Privacy Policy

1. Commitment to Privacy

At Echo Circle Counselling, I am deeply committed to protecting the privacy, confidentiality, and security of your personal health information. This Privacy Policy outlines how I collect, use, and safeguard your data in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and relevant provincial health privacy legislation (e.g., PHIPA in Ontario or PIPA in BC).

2. Information I Collect

In the course of providing therapeutic services, I collect personal health information which may include:

• Contact information (name, email, phone number, mailing address).
• Intake forms and clinical history.
• Therapeutic session notes and treatment plans.
• Payment and billing information.
• Emergency contact details.

3. How Your Information is Used

Your information is used strictly for the following purposes:

• To provide clinical care and soul-centered therapeutic support.
• To manage appointments, reminders, and scheduling.
• To process billing and maintain financial records.
• To comply with regulatory standards and professional associations (e.g., CRPO or BCACC).

4. Confidentiality & Disclosure

All sessions and records are confidential. Your information will never be shared without your explicit consent, except in specific legal or ethical circumstances, including:

• Where there is a clear risk of serious harm to yourself or others.
• Suspected cases of child abuse or neglect.
• Valid legal subpoenas or court orders.
• Professional ethical supervision (where identifying details are omitted).

5. Digital Privacy & Telehealth

Online sessions are conducted via secure, HIPAA and PIPEDA-compliant video platforms. While I take rigorous measures to ensure data security, including encrypted communication, the nature of internet usage carries inherent risks. I recommend conducting sessions from a private, password-protected network.

6. Your Rights

You have the right to access, review, and request corrections to your personal health records. Requests should be made in writing to the Privacy Officer. I aim to respond to all such requests within 30 days.