Privacy Policy
Privacy Policy
Personal Privacy
Therapy sessions are confidential with a few exceptions—for example, if a child is at risk of harm, if there is an immediate threat to someone’s safety, or if disclosure is required by a court order.
We comply with several Acts that protect your personal information, including PIPEDA (Personal Information Protection and Electronic Documents Act), PHIPA (Personal Health Information Protection Act), and the Quality of Care Information Protection Act. Details about how these laws apply to your therapy are outlined in our Intake Form. Our Intake Coordinator will also provide further information and answer any questions you may have about the security of your information.
Before starting therapy, you will receive a comprehensive overview of our confidentiality policy to review and sign.
Website Privacy
The information below refers specifically to data collected while you are visiting and using this website.
Who we are
Our website address is: https://geraldinecrisci.com
What personal data we collect and why we collect it
Comments
Comments are not enabled on this website.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms
We keep contact form submissions for a 1 year period for customer service purposes, but we do not use the information submitted through them for marketing purposes. All email marketing opt-in forms used on this site, such as popups, floating bars, inline-forms, and others, require explicit consent from users before adding them to our mailing list. Information gathered is used strictly for that purpose for which it was intended. We do not share the information submitted on an opt-in form with any third parties.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
We share information with third parties who help us track website visitors and form submissions. We use Google analytics services.
Website users who don’t want their data collected with Google Analytics can install the Google Analytics opt-out browser add-on at: https://tools.google.com/dlpage/gaoptout
Who we share your data with
Your data is shared with:
Google Analytics: https://policies.google.com/technologies/partner-sites
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information. While laws like the GDPR have “right to erasure,” we are not required to erase records needed for other aspects of our business such as: charges disputed by a customer, tax audition, or for other legal concerns.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
GDPR User Data Request: Should you wish to have data access, have data forgotten or data rectfied in comments, posts and our database, please submit a request using our contact form.
Where we send your data
Visitor comments (which are disabled on this site) may be checked through Askimet, an automated spam detection service. https://automattic.com/privacy/
Your contact information
We keep contact form submissions for a 1 year period for customer service purposes, but we do not use the information submitted through them for marketing purposes.
Contact us by contact form for privacy-specific concerns, such as:
- Getting a copy of your data
- Updating your data
- Deleting your data
Or, should you wish to have data access, have data forgotten or data rectfied in comments, posts and our database, please submit a request using our contact form.
Additional information
How we protect your data
Our website is protected with an SSL certificate. A website needs an SSL certificate in order to keep user data secure, verify ownership of the website, prevent attackers from creating a fake version of the site, and gain user trust. Users’ data is protected by Google Re-Captcha (two-factor authentication), and staff training in data protection.
What data breach procedures we have in place
We are required to report certain types of data breaches to relevant authorities within 72 hours, unless the breach is considered harmless and poses no risk to individual data. However if a breach is high-risk, then we must also inform individuals who are impacted right away.
What third parties we receive data from
Google Analytics: https://policies.google.com/technologies/partner-sites
What automated decision making and/or profiling we do with user data
No automated decision making occurs on this website.