GOOD THERAPIST INC. PRIVACY POLICY 

‍Date of last revision: March 2026Good Therapist Inc. (“Good Therapist”, “we”, “us”, “our”) operates an online platform (the “Platform”) that enables individuals (“Clients”, “you”) to access virtual mental health therapy services provided by independent, regulated mental health clinicians.This Privacy Policy (the “Policy”) explains how we collect, use, disclose, store, and protect Personal Information, including Personal Health Information, when you access or use the Platform or otherwise interact with us. The Platform is intended for Clients located in Canada.

‍

‍1. Platform role and clinician relationship 

‍Good Therapist provides technology, administrative, and payment-processing services, including scheduling, secure video, and platform support.
All therapy services are provided by independent clinicians, not employees of Good Therapist. Clinicians:

• exercise independent clinical judgment,
• are responsible for determining appropriateness of care,
• maintain clinical records,
• comply with professional, ethical, and legal obligations, including confidentiality and record retention.

This Policy describes Good Therapist’s privacy practices as a platform operator. Your clinician may also be subject to separate professional privacy obligations that apply to clinical records and care.

‍

‍2. Privacy laws we comply with

‍Good Therapist complies with applicable Canadian privacy laws, including:

• the Personal Information Protection and Electronic Documents Act (PIPEDA), and
• applicable provincial private-sector privacy legislation, including
• a

Clinicians may also be subject to provincial health information legislation and college standards governing Personal Health Information.

‍

‍3. Personal Information we collect

‍A) Information you provide when creating an accountWe collect information reasonably required to identify you, create and administer your account, and communicate with you, such as:

• full name
• date of birth
• email address
• phone number
• mailing address (where required)
• login credentials (e.g., password)

B) Information you provide when booking and attending therapyDepending on how you use the Platform, we may collect:

• appointment and scheduling details
• intake information you submit prior to sessions
• administrative communications with Good Therapist
• technical information required to facilitate secure video sessions

Clinical information disclosed during therapy sessions (including session content, assessments, diagnoses, and clinical notes) is primarily collected and managed by your clinician. Platform access to such information is limited and occurs only where necessary to:

• operate and support the Platform,
• meet legal or regulatory obligations,
• ensure safety and system integrity.

C) Payment and billing informationTo book an appointment, you must maintain a valid, active payment method on your account.Payment information is collected and processed by PCI-compliant third-party payment processors. Good Therapist does not store full credit card numbers on its own servers. We may receive limited payment-related information (such as transaction status, timestamps, receipts, and partial card identifiers).D) Communications and support interactionsIf you contact us (e.g., for technical support, billing questions, or complaints), we may collect:

• contact information,
• details of your inquiry,
• records of correspondence.

E) Information collected automaticallyWhen you access or use the Platform, we may automatically collect:

• IP address
• device type, operating system, and browser information
• timestamps, log files, and usage data
• cookie and similar tracking data on our website

This information is used for security, troubleshooting, analytics, and platform improvement.

‍

‍4. How we use Personal Information

‍We use Personal Information for the following purposes:A) To provide and operate the Platform

• create and manage user accounts
• facilitate appointment booking and scheduling
• enable secure video sessions
• provide administrative and customer support

B) To process payments and enforce policies

• process session fees
• apply cancellation and no-show fees in accordance with our Terms and posted policies
• manage disputes, refunds, chargebacks, and fraud prevention

C) To support clinicians’ lawful operationsWe provide clinicians with administrative and information-management support tools to help them meet professional and legal obligations, without directing or controlling clinical decision-making.D) Safety, security, and legal compliance

• protect the integrity and security of the Platform
• detect misuse, fraud, or unauthorized access
• comply with applicable laws, court orders, and regulatory requirements

E) Platform improvement and analytics

• monitor performance and reliability
• improve user experience and operational efficiency
• analyze usage trends

Where feasible, analytics are conducted using Aggregated or De-identified information.F) CommunicationsWe may communicate with you regarding:

• account activity and appointments
• service updates and operational notices
• changes to policies or the Platform

Marketing communications are sent only where permitted by law and subject to your preferences. You may opt out at any time.

‍

‍5. Disclosure of Personal Information

‍We do not sell Personal Information.We may disclose Personal Information only as described below or as permitted or required by law.

A) To cliniciansWe disclose information necessary to enable clinicians to deliver and administer care (e.g., scheduling details, intake submissions, and relevant contact information).

B) To service providers (vendors)We use vetted third-party vendors to support Platform operations, such as:

• hosting and infrastructure providers
• secure video and communications services
• payment processors
• IT, security, analytics, and customer support tools

Vendors are contractually required to protect Personal Information and use it solely for authorized purposes.

C) Legal, safety, and compliance disclosuresWe may disclose Personal Information:

• to comply with legal obligations, subpoenas, or court orders
• to protect the rights, safety, or security of Clients, clinicians, Good Therapist, or the public
• in connection with investigations of fraud, misuse, or security incidents

D) Business transactionsIn the event of a merger, acquisition, financing, restructuring, or sale of assets, Personal Information may be disclosed to advisors or counterparties as permitted by law and subject to appropriate safeguards.

‍

‍6. Where we process and store Personal Information 

‍Good Therapist uses third-party technology providers, including electronic medical record (EMR) and hosting vendors.Personal Information may be stored or processed in Canada or in other jurisdictions, depending on the vendors selected.If Personal Information is processed outside Canada:

• it may be subject to the laws of the foreign jurisdiction,
• those laws may permit access by law enforcement or national security authorities in certain circumstances.

We take reasonable contractual, organizational, and technical measures to protect Personal Information regardless of location.

‍

7. Safeguards

‍We use physical, technical, and administrative safeguards appropriate to the sensitivity of the information, which may include:

• encryption in transit and at rest (where supported by vendors)
• role-based access controls and least-privilege permissions
• monitoring, logging, and incident response processes
• vendor security reviews and contractual safeguards
• confidentiality obligations and privacy training for personnel

No system is completely secure, but we take reasonable steps to protect Personal Information from unauthorized access, use, or disclosure.

‍

8. Retention

‍We retain Personal Information only as long as necessary to fulfill the purposes described in this Policy, unless longer retention is required or permitted by law.Clinical records are generally subject to professional and statutory retention requirements, which are primarily managed by clinicians and their clinical record systems.

‍

9. Your rights

‍Subject to applicable law, you may have the right to:

• access your Personal Information
• request correction of inaccurate or incomplete information
• withdraw consent (where processing is based on consent)
• raise questions or complaints regarding privacy practices

Withdrawal of consent may limit your ability to use the Platform or receive services.We may require identity verification before responding to requests.

‍

‍10. Third-party links

‍The Platform or Website may include links to third-party websites or services. We are not responsible for the privacy practices of third parties and encourage you to review their privacy policies.

‍

‍11. Changes to this Policy

‍We may update this Policy from time to time. Material changes will be posted on our Website and reflected by an updated revision date. Where appropriate, we may notify you by email or through the Platform.

‍

‍12. Privacy accountability and complaints

‍We maintain policies and procedures to:

• protect Personal Information,
• respond to privacy inquiries and complaints,
• train personnel on privacy obligations,
• assess and mitigate privacy risks.

We designate a Privacy Officer responsible for overseeing compliance.

‍

‍13. Contact us

‍For privacy questions, requests, or complaints:Privacy Officer
Good Therapist Inc.
Email: hello@goodtherapist.ca

You may also contact your provincial privacy regulator if concerns are not resolved.

‍

‍14. Definitions

‍“Personal Information” means information about an identifiable individual, including Personal Health Information.“Personal Health Information” means Personal Information regulated under applicable health privacy laws.“Aggregated” / “Anonymized” / “De-identified information” means information that no longer identifies an individual.