Privacy Policy
Mission Control Therapy & Coaching (“Mission Control,” “we,” “us,” or “our”) is committed to protecting the privacy, confidentiality and security of the personal information entrusted to us.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you:
- Visit missioncontroltherapyandcoaching.com;
- Submit a contact, consultation, booking or referral form;
- Subscribe to our newsletter;
- Communicate with us;
- Participate in coaching; or
- Receive psychotherapy services from Mission Control.
Where Mission Control acts as a health information custodian, personal health information is handled in accordance with Ontario’s Personal Health Information Protection Act, 2004 (“PHIPA”), applicable regulations and the professional standards of the College of Registered Psychotherapists of Ontario (“CRPO”).
Other personal information may be governed by the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and other applicable privacy legislation.
01Accountability
Mission Control is responsible for the personal information under its control.
Our Privacy Officer oversees our privacy practices, responds to privacy questions and access or correction requests, and receives privacy-related complaints.
To contact the Privacy Officer, email:
02Personal Information We Collect
The information we collect depends on how you interact with us.
Information You Provide Directly
We may collect:
- First and last name;
- Email address;
- Physical location, province or state;
- Requested service;
- Preferred appointment date;
- Information included in inquiry or booking messages;
- Newsletter subscription information;
- Emergency contact details;
- Communication preferences;
- Billing, transaction and insurance-receipt information;
- Lawyer, firm and professional referral information;
- Court, referral or program documentation you choose to provide; and
- Other information reasonably required to respond to your request.
Please do not include unnecessary medical, psychological, legal or other highly sensitive information in a general Website form or ordinary email.
Psychotherapy and Personal Health Information
If you become a psychotherapy client, we may collect personal health information reasonably necessary to provide care, including:
- Contact and identifying information;
- Current physical location;
- Relevant health and mental health history;
- Relevant family, relationship and social history;
- Presenting concerns, symptoms and goals;
- Assessment and treatment information;
- Session, appointment and progress notes;
- Treatment plans and recommendations;
- Consent and authorization records;
- Communications relating to care;
- Referral, attendance and completion documentation;
- Information received from authorized healthcare providers or third parties; and
- Financial and administrative records connected with care.
Clinical records are maintained separately from general marketing communications where reasonably possible.
Coaching Information
If you receive coaching, we may collect information about your goals, habits, discipline, performance, leadership, personal development, progress and participation.
Coaching information may still be sensitive personal information even when it does not meet the legal definition of personal health information.
Information From Lawyers and Referral Sources
A lawyer or another professional may provide limited information when making a referral, including:
- The professional’s name;
- Firm or organization name;
- Email address;
- The prospective client’s name and contact information, where authorized;
- The general nature of the referral;
- Relevant deadlines; and
- Documentation requirements.
A referral does not authorize Mission Control to disclose client information back to the referral source.
Information Collected Automatically
When you visit the Website, our systems and service providers may automatically collect:
- Internet Protocol address;
- Browser and device type;
- Operating system;
- Pages visited;
- Date, time and duration of visits;
- Referring website;
- General geographic region;
- Website interactions;
- Security and error logs; and
- Cookie or similar technology information.
03How We Use Personal Information
We may use personal information to:
- Respond to inquiries and consultation requests;
- Determine eligibility, suitability and service availability;
- Schedule and manage appointments;
- Provide psychotherapy or coaching;
- Develop and review treatment or coaching plans;
- Communicate about appointments and services;
- Create and maintain required clinical, appointment and financial records;
- Process payments and issue receipts;
- Coordinate authorized referrals;
- Prepare factual enrolment, attendance, participation or completion documentation;
- Meet legal, regulatory, insurance and professional obligations;
- Protect clients, staff, systems and the public;
- Investigate security or privacy incidents;
- Improve Website performance and user experience;
- Maintain accounting and business records;
- Send newsletters or promotional communications where consent exists;
- Respond to complaints; and
- Establish, exercise or defend legal rights.
We limit the collection, use and disclosure of information to what is reasonably necessary for the identified purpose, unless broader collection, use or disclosure is permitted or required by law.
04Consent
We obtain consent appropriate to the sensitivity of the information and the purpose for which it is collected, used or disclosed.
Consent may be express or implied where legally permitted.
Express consent may be required for matters such as:
- Beginning psychotherapy or coaching;
- Providing virtual services;
- Releasing information to a lawyer, court, insurer, employer or family member;
- Obtaining information from another service provider;
- Recording a session;
- Using personal health information for a purpose unrelated to care; or
- Sending promotional communications where express consent is required.
You may withhold or withdraw consent by contacting us at info@missioncontroltc.com.
Withdrawal of consent will not operate retroactively and may not apply where information must be retained, used or disclosed to meet legal, professional or contractual obligations.
Withdrawing consent may affect our ability to provide certain services.
05Confidentiality and Its Limits
Information shared during psychotherapy is confidential and will not ordinarily be disclosed without the client’s consent.
However, information may be disclosed without consent where permitted or required by applicable law or professional standards. Examples may include:
- Where disclosure is necessary to address a serious risk of bodily harm;
- Where a child-protection or another mandatory-reporting obligation applies;
- In response to a valid court order or another lawful requirement;
- For an investigation, inspection or proceeding conducted by an authorized regulatory body;
- To obtain confidential legal advice or professional consultation where permitted;
- For the collection of an outstanding account where legally and professionally appropriate; or
- In another circumstance authorized or required by PHIPA or applicable law.
The specific limits of confidentiality will be reviewed as part of the informed-consent process before professional services begin.
06Lawyers, Courts and Other Third Parties
Information is not automatically shared with a lawyer, court, employer, insurer, family member or another person simply because that person referred the client or paid for services.
When information is released with client authorization, we will make reasonable efforts to disclose only the information that is relevant and necessary for the authorized purpose.
Where appropriate, clients may be given an opportunity to understand or review requested documentation before it is transmitted.
A client’s authorization may be limited or withdrawn, subject to information already disclosed and applicable legal requirements.
07Service Providers
We may use carefully selected service providers to support activities such as:
- Website hosting and maintenance;
- Contact and intake forms;
- Appointment scheduling;
- Secure video or telephone sessions;
- Email and electronic communications;
- Payment processing;
- Accounting;
- Secure record storage and backups;
- Cybersecurity and spam protection;
- Newsletter delivery; and
- Professional or legal support.
Service providers receive only the information reasonably necessary to perform their functions and are expected to protect it through contractual, technical or professional safeguards.
Where a provider stores or processes information outside Ontario or Canada, the information may be subject to the laws and lawful access requirements of the jurisdiction where it is processed.
08Google reCAPTCHA and Spam Prevention
The Website may use Google reCAPTCHA or a similar security service to distinguish genuine users from automated submissions and protect Website forms from spam, fraud or abuse.
These services may collect technical information, including:
- IP address;
- Device information;
- Browser information;
- Cookies; and
- Website interactions.
The collection and use of information by a third-party security provider are governed by that provider’s terms and privacy policy.
09Cookies and Similar Technologies
The Website may use cookies and similar technologies for:
- Essential Website operation;
- Website security and spam prevention;
- Remembering user preferences;
- Maintaining forms and sessions;
- Diagnosing technical problems; and
- Understanding general Website performance.
You may control cookies through your browser settings. Blocking essential cookies may prevent certain Website features from operating correctly.
If we introduce non-essential analytics, advertising or behavioural tracking technologies, we will update this Policy and provide any consent options required under applicable law.
10Newsletter and Marketing Communications
We send newsletters and promotional electronic messages only where we have consent or another lawful basis.
Marketing communications will identify Mission Control and include a working unsubscribe method.
You may unsubscribe at any time by:
- Selecting the unsubscribe link included in an email; or
- Contacting us at info@missioncontroltc.com.
Unsubscribing from marketing communications does not prevent us from sending necessary administrative or service-related messages, such as appointment confirmations, receipts, security notifications or information directly connected with requested services.
We maintain records of newsletter consent and unsubscribe requests where required.
11Virtual Care and Electronic Communication
Virtual care and electronic communication carry privacy risks, including:
- Unauthorized access;
- Misdirected communications;
- Device compromise;
- Loss of privacy;
- Technical interruption; and
- Internet or service-provider failure.
We take reasonable steps to select appropriate technologies and protect confidentiality.
Clients can further reduce privacy risks by:
- Participating from a private location;
- Protecting devices with passwords;
- Using secure internet connections;
- Avoiding shared email accounts;
- Logging out after sessions;
- Keeping meeting links confidential; and
- Informing us if a communication was sent to the wrong address or accessed by another person.
Email and Website forms should not be used for emergencies or to send extensive sensitive information unless specifically instructed.
12Payment Information
Payments may be processed through an external payment-processing provider.
Mission Control may receive limited transaction information, such as:
- Client name;
- Payment amount;
- Transaction date;
- Payment status; and
- A limited payment reference.
Complete card or banking information may be collected and processed directly by the payment provider rather than stored by Mission Control.
The payment provider’s collection and use of information are governed by its own terms and privacy policy.
13Security Safeguards
We use reasonable administrative, physical and technical safeguards appropriate to the sensitivity of the information.
These safeguards may include:
- Access restrictions;
- Password protection;
- Multi-factor authentication;
- Encryption where appropriate;
- Secure hosting and backups;
- Confidentiality commitments;
- Software and security maintenance;
- Secure deletion or destruction procedures;
- Service-provider access controls; and
- Privacy and security incident procedures.
No Website, email system, video platform or storage system can be guaranteed to be completely secure.
If we become aware of a privacy breach, we will investigate and provide notifications required by applicable laws and professional standards.
14Retention and Destruction
We retain personal information only as long as reasonably necessary to:
- Provide services;
- Maintain continuity of care;
- Meet clinical record-retention obligations;
- Satisfy tax, accounting, insurance and regulatory requirements;
- Respond to complaints or legal matters; and
- Fulfil the purposes described in this Policy.
Clinical, appointment and financial records are retained for the periods required by PHIPA, CRPO standards and other applicable requirements.
When information is no longer required, it will be securely destroyed, deleted or anonymized, subject to technical limitations and lawful backup-retention schedules.
15Access and Correction
Subject to limited legal exceptions, you may request access to personal information or personal health information held about you.
You may also request the correction of incomplete or inaccurate information.
We may require a request to be submitted in writing and may verify your identity before responding.
Access may be refused or limited where permitted by law, including where disclosure could:
- Reveal another person’s information;
- Interfere with a legal or regulatory matter; or
- Create a type of harm recognized by applicable legislation.
To request access or correction, email info@missioncontroltc.com.
16Privacy Complaints
If you have a concern about our handling of personal information, please contact our Privacy Officer at info@missioncontroltc.com.
We will review your concern and respond within a reasonable period.
For concerns involving personal health information, you may also contact the Information and Privacy Commissioner of Ontario.
You may contact the Office of the Privacy Commissioner of Canada where PIPEDA applies.
Nothing in this Policy limits your right to contact CRPO or another applicable regulatory body.
17Minors and Substitute Decision-Makers
Where services are offered to a minor or an individual who may require a substitute decision-maker, consent and privacy rights will be determined according to the individual’s capacity and applicable law.
A parent, guardian or person paying for services does not automatically receive unrestricted access to a capable client’s personal health information.
Specific confidentiality, communication and access arrangements will be explained before services begin.
18Third-Party Links and Social Media
The Website may link to third-party websites and social media platforms.
Those organizations have their own privacy practices. This Privacy Policy does not govern information you provide directly to a third-party website or social media platform.
Interactions on public social media pages are not confidential. Do not use comments, direct messages or public posts to disclose clinical information or request emergency assistance.
19Business Transfers
If Mission Control undergoes a business reorganization, merger, sale or transfer, personal information may be transferred where permitted by law and subject to appropriate confidentiality and security safeguards.
Personal health information will continue to be handled according to PHIPA, professional record-retention requirements and applicable CRPO standards.
20Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our services, technologies, privacy practices, professional obligations or applicable laws.
The revised Policy will be posted on the Website with an updated “Last Updated” date.
Material changes will be communicated through additional methods where required by applicable law.
21Contact the Privacy Officer
For privacy questions, access or correction requests, withdrawal of consent, or privacy-related complaints, please contact:
Mission Control Therapy & Coaching Privacy Officer Email: info@missioncontroltc.com