— Privacy Policy
How your information is held, protected, and respected.
Effective July 2026
1. Who we are
Haya Healing Psychotherapy ("we", "us", "our") is a virtual psychotherapy practice operating in the Province of Ontario, Canada, owned and operated by Momna Sajid, Registered Psychotherapist (Qualifying). This Privacy Policy explains how we collect, use, disclose, and protect personal and personal health information in accordance with Ontario's Personal Health Information Protection Act, 2004 (PHIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
2. What information we collect
Through this website we may collect:
- Contact form submissions (first name, last name, email, message you send us)
Once you become a client, additional personal health information is collected and stored within our practice management platform, Jane App, which is PHIPA-compliant and hosted on Canadian servers. The terms of that collection are reviewed with you at intake.
3. How we use your information
- To respond to your inquiry and arrange an initial consultation
- To provide clinical psychotherapy services and maintain a clinical record
- To issue receipts for insurance reimbursement
- To meet our regulatory, legal, and professional obligations under the College of Registered Psychotherapists of Ontario (CRPO)
4. How long we keep your information
Clinical records are retained in accordance with CRPO standards: a minimum of ten (10) years following the last contact with an adult client, and a minimum of ten (10) years past the age of majority for a minor client. Contact form submissions received without follow-on engagement are deleted within twelve months.
5. Confidentiality & its limits
Everything shared in session is confidential and protected under PHIPA. Limits to confidentiality include:
- Imminent risk of serious harm to self or others
- Suspected abuse or neglect of a child (Ontario's Child, Youth and Family Services Act)
- Court subpoena of clinical records
- Disclosure required by the CRPO during a regulatory inquiry
These limits are reviewed with you in plain language at your intake session.
6. How your information is protected
- Sessions are conducted via Jane App's PHIPA-compliant video platform with end-to-end encryption in transit
- Records are stored on encrypted, Canadian-hosted servers
- Devices accessing client information are password-protected and never shared
- Paper records (if any) are stored in a locked cabinet
7. Your rights
You have the right to:
- Request access to your personal health information
- Request correction of inaccurate information
- Withdraw consent for ongoing communications
- Receive a copy of your file (in compliance with CRPO standards)
- File a complaint with the Information and Privacy Commissioner of Ontario
8. Third-party services we use
- Jane App — Canadian, PHIPA-compliant booking, video sessions, and clinical record management
- Google Workspace — encrypted email and document storage
9. Cookies & website analytics
This website uses minimal functional cookies required for the site to operate. We do not sell, rent, or trade personal information. Where analytics are used, they are privacy-friendly and anonymized.
10. Contact
Questions about this policy, or requests to access or correct your information, can be directed to momna@hayahealingpsychotherapy.com.