Privacy Policy

1) Who We Are & How to Contact Us

2) Personal Information We Collect

We collect the following categories of personal information:

We may collect information directly from you, from Providers (e.g., scheduling updates), automatically (e.g., through cookies), and from service providers (e.g., payment processors, video platforms) as necessary to operate the Platform.

3) How We Use Personal Information (Purposes)

We use personal information to:

1. Provide and operate the Platform and Support Services (account creation, scheduling, reminders, secure messaging, troubleshooting, authentication, fraud prevention).
2. Facilitate Provider Services (e.g., enabling virtual sessions and communications between you and Providers).
3. Process payments and maintain accounting and tax records.
4. Communicate with you (e.g., confirmations, notices, updates, service announcements). With consent, we may send optional wellness updates or surveys.
5. Safety and Security (detecting, preventing, and addressing misuse, abuse, or security incidents).
6. Quality, Training & Improvement (service analytics, de‑identified/aggregated reporting, product development).
7. Legal & Compliance (responding to lawful requests, enforcing agreements, protecting rights and safety).

We may de‑identify and/or aggregate information to create statistics and insights that do not identify individuals. We may use and disclose such information for any purpose.

4) Our Legal Basis / Consent

Under Canadian privacy law, we collect, use, and disclose personal information with your knowledge and consent (express or implied), except where otherwise permitted or required by law. We seek express consent for sensitive uses (e.g., optional session recordings). You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. If you withdraw consent for core functions, we may be unable to provide parts of the Platform.

Providers obtain and document informed consent to care and manage clinical records in accordance with their professional and legal obligations.

5) Disclosures to Third Parties

We disclose personal information to:

We do not sell your identifiable personal information.

6) Storage Location & Cross‑Border Transfers

We aim to store personal information on infrastructure located in Canada. Some service providers or technical support personnel may be located outside Canada (e.g., the United States) and may access personal information from those locations. Where cross‑border access occurs, information may be subject to foreign laws and access by foreign authorities. We implement contractual and organizational safeguards to protect personal information regardless of location.

7) Cookies & Similar Technologies

We use:

You can manage cookies through your browser settings and our cookie banner (where available). Disabling some cookies may affect Platform functionality.

8) Retention

We retain personal information only as long as necessary to fulfill the purposes in this Policy or to meet legal, regulatory, tax, accounting, or reporting requirements. Clinical records are retained by Providers in accordance with professional and legal retention rules. When information is no longer required, we will delete, anonymize, or securely de‑identify it.

9) Security

We use administrative, technical, and physical safeguards designed to protect personal information against loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. These include encryption in transit, access controls, logging, and staff training. No method of transmission or storage is completely secure; risks remain.

10) Your Rights & Choices

Depending on your province/territory, you may have rights to access and correct your personal information in our custody or control, and to withdraw consent for further collection, use, or disclosure (subject to restrictions). To exercise these rights, contact privacy@wecarefast.ca. We may require identity verification and may charge a reasonable fee where permitted by law.

If your request relates to clinical records, please contact your Provider directly (they are the record custodian).

You may opt out of non‑essential emails/SMS at any time using unsubscribe options in the message or by contacting us. Transactional/service messages may continue where necessary for the Platform.

11) Telehealth Recordings & Quality Assurance

Clinical sessions are not recorded by default. A recording will occur only with your express informed consent and only for the stated purpose and retention period (typically no more than 30 days for quality assurance/training). Recordings are kept secure, access‑restricted, and deleted after the retention period unless law requires longer retention. Recordings are not part of your clinical record unless required by law or explicitly stated at the time of consent.

12) Children & Parents/Guardians

Where permitted by law, a parent/legal guardian may create and manage an account for a minor and must consent to the minor's use of the Platform. The parent/guardian is responsible for supervising the minor's use and ensuring accurate information is provided. Providers may require the parent/guardian to be present for sessions except where law and professional standards permit otherwise.

13) Third‑Party Services & Links

The Platform may integrate with or link to third‑party tools and websites (e.g., video platforms, payment processors). Your use of third‑party services is governed by their terms and privacy practices. We are not responsible for third‑party content or privacy practices.

14) Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you via the Platform or by email and update the "Effective date" above. Your continued use of the Platform after changes take effect indicates your acceptance of the revised Policy.

15) Questions or Complaints

If you have a question or complaint about our privacy practices, contact privacy@wecarefast.ca. We will investigate and respond. You also have the right to contact or file a complaint with the applicable privacy regulator: