How we hold your information

What you share in therapy is among the most personal information there is. Protecting it isn't a feature — it's the ground the work stands on.

Who this covers

This Is Me is a therapy practice operated by [This Is Me Therapy Inc.] ("This Is Me", "we", "us"). This policy explains how we handle personal information across our website, the booking and intake flow, the client dashboard, and the practitioner and management portals.

Two roles sit side by side. We operate the platform and look after your account, scheduling, and billing information. Your practitioner — an independent, regulated health professional — is responsible for your clinical records and acts as their custodian under the rules of their professional college and the health-privacy law of the province where you receive care.

The laws we work within

We handle your information in keeping with Canadian privacy law, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, provincial laws such as Quebec's Law 25, and the personal-information and health-information statutes of British Columbia, Alberta, Ontario (including PHIPA), and other provinces and territories. Our electronic messages follow Canada's Anti-Spam Legislation (CASL). Your practitioner is additionally bound by the privacy and record-keeping standards of their regulatory college.

What we collect

• Account & contact — your name, email, phone, password, and the province or region you're in.
• Intake & screening — what's bringing you here, relevant history, what you've already tried, whether you need an insurance receipt, and anything else you choose to tell us before your placement call.
• Clinical information — session notes, your care path, between-session prompts and the reflections you share back, and progress over time. This is held by your practitioner.
• Payment — handled by our payment processor. We receive confirmation and limited billing details; we never see or store your full card number.
• Technical — only the essentials needed to keep you securely signed in and the service running. We don't track you across the web or buy data about you from anyone.

How we use it

We use your information to match you with the right practitioner, to provide and coordinate your care, to schedule and run sessions, to issue receipts, to operate the portals, to communicate with you about your care, and to meet our legal, professional, and regulatory obligations. We use it for those purposes and nothing else. We never profile you for advertising.

Your consent

We collect, use, and disclose your information with your consent. You can withdraw consent at any time, subject to legal and professional limits — for example, records your practitioner is required to keep. Withdrawing certain consents may mean we can no longer provide some or all of your care, and we'll be honest with you about that if it comes up.

Who can see it

• Your practitioner sees your clinical information — that's the care relationship.
• Our small operations team sees the limited account, scheduling, billing, and matching information needed to run the practice and support you. They do not access your clinical notes, except the minimum required to coordinate your care safely or where you've specifically asked us to act.
• No one else — unless you give us written consent, or the law requires it (see below).

We do not sell your information, share it with advertisers, or use it to train AI models. Ever.

The providers who help us run

We rely on a small set of carefully chosen service providers — for secure hosting, payments, video sessions, scheduling, and email. They process information only on our instructions, under contract, and only as far as needed to deliver the service.

Where a provider stores or processes information outside your province or outside Canada, that information may be subject to the laws of the country where it is held, including lawful access by authorities there. We choose providers with strong safeguards and, wherever practical, Canadian data residency for sensitive information.

How we protect it

Information is encrypted in transit and at rest. Access is role-based and limited to those who need it, logged, and granted on a least-privilege basis. Everyone on our team and every practitioner is bound by confidentiality. No system is perfectly secure, but we work to recognized industry standards — and if a breach ever occurs that poses a real risk of significant harm, we will notify you and the appropriate privacy authority as the law requires.

The limits of confidentiality

In a few narrow situations, your practitioner may be legally or professionally required to disclose information without your consent: where there is a serious and imminent risk of harm to you or to someone else; where there is reasonable grounds to suspect a child is or may be in need of protection; in response to a court order, subpoena, or other legal requirement; or where a regulated health professional is required by law to make a mandatory report. In any such case, your practitioner will disclose only what is necessary and — where it's safe and appropriate — will talk it through with you first.

How long we keep it

Clinical records are retained for the period required by your practitioner's regulatory college and applicable provincial law — commonly at least ten years after your last interaction for adults, and longer for the records of young people. Account and billing records are kept only as long as needed to provide the service and meet legal and tax obligations, then securely deleted or de-identified.

Your rights

You can ask for a copy of the information we hold about you, ask us to correct it, ask how it's been used and to whom it's been disclosed, and withdraw your consent. From your client dashboard (Account), you can download your data or request account deletion — use Download my data or Delete my account. Requests about clinical records are handled by your practitioner as the custodian of those records — and we'll help you connect with them.

If you're ever unsatisfied with how we've handled your information, you can complain to the Office of the Privacy Commissioner of Canada, or to your provincial privacy commissioner — in Ontario, the Information and Privacy Commissioner of Ontario.

Cookies & tracking

We use one essential cookie to keep you signed in. That's the only one. No advertising cookies, no third-party tracking, no marketing pixels.

Young people

The platform is intended for adults. Where care for a young person is offered, it's arranged directly and with the appropriate consent of a parent or guardian where that's required.

Email & messages

We only send the messages you'd expect — about your care, your bookings, and your account. You can opt out of any non-essential message at any time. This is in keeping with CASL.

Changes to this policy

If we make a material change, we'll let you know before it takes effect. The current version always lives here.

Reach our privacy officer

Questions, requests, or concerns about your information go to our Privacy Officer, [Name], at privacy@thisisme.one, or by mail at [mailing address]. We respond within five working days.

Last updated: June 2026. This policy is written to be read — if anything here is unclear, write to us and a real person will explain it.