Privacy policy

Lenton-Brym Zeifman Psychology Professional Corporation operating as Wisepath Psychology (“Wisepath,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of the personal and health information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information in connection with our psychological services and our website. Our privacy practices are designed to comply with the laws and professional requirements that apply to the services we provide in Ontario, including the Personal Health Information Protection Act, 2004 (“PHIPA”), the Health Care Consent Act, 1996, and other applicable Canadian privacy laws.

Your Privacy Rights at a Glance

You generally have the right to:

• know what personal and health information we collect and how we use and share it;
• access and receive a copy of your records, subject to limited exceptions described below;
• request correction of information you believe is inaccurate or incomplete;
• request that we limit certain uses or disclosures of your information, or communicate with you by an alternative method, where reasonably possible;
• withdraw or limit consent for certain uses or disclosures, subject to legal, regulatory, and clinical limitations;
• be notified if a breach involving your information meets the threshold for notification under PHIPA;
• raise a concern or file a complaint with Wisepath or with the Information and Privacy Commissioner of Ontario, without fear of retaliation.

Each of these rights, and the exceptions and procedures that apply to it, is described in more detail below.

Definitions

• “Personal information” means information about an identifiable individual.
• “Personal health information” means personal information relating to an individual’s physical or mental health, health history, or health care, and related identifying, payment, or administrative information, as defined under PHIPA.
• “You” and “client” refer to the individual receiving or seeking services from Wisepath or, where applicable, a substitute decision-maker acting on that individual’s behalf.

Information We Collect

Depending on your relationship with Wisepath, we may collect information such as:

• your name, contact information, date of birth, and other identifying information;
• contact information for an emergency contact or other person you have authorized us to contact when appropriate;
• information you provide when contacting us or requesting a consultation;
• health history, symptoms, diagnoses, treatment history, medications, and other information relevant to your care;
• information gathered through psychological assessment, questionnaires, interviews, or clinical measures;
• clinical notes, treatment plans, reports, correspondence, and records of services provided;
• information provided by other health professionals, family members, close others, or other third parties, where you have consented or where collection is otherwise permitted by law;
• billing, insurance, and payment-related information, including your Social Insurance Number or similar identifier where required for insurance, tax, or reporting purposes;
• appointment and communication records; and
• limited technical information generated when you use our website, such as IP address, browser or device information, pages visited, and cookie or analytics information.

We aim to collect only the information reasonably necessary for the purposes described in this policy and for the provision of our services.

How We Use Your Information

We may use your personal and health information to:

• respond to inquiries and arrange consultation calls or appointments;
• assess your needs and determine whether our services are appropriate;
• provide psychological assessment, psychotherapy, consultation, and other professional services;
• develop and monitor treatment plans;
• coordinate care with other providers when appropriate and authorized;
• support clinical consultation, supervision, continuity of care, quality assurance, and appropriate review of clinical records within Wisepath;
• prepare reports, letters, invoices, receipts, or insurance documentation;
• communicate with you about appointments, scheduling, billing, and your care;
• maintain appropriate clinical and business records;
• manage and improve the quality and operation of our practice;
• meet professional, regulatory, insurance, legal, and accounting requirements;
• protect the safety, security, and integrity of our services and systems; and
• comply with applicable laws and professional obligations.

Clinicians at Wisepath may consult with one another when clinically appropriate for purposes such as treatment planning, clinical consultation, supervision, continuity of care, and quality assurance. Access to identifiable information is limited to those who have an appropriate clinical or operational reason to access it, and information may be limited or de-identified where appropriate.

Where possible, information used for administrative, quality-improvement, or statistical purposes will be limited or de-identified.

We do not sell personal health information.

Consent and Your Choices

We generally collect, use, and disclose personal health information with your consent. Depending on the circumstances, consent may be express or implied, as permitted under PHIPA.

You may withdraw or limit your consent for certain uses or disclosures of your information, subject to legal, regulatory, contractual, and clinical limitations. Withdrawal of consent does not apply retroactively and may affect our ability to provide particular services.

You may also ask us to limit how we use or disclose your information, or to communicate with you by an alternative method or at an alternative location. We will accommodate reasonable requests where doing so is administratively feasible and consistent with our professional and legal obligations.

Where services involve a couple or another close person participating in treatment, we will explain any additional expectations regarding confidentiality and the handling of information as part of the informed-consent process for that service.

When Information May Be Shared

We do not disclose personal or health information to others except with your consent or where permitted or required by law.

With your authorization, we may share relevant information with individuals or organizations such as:

• physicians and other health professionals;
• insurers or benefit providers;
• lawyers or other professionals you designate;
• family members, partners, or other close persons involved in your care; or
• other individuals or organizations you ask us to communicate with.

There are also limited circumstances in which information may be disclosed without your consent, including where we:

• must comply with a legal reporting obligation, such as a report of suspected child abuse or neglect;
• receive a court order, subpoena, or other lawful process;
• are subject to oversight by a regulatory or professional body responsible for Wisepath or its clinicians, such as the College of Psychologists and Behaviour Analysts of Ontario;
• are required to report to public health or other government authorities;
• need to address a serious and imminent risk of harm to you, another identifiable person, or the public (sometimes called a duty to warn or protect);
• are responding to a coroner or similar authority in connection with a death;
• are participating in a Workplace Safety and Insurance Board (WSIB) or similar claims process, where applicable; or
• are otherwise permitted or required to disclose information under PHIPA or other applicable law.

When disclosure is necessary, we aim to disclose only the information reasonably necessary for the purpose.

Minors and Family Information

Where we provide services to a minor, or to a client who is participating in services alongside family members or other close persons, additional considerations apply.

• Under Ontario law, there is no fixed minimum age for consenting to treatment. Capacity to consent is based on a client’s ability to understand information relevant to a decision and to appreciate the reasonably foreseeable consequences of the decision, not on age alone.
• Where a client is capable of consenting to their own treatment, decisions about their care and about the collection, use, and disclosure of their personal health information, including disclosure to a parent or guardian, are generally directed by the client, subject to limited exceptions under applicable law.
• Where a client is not capable of consenting, a parent, guardian, or other substitute decision-maker authorized under the Health Care Consent Act, 1996 or other applicable law may act on the client’s behalf, including with respect to access to records, subject to limitations under applicable law and professional standards.
• Where we collect information about a family member, partner, or other close person in the course of providing services to a client (for example, in couple, family, or collateral sessions), we handle that information in accordance with this policy and any additional terms discussed as part of informed consent for that service.

Virtual Services

Wisepath may provide services by secure video, telephone, or other forms of electronic communication.

Although we take reasonable steps to use technology appropriate for confidential health care communication, no electronic platform can eliminate all privacy or security risks. Potential risks associated with virtual services can include unauthorized access, accidental disclosure, technical failures, interruptions, or information being overheard or viewed by another person.

We encourage clients to participate in virtual appointments from a private location, use a secure internet connection where possible, and take reasonable steps to prevent others from seeing or overhearing the session.

At the beginning of virtual care, or when otherwise appropriate, we may confirm information such as your identity, current location, telephone number, or emergency contact information so that we can respond appropriately if a safety or technical issue arises.

Virtual services may not be appropriate in every circumstance. We may recommend a different method of care where clinically, legally, or practically appropriate.

Service Providers and Technology

Wisepath uses third-party service providers to support the operation of the practice. These may include providers of:

• electronic health-record or practice-management systems;
• videoconferencing and telehealth services;
• email and electronic communications;
• telephone and fax services;
• payment processing;
• website hosting and forms;
• secure file storage;
• AI-assisted clinical documentation services;
• accounting, legal, and other professional services; and
• information-technology and security services.

At present, Wisepath uses Jane for practice management, scheduling, intake forms, clinical records, telehealth, and certain payments; Google Workspace for business email and related administrative communications; Heidi Health for AI-assisted clinical documentation, including transcription and generation of draft clinical notes, only with the client’s express written consent; Replit to host our website; Resend to transmit website contact-form submissions; and Grasshopper for business telephone and fax services. Payments may also be received by direct e-transfer. These providers may process or store information on our behalf. We select service providers with consideration for privacy and security and use contractual or other safeguards where appropriate.

We will not use Heidi Health during a clinical encounter unless the client has provided express written consent. Where that consent has been provided, information from the encounter may be processed by Heidi on Wisepath’s behalf to assist with generating clinical documentation. Clinicians remain responsible for reviewing and finalizing any documentation before it becomes part of the clinical record.

As a general practice, personal health information is maintained in Jane as Wisepath’s primary clinical record system. Clinical reports or related documents may sometimes be drafted temporarily on local computers and are transferred to Jane when complete; local working copies are then deleted in accordance with our privacy and security practices.

Some service providers may process or store information outside Ontario, including elsewhere in Canada or in the United States. When information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction, including lawful access by government or law enforcement authorities in that jurisdiction.

Email, Text Messaging, and Electronic Communication

Email, text messaging, and other ordinary electronic communications may not be completely secure. If you choose to communicate with us using these methods, there is some risk that information could be intercepted, misdirected, or accessed by someone other than the intended recipient.

We therefore encourage you to avoid sending highly sensitive clinical information through ordinary email or website forms unless necessary or unless a secure method has been provided.

Electronic communications are intended primarily for administrative purposes such as scheduling, forms, billing, and brief coordination. They should not be used for emergencies or urgent clinical concerns.

Website Privacy

You may visit much of our website without identifying yourself.

When you submit a contact form, request a consultation, or otherwise communicate with us through the website, the information you choose to provide is transmitted using our website and email service providers, currently Replit and Resend, so that we can respond to your request. Website forms are intended primarily for initial contact and administrative information; please avoid including highly sensitive clinical information unless necessary.

Our website may use cookies and similar technologies, including analytics and advertising tools such as Google Analytics and Google Ads, to understand how visitors use the website, measure website performance, and evaluate the effectiveness of advertising. These technologies may collect information such as browser and device information, IP address, approximate location, referring sources, pages visited, interactions with the website, and cookie or similar identifiers. We do not intentionally provide clinical information submitted through our contact forms or clinical systems to analytics or advertising providers. You can limit the use of cookies and analytics through your browser settings or opt-out tools offered by analytics and advertising providers, such as Google’s Ads Settings and the Google Analytics opt-out browser add-on.

Visiting the Wisepath website or submitting an inquiry does not, by itself, establish a psychologist-client relationship.

Our website may contain links to third-party websites. Wisepath is not responsible for the privacy practices of websites or services operated by other organizations.

Safeguarding Your Information

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold.

These may include measures such as access controls, passwords and authentication, encrypted systems and communications where appropriate, secure record-storage systems, staff confidentiality requirements, secure disposal practices, and limiting access to information to individuals who require it for their role.

No electronic system can be guaranteed to be completely secure. If we become aware of a privacy or security incident involving your information, we will investigate and take appropriate steps to contain and address it. Where required under PHIPA, we will notify affected individuals and the Information and Privacy Commissioner of Ontario.

Retention and Destruction of Records

We retain clinical and business records for the periods required by applicable law and professional standards.

As a general practice, Wisepath retains individual clinical records for at least 10 years after the later of the client’s last professional contact or the client reaching 18 years of age, unless a longer retention period is required or appropriate.

When records are no longer required, they are securely destroyed, deleted, or de-identified in a manner appropriate to the format and sensitivity of the information.

Accessing or Correcting Your Information

You may request access to personal or health information we hold about you and may request correction of information you believe is inaccurate or incomplete.

These rights are subject to exceptions established by PHIPA and professional standards. For example, different rules may apply to certain psychological testing materials, information relating to another person, information prepared for legal proceedings, or separately maintained psychotherapy notes.

We may ask that an access or correction request be made in writing and may take reasonable steps to verify your identity before releasing or changing information. Where permitted by law, reasonable fees may apply for providing copies of records.

A written request for correction will generally be addressed as soon as reasonably possible and no later than 30 days after it is received. In circumstances permitted by PHIPA, this period may be extended by up to an additional 30 days, in which case you will be notified of the extension and the reason for it.

A correction will generally be made where you demonstrate that information in the record is inaccurate or incomplete for the purposes for which it is used and provide the information necessary to make the correction.

The right to request correction does not mean that a client may require a psychologist to change a good-faith professional opinion or clinical observation simply because the client disagrees with it.

In particular, to the extent that information in a record reflects a professional opinion or observation made in good faith, Wisepath is not required under PHIPA to alter that opinion or observation. This can include, depending on the circumstances, clinical impressions, diagnostic opinions, case formulations, interpretations of assessment findings, risk assessments, treatment recommendations, or other professional judgments.

The correction process is therefore intended to address information that is inaccurate or incomplete; it is not a mechanism for requiring a clinician to replace a good-faith professional judgment with a different opinion.

Similarly, Wisepath may not be required to correct information that was created by another person or organization where we do not have sufficient knowledge, expertise, or authority to make the requested correction.

If Wisepath refuses all or part of a correction request, we will provide the information required by PHIPA, including the reason for the refusal. You may have the right to prepare a concise statement of disagreement describing the correction you requested and require that it be attached to the relevant record. Where required, the statement will accompany later disclosures of the information to which it relates.

You may also have the right to make a complaint regarding the refusal to the Information and Privacy Commissioner of Ontario.

For access requests and other requests relating to your personal health information, the timelines, procedures, fees, and exceptions established by PHIPA will apply.

Privacy Concerns and Complaints

If you have a question, concern, or complaint about how Wisepath handles personal information, we encourage you to contact our Privacy Officer first so that we can respond.

Privacy Officer

You may also have the right to contact the Information and Privacy Commissioner of Ontario (IPC) regarding concerns about the handling of personal health information.

Wisepath will not retaliate against you for raising a privacy concern or exercising a privacy right.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes to our practices, technology, services, or legal obligations. The current version will be posted on our website with its effective date, and you may request a paper copy of the current version at any time.

If a change materially affects how we handle personal or health information, we will provide additional notice where required by law.

Lenton-Brym Zeifman Psychology Professional Corporation operating as Wisepath Psychology (“Wisepath,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of the personal and health information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information in connection with our psychological services and our website. Our privacy practices are designed to comply with the laws and professional requirements that apply to services provided to clients in New York, including New York Education Law Article 153 (Psychology), the Rules of the Board of Regents on Unprofessional Conduct (8 NYCRR Part 29), New York Public Health Law § 18, New York Civil Practice Law and Rules (“CPLR”) § 4507, and other applicable New York and federal privacy laws.

Your Privacy Rights at a Glance

You generally have the right to:

• know what personal and health information we collect and how we use and share it;
• access and receive a copy of your records, subject to applicable exceptions, including those in New York Public Health Law § 18;
• request correction or amendment of information you believe is inaccurate or incomplete, where applicable;
• request that we limit certain uses or disclosures of your information, or communicate with you by an alternative method, where reasonably possible;
• withdraw or limit consent for certain uses or disclosures, subject to legal, regulatory, contractual, and clinical limitations;
• be notified if a breach involving your information meets the threshold for notification under applicable law, including New York General Business Law § 899-aa; and
• raise a concern or file a complaint with Wisepath or an appropriate New York regulatory authority, without fear of retaliation.

Confidential communications between a New York-registered psychologist and client are also protected by the psychologist-client privilege under CPLR § 4507, subject to applicable exceptions and waivers.

Each of these rights, and the exceptions and procedures that apply to it, is described in more detail below.

Definitions

• “Personal information” means information about an identifiable individual. New York General Business Law § 899-aa also defines “personal information” for purposes of New York’s data-breach law.
• “Health information” means information relating to an individual’s physical or mental health, health history, health care, or related identifying, payment, or administrative information.
• “You” and “client” refer to the individual receiving or seeking services from Wisepath or, where applicable, a parent, guardian, personal representative, or other person legally authorized to act on that individual’s behalf.

Information We Collect

Depending on your relationship with Wisepath, we may collect information such as:

• your name, contact information, date of birth, and other identifying information;
• contact information for an emergency contact or other person you have authorized us to contact when appropriate;
• information you provide when contacting us or requesting a consultation;
• health history, symptoms, diagnoses, treatment history, medications, and other information relevant to your care;
• information gathered through psychological assessment, questionnaires, interviews, or clinical measures;
• clinical notes, treatment plans, reports, correspondence, and records of services provided;
• information provided by other health professionals, family members, close others, or other third parties, where you have consented or where collection is otherwise permitted by law;
• billing, insurance, and payment-related information, including your Social Security Number or similar identifier where required for insurance, tax, or reporting purposes;
• appointment and communication records; and
• limited technical information generated when you use our website, such as IP address, browser or device information, pages visited, and cookie or analytics information.

We aim to collect only the information reasonably necessary for the purposes described in this policy and for the provision of our services.

How We Use Your Information

We may use your personal and health information to:

• respond to inquiries and arrange consultation calls or appointments;
• assess your needs and determine whether our services are appropriate;
• provide psychological assessment, psychotherapy, consultation, and other professional services;
• develop and monitor treatment plans;
• coordinate care with other providers when appropriate and authorized;
• support clinical consultation, supervision, continuity of care, quality assurance, and appropriate review of clinical records within Wisepath;
• prepare reports, letters, invoices, receipts, or insurance documentation;
• communicate with you about appointments, scheduling, billing, and your care;
• maintain appropriate clinical and business records;
• manage and improve the quality and operation of our practice;
• meet professional, regulatory, insurance, legal, and accounting requirements;
• protect the safety, security, and integrity of our services and systems; and
• comply with applicable laws and professional obligations.

Clinicians at Wisepath may consult with one another when clinically appropriate for purposes such as treatment planning, clinical consultation, supervision, continuity of care, and quality assurance. Where consultation involves identifiable client information, such sharing occurs with the client’s informed consent or as otherwise authorized or required by law. Information may be limited or de-identified where appropriate.

Where possible, information used for administrative, quality-improvement, or statistical purposes will be limited or de-identified.

We do not sell health information.

Consent and Your Choices

We generally collect, use, and disclose personal and health information with your consent or as otherwise permitted or required by law. Under 8 NYCRR § 29.1(b)(8), revealing personally identifiable facts, data, or information obtained in a professional capacity without the prior consent of the patient or client is considered unprofessional conduct, except where disclosure is authorized or required by law.

You may withdraw or limit your consent for certain uses or disclosures of your information, subject to legal, regulatory, contractual, and clinical limitations. Withdrawal of consent does not apply retroactively and may affect our ability to provide particular services.

You may also ask us to limit how we use or disclose your information, or to communicate with you by an alternative method or at an alternative location. We will accommodate reasonable requests where doing so is administratively feasible and consistent with our professional and legal obligations.

Where services involve a couple or another close person participating in treatment, we will explain any additional expectations regarding confidentiality and the handling of information as part of the informed-consent process for that service.

When Information May Be Shared

We do not disclose personal or health information to others except with your consent or where permitted or required by law. New York professional rules generally prohibit disclosure of personally identifiable information obtained in a professional capacity without consent, except as authorized or required by law (8 NYCRR § 29.1(b)(8)).

With your authorization, we may share relevant information with individuals or organizations such as:

• physicians and other health professionals;
• insurers or benefit providers;
• lawyers or other professionals you designate;
• family members, partners, or other close persons involved in your care; or
• other individuals or organizations you ask us to communicate with.

There are also limited circumstances in which information may be disclosed without your consent, including where we:

• must comply with a legal reporting obligation, such as reporting suspected child abuse or maltreatment as required of mandated reporters under New York Social Services Law § 413;
• are required to respond to a court order or other lawful process, subject to applicable privileges and protections, including CPLR § 4507;
• are subject to oversight by a regulatory or professional body responsible for Wisepath or its clinicians, such as the New York State Education Department, Office of Professional Discipline, or State Board for Psychology;
• are required to report to public health or other government authorities;
• are permitted or required by applicable law to address a serious and imminent risk of harm to you, another identifiable person, or the public;
• are responding to a medical examiner, coroner, or similar authority where disclosure is authorized or required by law;
• are participating in an insurance, workers’ compensation, disability, no-fault, or similar claims process, where applicable and legally authorized; or
• are otherwise permitted or required to disclose information under applicable New York or federal law.

When disclosure is necessary, we aim to disclose only the information reasonably necessary for the purpose and to preserve applicable confidentiality and privilege protections.

Minors and Family Information

Where we provide services to a minor, or to a client who is participating in services alongside family members or other close persons, additional considerations apply.

• New York rules regarding a minor’s ability to consent to mental-health services depend on the type of service, the setting, the minor’s circumstances, and other applicable law. For example, New York Mental Hygiene Law § 33.21 establishes specific consent rules for minors receiving outpatient mental-health services in programs licensed or operated by the Office of Mental Health. Other laws may apply in different settings.
• Where a parent or guardian is legally authorized to consent to a minor’s care, that person may have rights relating to the minor’s records, subject to exceptions and limitations under New York Public Health Law § 18 and other applicable law.
• Where a minor is legally authorized to consent to their own care, decisions about treatment and disclosure of information will be handled in accordance with the law applicable to that service and circumstance.
• Where we collect information about a family member, partner, or other close person in the course of providing services to a client (for example, in couple, family, or collateral sessions), we handle that information in accordance with this policy and any additional terms discussed as part of informed consent for that service.

Virtual Services

Wisepath may provide services by secure video, telephone, or other forms of electronic communication.

Although we take reasonable steps to use technology appropriate for confidential health care communication, no electronic platform can eliminate all privacy or security risks. Potential risks associated with virtual services can include unauthorized access, accidental disclosure, technical failures, interruptions, or information being overheard or viewed by another person.

We encourage clients to participate in virtual appointments from a private location, use a secure internet connection where possible, and take reasonable steps to prevent others from seeing or overhearing the session.

At the beginning of virtual care, or when otherwise appropriate, we may confirm information such as your identity, current location, telephone number, or emergency contact information so that we can respond appropriately if a safety or technical issue arises.

Virtual services may not be appropriate in every circumstance. We may recommend a different method of care where clinically, legally, or practically appropriate.

Service Providers and Technology

Wisepath uses third-party service providers to support the operation of the practice. These may include providers of:

• electronic health-record or practice-management systems;
• videoconferencing and telehealth services;
• email and electronic communications;
• telephone and fax services;
• payment processing;
• website hosting and forms;
• secure file storage;
• AI-assisted clinical documentation services;
• accounting, legal, and other professional services; and
• information-technology and security services.

At present, Wisepath uses Jane for practice management, scheduling, intake forms, clinical records, telehealth, and certain payments; Google Workspace for business email and related administrative communications; Heidi Health for AI-assisted clinical documentation, including transcription and generation of draft clinical notes, only with the client’s express written consent; Replit to host our website; Resend to transmit website contact-form submissions; and Grasshopper for business telephone and fax services. Payments may also be received by direct e-transfer. These providers may process or store information on our behalf. We select service providers with consideration for privacy and security and use contractual or other safeguards where appropriate.

We will not use Heidi Health during a clinical encounter unless the client has provided express written consent. Where that consent has been provided, information from the encounter may be processed by Heidi on Wisepath’s behalf to assist with generating clinical documentation. Clinicians remain responsible for reviewing and finalizing any documentation before it becomes part of the clinical record.

As a general practice, health information is maintained in Jane as Wisepath’s primary clinical record system. Clinical reports or related documents may sometimes be drafted temporarily on local computers and are transferred to Jane when complete; local working copies are then deleted in accordance with our privacy and security practices.

Some service providers may process or store information outside New York, including elsewhere in the United States or in Canada. When information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction, including lawful access by government or law-enforcement authorities in that jurisdiction.

Email, Text Messaging, and Electronic Communication

Email, text messaging, and other ordinary electronic communications may not be completely secure. If you choose to communicate with us using these methods, there is some risk that information could be intercepted, misdirected, or accessed by someone other than the intended recipient.

We therefore encourage you to avoid sending highly sensitive clinical information through ordinary email or website forms unless necessary or unless a secure method has been provided.

Electronic communications are intended primarily for administrative purposes such as scheduling, forms, billing, and brief coordination. They should not be used for emergencies or urgent clinical concerns.

Website Privacy

You may visit much of our website without identifying yourself.

When you submit a contact form, request a consultation, or otherwise communicate with us through the website, the information you choose to provide is transmitted using our website and email service providers, currently Replit and Resend, so that we can respond to your request. Website forms are intended primarily for initial contact and administrative information; please avoid including highly sensitive clinical information unless necessary.

Our website may use cookies and similar technologies, including analytics and advertising tools such as Google Analytics and Google Ads, to understand how visitors use the website, measure website performance, and evaluate the effectiveness of advertising. These technologies may collect information such as browser and device information, IP address, approximate location, referring sources, pages visited, interactions with the website, and cookie or similar identifiers. We do not intentionally provide clinical information submitted through our contact forms or clinical systems to analytics or advertising providers. You can limit the use of cookies and analytics through your browser settings or opt-out tools offered by analytics and advertising providers, such as Google’s Ads Settings and the Google Analytics opt-out browser add-on.

Visiting the Wisepath website or submitting an inquiry does not, by itself, establish a psychologist-client relationship.

Our website may contain links to third-party websites. Wisepath is not responsible for the privacy practices of websites or services operated by other organizations.

Safeguarding Your Information

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold. New York General Business Law § 899-bb requires reasonable safeguards for certain computerized “private information” of New York residents.

These measures may include access controls, passwords and authentication, encrypted systems and communications where appropriate, secure record-storage systems, staff confidentiality requirements, secure disposal practices, service-provider safeguards, and limiting access to information to individuals who require it for their role.

No electronic system can be guaranteed to be completely secure. If we become aware of a privacy or security incident involving your information, we will investigate and take appropriate steps to contain and address it. Where required, we will notify affected individuals and applicable government authorities in accordance with New York General Business Law § 899-aa and other applicable law.

Retention and Destruction of Records

We retain clinical and business records for the periods required by applicable law and professional standards.

Under 8 NYCRR § 29.2(a)(3), patient records generally must be retained for at least six years. Records of minor patients must be retained for at least six years and until one year after the minor patient reaches the age of 21 years. Wisepath may retain records for longer where required or appropriate.

When records are no longer required, they are securely destroyed, deleted, or de-identified in a manner appropriate to the format and sensitivity of the information.

Accessing or Correcting Your Information

You may request access to personal or health information we hold about you and may request correction or amendment of information you believe is inaccurate or incomplete.

New York Public Health Law § 18 gives qualified persons rights to access patient information, subject to specified exceptions and procedures. Upon a written request, a health care provider generally must provide an opportunity to inspect patient information within 10 days, subject to the limitations in the statute. Different rules may apply to personal notes and observations, information concerning another person, information received from another practitioner, information prepared for legal proceedings, or information whose disclosure may cause substantial and identifiable harm.

We may ask that an access or correction request be made in writing and may take reasonable steps to verify your identity before releasing or changing information. Where permitted by law, reasonable fees may apply for copies of records.

If access is denied under circumstances covered by New York Public Health Law § 18, you may have a right to seek review of that denial through the procedures established by the statute and the New York State Department of Health.

Under New York Public Health Law § 18(8), a qualified person may challenge the accuracy of information maintained in the patient record. That statutory process applies to factual statements and does not include a provider’s observations, inferences, or conclusions. We will address correction or amendment requests in accordance with applicable law and professional standards.

Where the Health Insurance Portability and Accountability Act (“HIPAA”) applies to a particular record or service, additional federal rights regarding access to and amendment of records may apply.

Privacy Concerns and Complaints

If you have a question, concern, or complaint about how Wisepath handles personal information, we encourage you to contact our Privacy Officer first so that we can respond.

Privacy Officer

New York clients may also contact the New York State Education Department, Office of Professional Discipline, regarding concerns about the professional conduct of a New York-licensed psychologist. Certain denials of access to patient information under New York Public Health Law § 18 may be reviewed through the New York State Department of Health. Where HIPAA applies, individuals may also have the right to submit a privacy complaint to the U.S. Department of Health and Human Services, Office for Civil Rights.

Wisepath will not retaliate against you for raising a privacy concern or exercising a privacy right.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes to our practices, technology, services, or legal obligations. The current version will be posted on our website with its effective date, and you may request a paper copy of the current version at any time.

If a change materially affects how we handle personal or health information, we will provide additional notice where required by law.