates a real risk of significant harm, we will notify affected individuals and, where required, the Information and Privacy Commissioner of Ontario, in accordance with PHIPA.
10. Your Rights
Subject to limited exceptions under law, you have the right to:
-
Access your personal information, including your clinical record
-
Request correction of inaccurate or incomplete information
-
Know who has accessed your record
-
Withdraw consent (see Section 5)
-
File a complaint with us, or with the Information and Privacy Commissioner of Ontario (for health information) or the Office of the Privacy Commissioner of Canada (for other personal information), if you believe your privacy rights have been violated
To exercise any of these rights, contact our privacy contact person listed in Section 2.
11. Online Courses
If you purchase a psychoanalysis online course, we collect the information necessary to provide access (name, email, payment details, and course progress where applicable). Course-related information is kept separate from clinical/therapy records and is used only to administer the course, provide support, and improve our course offerings.
12. Online (Telehealth) Sessions
Online therapy sessions are conducted via [name of platform, e.g., a specific video conferencing tool]. Please note:
-
Online sessions are only offered to clients physically located in [Ontario / list applicable provinces], consistent with our professional registration.
-
While we use secure, encrypted tools, no internet-based communication is completely free of risk. Please connect from a private location.
13. Children's Information
Our services are not directed at children under [13/16] without parental or guardian involvement. If you are a parent or guardian booking services for a minor, additional consent rules may apply to their clinical record; contact us for details.
14. Changes to This Policy
We may update this Privacy Policy periodically. The "Last updated" date above reflects the most recent revision. Material changes will be communicated where appropriate.
15. Contact Us
Questions, access requests, or complaints about this Privacy Policy or our information practices:
19302 Holland Landing Road, East Gwillimbury,
ON, Canada L9N 1M8
Fax: 365-512 2610
You may also contact the Information and Privacy Commissioner of Ontario (ipc.on.ca) regarding health privacy concerns, or the Office of the Privacy Commissioner of Canada (priv.gc.ca) regarding other privacy concerns.