Red Oak is committed to respecting and protecting your privacy. We will make every effort to collect, use, and disclose personal information responsibly and only to the extent necessary for the services we provide. We strive to be open and transparent regarding how we handle personal information. This statement describes our privacy policies and procedures, and provides information about how you can access records of your personal health information and request correction of recorded information.
Personal information
Secure video
Our online services are offered via secure video through Google Meet.
What is personal information?
Personal information is information about an identifiable individual. Practitioners at The Red Oak Centre are regulated under the provincial Regulated Health Professions Act (RHPA, 1991). As such, all identifiable information about an individual collected during the course of treatment at The Red Oak Centre, is considered “personal health information” under the Personal Health Information Protection Act, 2004 (PHIPA). Personal information can relate to personal characteristics, health, activities and views.
Collection of personal health information
We collect your personal health information only directly from you, except: a) when you have provided consent to obtain such information from others (e.g., reports of previous assessments or of other services); and b) where the law requires or allows us to collect information without your consent (e.g., when information is needed to prevent potential harm).
We collect only information from you that we believe is needed: a) to provide you with the services you have requested and/or for which you have been referred; b) to maintain contact with you for service-related or future consent purposes; c) to prevent or offset harm (e.g., asking for an emergency contact).
In accordance with legal and professional standards, we are required to maintain a record of the services we provide and our contact with you. This record may include information you share with us or authorize us to receive, assessment results, your treatment plan, consent forms, session notes, progress summaries, billing details, and any related correspondence. While the physical records remain the property of our practice, you have specific rights regarding access to your record and the disclosure of its contents, regardless of the format in which the information is stored
Use and protection of personal health information
The primary use of your personal health information is to conduct assessment, consultation or to provide treatment to you. This includes carrying out all of the functions reasonably necessary to provide those services, including billing for services.
Red Oak practitioners and staff collect, use and disclose personal information only as necessary to fulfill their duties in accordance with our privacy policy. At times, The Red Oak Centre may involve external individuals who, in the course of their duties, have limited access to your personal information. All staff who have access to your personal information are trained in maintaining privacy and confidentiality, and are familiar with our practice’s privacy policies and procedures, including measures to prevent unauthorized access or loss of records.
Any individual who knows a client personally is expected to disclose their relationship and, as such, not access that client’s personal information unless there is an emergency or unless the client has given express consent for access.
Paper information and electronic hardware are either under supervision or secured in restricted areas at all times. Computers are password protected. Electronic information is stored and transmitted on cloud-based servers with privacy procedures in place (www.jane.app).
Disclosure of personal health information
With only a few exceptions, your personal health information will not be disclosed to people outside The Red Oak Centre without your knowledge and express consent. These exceptions are known as the “limits of confidentiality”, and are circumstances in which disclosure is allowed by law:
- When there is a clear and imminent risk of serious bodily harm to someone, including the possibility of self-harm.
- For mandatory reporting of a child who might be in need of protection.
- For mandatory reporting of a regulated health professional who has sexually abused a client.
- In compliance with a court order to release information from a record.
- To comply with professional regulations established by professional Colleges (eg. the College of Psychologists and Behaviour Analysts of Ontario; the College of Occupational Therapists of Ontario; the College of Audiologists and Speech Language Pathologists of Ontario), who may inspect records and interview staff as a part of their regulatory activities (e.g., quality assurance) in the public interest.
- To comply with regulatory authorities under the terms of the Regulated Health Professions Act (RHPA) for the purposes of the aforementioned professional colleges’ fulfillment of their respective mandates under the RHPA, as well as for a defence of a legal issue.
- We may share your personal health information with insurance companies, employee assistance programs, credit card companies, or other third-party payers, who often have your consent or legislative authority. This is done to confirm your eligibility for funding and to respond to questions about the services you received.
Please note that according to law, any disclosure of your personal health information will be limited to information that is reasonably necessary for the purpose of the disclosure. Professional ethical standards additionally require that any information that might cause serious harm to someone not be disclosed, unless the law requires disclosure.
When consenting to the disclosure of your personal health information to another health professional who is providing services to you, you may restrict us from sharing all or any part of your personal information. However, if in our opinion the information is reasonably necessary for another health service provider to provide appropriate service, we are required by law to inform the other provider that you have refused consent to provide some needed information.
Retention and destruction of personal information
All personal information at Red Oak will be retained electronically for 10 years following a child’s 18th birthday, or 10 years following the last date of contact, whichever is later. This practice is in accordance with regulatory guidelines and legislation. All paper documents containing personal information are destroyed by shredding.
Your right of access to your personal health information record
With only a few exceptions, you have the right to access any record of your personal health information, and to request copies of the information. If the physical record contains personal health information about another individual, that individual’s information must be severed from the record before you access the record. Because of the nature of certain services, severing information may be difficult and at times impossible.
Other exceptions include access to copyrighted psychological test information (test items, protocols, manuals), information provided in confidence by a third party, and information that could result in serious harm to someone’s treatment or recovery, or in serious physical harm.
If a child has been deemed competent and consented to a service on his/her own, custodial parents or guardians may not access that child’s personal health information without the child’s consent.
If you request your personal file
We may need to confirm your identity before providing you with this access.
We reserve the right to charge a nominal fee for such requests, including the cost of retrieving your file from storage and separating out your information from those of other affected parties.
If we cannot give you access, we will tell you within 14 days and explain why not.
If you believe there is a mistake in the information, you have the right to ask for it to be corrected. This applies only to factual information and not to any professional opinions we may have formed. We may ask you to provide documentation that our files are wrong.
Where we agree there is an error, we will make the correction and notify anyone to whom we have sent the incorrect information. If we do not agree that we have made an error, you may provide a notice of disagreement that will be included in the file and we will forward that notice to anyone else who received the earlier information.
Concerns and further information
Please do not hesitate to contact us if you would like more detailed information about The Red Oak Centre’s privacy policies and procedures. You may contact us by phone, email or in writing to request access to your record, to request a correction to your record, or if you have a concern about your privacy.
Our Information Officer, Peyton Ross, can be reached by email or at 647-748-4441 to address any questions or concerns you might have.
Further details of the applicable laws, regulations, and standards informing our privacy policies and procedures may be found by visiting:
- Ontario Ministry of Health and Long Term Care
- College of Psychologists and Behaviour Analysts of Ontario
- College of Occupational Therapists of Ontario
- The College of Audiologists and Speech Language Pathologists
- The Canadian Psychological Association
- The Personal Health Information Protection Act
For more general inquiries, the Information and Privacy Commissioner of Ontario oversees the administration of the privacy legislation. The Commissioner also acts as a kind of ombudsman for privacy disputes. The Information and Privacy Commissioner can be reached at:
Information and Privacy Commissioner of Ontario
2 Bloor Street East, Suite 1400 Toronto, Ontario M4W 1A8
T 416-326-3333 / 800-387-0073
F 416-325-9195
TTY 416-325-7539
© 2025 The Red Oak Centre Inc. | 446 Spadina Road Suite 206 Toronto, ON M5P 3M2