Privacy Policy
Effective Date: January 29, 2026
This Privacy Policy describes how Rae Slezak/Wayward Therapy ("we," "us," or "the Practice") collects, uses, and discloses your Personal Information and Personal Health Information (PHI) when you visit our website and use our services through our practice management platform, Owl Practice.
1. Our Commitment to Privacy
We are committed to maintaining the highest standards of confidentiality and complying with the Personal Information Protection and Electronic Documents Act (PIPEDA) and [Insert Provincial Act, e.g., Ontario’s Personal Health Information Protection Act (PHIPA)].
2. Information We Collect
When you interact with our practice, we collect information that can identify you. This includes:
Contact Information: Name, email address, phone number, and mailing address.
Health Information: Health history, session notes, assessments, and treatment plans.
Financial Information: Credit card details (processed securely via Owl Practice/Stripe; we do not store full card numbers locally).
Technical Data: IP address and browsing behavior via website cookies (standard for website functionality).
3. How We Use Your Information
We use the information collected to:
Provide, manage, and coordinate your therapeutic care.
Process payments and issue receipts through Owl Practice.
Communicate with you regarding appointments or administrative updates.
Comply with legal and regulatory obligations as required by our licensing body.
4. Third-Party Service Providers (Owl Practice)
To provide a secure and seamless experience, we use Owl Practice to manage client records, scheduling, and billing.
Data Residency: Owl Practice stores data on secure, encrypted servers located in Canada.
Security: They employ bank-level encryption (SSL) and meet stringent PHIPA/PIPEDA compliance standards.
Links to Owl Practice: Our website contains buttons that link to the Owl Practice portal. Once you leave this website to book an appointment, your information is governed by the security protocols of Owl Practice.
5. Disclosure of Information
We do not sell or rent your personal information. Your data is only shared with third parties when:
Consent is Provided: You have given written permission to share info with a doctor, lawyer, or family member.
Required by Law: In cases of suspected harm to self or others, child protection concerns, or a court order.
Payment Processing: To verify and process transactions through our integrated payment processor.
6. Data Retention and Security
We retain your health records for a period required, which is typically [10] years after the last clinical contact. We use administrative, technical, and physical safeguards to protect your data from unauthorized access or theft.
7. Your Rights
You have the right to:
Access and view your personal record.
Request a correction to inaccurate or incomplete information.
Withdraw consent for the collection of information (noting that this may limit our ability to provide care).