Privacy Policy

This Privacy Policy explains how Hesed ADHD ("we", "our,", us") collects, uses, discloses, and protects personal information. It applies to our Website and Online Features, including www.adhdhesed.co, the optional forms powered by Wix, the newsletter sign-up form powered by Mailchimp, and links to our external Intakes scheduling tool, Calendly.

If you choose to book services as a Client, you will also review and sign a separate Service Agreement and consent forms that explain how your personal and health information is handled within our external practice management platform, Jane Software. Jane Software has its own Privacy Policy.

Our Approach to Privacy

We collect, use, and disclose personal information only as reasonably necessary to provide our services and operate our website. We aim to explain what we collect, why we collect it, and how it is protected. This Privacy Policy is designed to comply with British Columbia’s Personal Information Protection Act (PIPA), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and, where applicable, other international privacy laws.

What We Collect

On our public website, we collect only limited personal information. If you submit the optional FAQ form (via Wix), we collect the name you choose to provide (it does not need to be your full legal name), your email address, and your question so that we can respond. This information is retained only as long as necessary to answer your inquiry. If you sign up for our newsletter (via Mailchimp), your name and email address are stored securely by Mailchimp, which has its own privacy and security practices. You can unsubscribe from these communications at any time by using the link in each email.

Our website also uses cookies and similar technologies. Essential cookies are necessary for the site to function. With your explicit opt-in consent, we may also use non-essential cookies, such as analytics (for example, Wix Analytics), which may show us information like approximate city and country, pages viewed, and visit duration. If you decline non-essential cookies, we do not receive this analytics information. We do not collect your date of birth, home address, payment or credit card details, or other sensitive information through our public website. We also do not sell or share your personal information for advertising purposes.

Third-Party Platforms

We use third-party platforms to operate parts of our Website:

Wix Privacy Policy: https://www.wix.com/about/privacy
Mailchimp Privacy & Security: https://mailchimp.com/legal/privacy/
Calendly Privacy Notice: https://calendly.com/legal/privacy-notice

When you interact with these platforms, the information you provide is collected directly by them and governed by their policies. Hesed ADHD does not control how these platforms retain or manage your information.

Consent and Withdrawing Consent

You can browse our website without providing personal information. When you provide details through a form, sign up for the newsletter, or accept non-essential cookies, you consent to those uses. You may withdraw your consent at any time by contacting us in writing (for example, by email). Withdrawal is not retroactive and may affect our ability to provide certain services. Refusing non-essential cookies will not affect the basic functionality of the website.

Cross-Border Data Transfers

Some of the third-party platforms we use (such as Wix, Mailchimp, and Calendly) may process or store information in the United States or other countries. This means your information may be subject to the laws of those jurisdictions. We take reasonable steps to ensure that your information continues to be protected in a manner comparable to Canadian standards.

Accuracy, Security, and Retention

We take steps to keep personal information accurate and up to date. Information is safeguarded through organizational measures (such as staff training and privacy reviews), physical measures (such as secure storage and secure shredding of paper records), and technical measures (such as passwords, encryption, firewalls, and secure backups). We retain information only for as long as necessary to fulfill its purposes and comply with legal, professional, or legitimate business requirements.

Breach Notification

If a privacy or security incident occurs that creates a real risk of significant harm, we will notify affected individuals as soon as reasonably possible and will report to the appropriate privacy authorities as required by law.

Marketing Communications

If you subscribe to our newsletter (via Mailchimp), we may send you updates about services, resources, or availability. You may unsubscribe at any time using the link in each email. Unsubscribing from marketing does not affect essential or transactional communications.

Access and Correction

You may request access to your personal information or ask us to correct it by contacting us in writing (for example, by email). We will respond within 30 days, unless an extension is permitted by law. If we do not agree with a correction request, we will note the disagreement and keep your request on file. Reasonable, cost-recovery fees may apply for copies.

Rights in Other Jurisdictions

Depending on where you live, additional privacy rights may apply. In Quebec, Law 25 provides additional rights. In the United States, state laws such as the CCPA and CalOPPA may grant rights, including the right to know what information is collected, how it is used, and how it is disclosed. In the European Union and United Kingdom, the GDPR may grant rights such as access, correction, erasure, objection, restriction, and data portability. In Australia, the Australian Privacy Principles may grant rights to access and correct personal information. Please contact us if you wish to exercise rights available to you under applicable laws.

Automated Decision-Making and AI

We do not use automated decision-making systems or artificial intelligence to make decisions about your eligibility for services or your health care. If this changes, we will update this Privacy Policy.

Accessibility

We aim to follow recognized accessibility guidelines (such as WCAG 2.1 AA) and continue improving our site to make it easier for all individuals to use.

Changes to this Policy

We may update this Privacy Policy from time to time. The “Effective date” below reflects the most recent version. If we make significant changes, we will provide additional notice on our website or by email, if required by law.

If you have any questions, concerns, or complaints about this Privacy Policy or our practices, please contact our Chief Privacy Officer by email.

You may also contact the following authorities directly if you wish to raise a privacy concern:

Office of the Privacy Commissioner of Canada (OPC): https://www.priv.gc.ca
Office of the Information and Privacy Commissioner for British Columbia: https://www.oipc.bc.ca
Commission d’accès à l’information (Quebec): https://www.cai.gouv.qc.ca
California Attorney General (for California residents): https://oag.ca.gov/privacy/ccpa