1. What Is Personal Health Information?

 

Personal health information (PHI) is identifying information about an individual that relates to their physical or mental health, health history, diagnosis, treatment, or payment for healthcare services.

 

Examples include:

• Your name, date of birth, and contact information

• Information shared in therapy sessions

• Intake forms, assessments, and clinical notes

• Appointment records

• Billing and payment information related to care

 

2. Who Is Responsible for Your Information?

 

Dr. Karma Guindon, RSW, is the Health Information Custodian under PHIPA and is responsible for the protection of personal health information collected and maintained by the practice.

 

All clinicians and staff working with the practice are required to comply with privacy and confidentiality obligations.

 

3. How We Collect Personal Health Information

 

We collect personal health information directly from you or from someone authorized to act on your behalf. Information may be collected through:

​

• Intake and consent forms

• Therapy sessions (in-person or virtual)

• Email, phone, or secure electronic communication

• Third-party referrals, with your consent

 

We collect only the information necessary to provide safe, ethical, and effective care.

 

4. How We Use Personal Health Information

 

Your personal health information is used for purposes such as:

​

• Providing assessment, psychotherapy, and treatment

• Maintaining accurate clinical records

• Communicating with you about your care

• Scheduling appointments and processing billing

• Meeting legal, ethical, and professional obligations

​

Information is used only for purposes related to your care unless otherwise permitted or required by law.

 

5. Consent

 

Under PHIPA, your knowledgeable consent is generally required for the collection, use, and disclosure of personal health information.

​

• In most cases, consent is implied when information is used within the “circle of care” for treatment purposes

• Express consent (verbal or written) is required for disclosures outside the circle of care

 

You may withdraw or limit consent at any time, subject to legal and professional obligations. We will explain any implications of doing so.

​

6. Disclosure of Personal Health Information

 

We may disclose personal health information:

• With your consent

• To other healthcare providers involved in your care

• Where required or permitted by law (e.g., court orders, mandatory reporting)

• To reduce or prevent a serious risk of harm

 

We do not disclose personal health information for marketing or non-care-related purposes.