Privacy Policy: website

Rafati Counselling Services / Pantea Rafati MACP, RP(Q)

Pantea Rafati, Registered Psychotherapist (Qualifying), Couples Therapist, EFT Therapist

Last updated: Apr 28, 2022

Purpose of This Privacy Policy

Protecting the privacy and confidentiality of client’s personal information is important to us. Pantea Rafati / Rafati Counselling Services (herein referred to as “We” and “Our”), maintains a commitment to privacy in the handling of personal information provided by and about individuals and families. The terms of this Notice of Privacy Practices apply to Pantea Rafati / Rafati Counselling Services, and its current or future affiliates, employees, and representatives. Please note that for the purposes of psychotherapy treatment, the information below may relate to the personal health information of the participating individual or couples in Psychotherapy services, including in-person and virtually.

Our Privacy Policy attests to our commitment to privacy and demonstrates the ways we ensure that client privacy is protected. Our Privacy Policy applies to the personal health information of all our clients that is in our possession and control and maintains compliance with the Ontario Personal Health Information and Protection Act (PHIPA).

What is Personal Health Information?

Personal health information means identifying information about an individual relating to their physical or mental health (including medical history), the provision of health care to the individual, payments or eligibility for health care, organ and tissue donation and health number.

Our Privacy Policy reflects our compliance with fair information practices, applicable laws and standards of practice.

Why We Collect Information

We ask you for information to establish a relationship and serve your needs. We obtain most of our information about you directly from you, and we may also gather information from other health practitioners whom you have seen and authorized to disclose to us. You are entitled to know how we use your information. We will limit the information we collect to what we need for the purposes of providing services, and we will use it only for those purposes. We will obtain your consent if we wish to use your information.

Consent and Confidentiality

You have the right to determine how your personal health information is used and disclosed. For most health care purposes, your consent is implied as a result of your consent to treatment, however, in all circumstances express consent must be written. Your written Consent to services or to the disclosure of PHI (personal health information) will be documented in the identified client’s file. Clients who have withdrawn consent to disclose PHI must sign and date their written request. It is understood that the consent directive applies only to the PHI that the patient has already provided, and not to PHI that the patient might provide in the future.

Exceptions to Confidentiality

PHIPA permits certain collections, uses, and disclosures of the PHI without your consent. We are permitted and/or required by law to make disclosures of your protected health information without your consent or authorization for the following: Any purpose required by law;

  • Public health activities such as disease, injury, or death, or in connection with public health investigations; If we suspect child abuse, neglect, or domestic violence; To a government oversight agency or governing body conducting audits, investigations, civil or criminal proceedings; Court or administrative ordered subpoena or discovery request; Suspected elder abuse or neglect, or suspected abuse or neglect of a dependent adult; To coroners and/or funeral directors consistent with law; and
  • To certain programs such as Veteran’s Affairs Canada or Victim’s Services, if you are receiving psychotherapy services funded by them.

Limiting Collection

We collect information by fair and lawful means and collect only that information which may be necessary for purposes related to the provision of your care.

Limiting Use, Disclosure and Retention

The information we request from you is used for the purposes defined. We will seek your consent before using the information for purposes beyond the scope of the posted Privacy Statement. There are some types of disclosure of your personal health information that may occur as part of this Practice fulfilling its routine obligations and/or practice management. This includes consultants, supervisors, and clinical records holders for the Practice, on the understanding that they abide by our Privacy Policy, and only to the extent necessary to allow them to provide business services or support to this Practice. We will retain your information securely for the amount of time required, and then it will be destroyed.


We endeavour to ensure that all decisions involving your personal information are based upon accurate and timely information. While we will do our best to base our decisions on accurate information, we rely on you to disclose all material information and to inform us of any relevant changes.

Protecting Your Information

We protect your information with appropriate safeguards and security measures. The Practice maintains personal information mostly in electronic files. Electronic files are housed with Jane (, a secure online clinical records system that is PHIPA compliant. However, some minimal paper records concerning individuals’ personal information are stored in files kept onsite at our office, in a locked cabinet. Access to personal information will be authorized only for the owner and any employees associated with the Practice, other agents who require access in the performance of their duties, and those otherwise authorized by law. We provide information to health care providers acting on your behalf, on the understanding that they are also bound by law and ethics to safeguard your privacy. Other organizations and agents must agree to abide by our Privacy Policy and may be asked to sign contracts to that effect. We will give them only the information necessary to perform the services for which they are engaged, and will require that they not store, use or disclose the information for purposes other than to carry out those services. Our computer systems are password-secured. If you send us an e-mail message that includes personal information, such as your name included in the “address”, we will use that information to respond to your inquiry. Please remember that e-mail is not necessarily secure against interception. If your communication is very sensitive, you should not send it electronically unless the e-mail is encrypted or your browser indicates that the access is secure.

If you have any additional questions or concerns about privacy, we invite you to contact us and we will address your concerns to the best of our ability.

Breach of Privacy

We will notify you in the event a breach occurs involving or potentially involving your unsecured health information.

Questions and Complaints:

If you have any questions about our privacy practices and procedures, we encourage you to contact us.

Return to Home page