Thriving Direct ADHD (“Thriving Direct ADHD,” “we,” “us,” or “our”) takes your privacy and the protection of your personal health information very seriously. We are committed to being transparent about how we collect, use, store, and safeguard your information when you access or use our services. This Privacy Policy outlines our practices regarding (a) your personal information, including personally identifiable information and/or personal health information (together referred to as “Information”); and (b) data generated from your interactions with our services (referred to as “Data”).

Our services include access to the Thriving Direct ADHD website, patient portal, telehealth consultations, booking systems, assessments, treatment planning, educational resources, prescription support, and related healthcare and informational services (collectively, the “Services”). When you use these Services, Thriving Direct ADHD collects Information and Data for purposes including clinical care, patient support, administrative management, system functionality, and compliance with healthcare regulations.

Wherever possible, Thriving Direct ADHD uses de-identification and aggregation processes to protect your personal health information when applying it for internal operations, analytics, or service improvements. While these processes significantly reduce risks, we cannot guarantee absolute anonymity or protection from all possible threats.

This Privacy Policy forms part of our Terms and Conditions. By accepting our Terms or by accessing, using, or purchasing the Services, you expressly consent to the collection, use, and disclosure of your Information and Data in accordance with this Privacy Policy. If you do not agree with these practices, you must discontinue use of the Services.

All capitalized terms used in this Privacy Policy that are not otherwise defined shall carry the meaning assigned to them in our Terms and Conditions.

Thriving Direct ADHD is dedicated to protecting the privacy and confidentiality of all individuals who use our services, including patients, caregivers, and visitors to our website and patient portal.

This Privacy Policy explains how we collect, use, store, and safeguard your personal health information and other personal data in compliance with applicable Canadian laws and professional standards. We recognize that privacy is an essential component of healthcare and that individuals must have confidence in how their information is managed in order to fully benefit from our services.

This Privacy Policy is intended to provide clarity and transparency. It outlines the types of information we collect, why we collect it, how it is protected, and the rights you have regarding your personal information. It also describes the measures we take to ensure confidentiality and the limited circumstances in which your information may be disclosed to third parties. Thriving Direct ADHD is committed to maintaining practices that respect your privacy while allowing us to provide effective and timely ADHD care through telehealth services, patient portals, and educational resources.

By accessing our services, whether through the website, telehealth platform, or secure patient portal, you acknowledge and agree to the practices described in this Privacy Policy. We encourage you to read this document carefully, as it provides important information about your rights, responsibilities, and the ways we handle your data. Your continued use of our services indicates your acceptance of these practices.

This Privacy Policy applies to all services, platforms, and resources offered by Thriving Direct ADHD. It governs the collection, use, storage, and disclosure of personal health information and other personal data provided by patients, caregivers, and visitors who interact with our services. The policy covers our website, patient portal, telehealth consultations, administrative systems, educational resources, and communication tools used to support clinical care and related operations.

The Privacy Policy applies equally to individuals who are actively receiving care, those who are in the process of registering for services, and visitors who access our educational materials. It applies regardless of whether you are located in Ontario or in other Canadian provinces where Thriving Direct ADHD operates. In situations where provincial or federal laws provide stricter protections, those legal requirements will prevail, and this Privacy Policy will be interpreted in line with them.

It is important to note that this policy does not apply to third-party websites or resources that may be linked through our platform. Thriving Direct ADHD is not responsible for the privacy practices of external organizations, and users are encouraged to review the policies of any third-party sites they choose to access.

By continuing to use our services, you acknowledge that this Privacy Policy applies to all aspects of your interaction with Thriving Direct ADHD. This ensures that your rights are consistently protected and that our obligations to safeguard your information remain clear and enforceable.

Thriving Direct ADHD collects personal information necessary to provide safe, effective, and timely ADHD care. This includes both personal health information and general data related to your use of our services. The information collected may vary depending on whether you are registering as a patient, engaging in a telehealth consultation, or accessing resources on our website.

Personal health information may include your full name, date of birth, contact details, health card number, medical history, current medications, family history, and details of any previous or ongoing treatment. During assessments and follow-up consultations, clinicians may collect clinical notes, test results, diagnoses, and treatment plans. This information is essential for providing appropriate clinical care and for maintaining accurate health records in compliance with Canadian healthcare regulations.

In addition to clinical data, Thriving Direct ADHD may collect administrative information such as billing details, insurance information, and communication preferences. We also collect technical information when you access our website or patient portal, including IP addresses, browser types, device identifiers, and usage statistics. These details are collected to ensure system security, monitor performance, and enhance user experience.
Information may also be gathered when you complete forms, participate in educational activities, subscribe to newsletters, or contact the clinic for support. Thriving Direct ADHD only collects the information required for legitimate clinical, administrative, or legal purposes and does not collect information unrelated to the delivery of care or the improvement of services.

Thriving Direct ADHD collects personal information through a variety of lawful and transparent methods designed to support the safe and effective delivery of healthcare. The way information is collected depends on how you interact with our services, whether through telehealth consultations, the patient portal, or our website.

Information is primarily collected directly from you when you voluntarily provide it. This occurs during registration, when booking appointments, completing intake forms, or updating your profile through the patient portal. Clinicians also collect information during telehealth assessments, follow-up consultations, and communications with you about your care. This direct collection ensures accuracy and allows you to provide the details most relevant to your health needs.

Information may also be collected indirectly from third-party sources, but only with your knowledge and consent or where permitted by law. Examples include medical records shared by other healthcare providers, insurance details provided by payers, or referrals from authorized professionals. Such information is used solely to ensure continuity and quality of care.

In addition, certain technical data is automatically collected when you use our website or patient portal. This may include IP addresses, browser types, device identifiers, and information about how you interact with our digital tools. Cookies and similar technologies are used to enhance your experience and maintain security, as described in a later section of this Privacy Policy.

By accessing our services, you acknowledge that information is collected responsibly, through lawful means, and only for purposes that support clinical care, operations, and compliance with professional standards.

Thriving Direct ADHD collects and uses personal information for specific and limited purposes directly connected to the delivery of safe, effective, and compliant healthcare services. The primary purpose is to provide accurate assessments, diagnoses, and treatment plans for ADHD and related conditions. Your information allows clinicians to understand your health history, evaluate your needs, and make informed decisions about your care.

Information is also used for administrative purposes such as scheduling appointments, processing payments, managing insurance claims, and providing secure access to the patient portal. These functions ensure that care is delivered efficiently and that patients experience timely communication and support.

In addition, information may be used to enhance the functionality of our website and telehealth systems. Technical and usage data help us monitor performance, identify problems, and improve the user experience. Aggregated or de-identified information may also be used for internal analytics, quality assurance, or research initiatives, but these activities are conducted in compliance with privacy legislation and ethical guidelines.

Another important purpose is legal and regulatory compliance. Thriving Direct ADHD must maintain accurate records, meet reporting obligations, and cooperate with regulatory authorities when required by law. Information may also be used to enforce clinic policies, protect against fraud, or respond to legal claims.

By providing your information and accessing our services, you acknowledge and consent that your data will be used only for legitimate purposes that support the delivery of care, clinic operations, and compliance with applicable laws.

Thriving Direct ADHD operates on the principle that your personal health information will only be collected, used, or disclosed with your knowledge and consent, except where otherwise required or permitted by law. By accessing our services, you provide implied consent for the use of your information to deliver healthcare, manage administrative functions, and support the safe operation of our telehealth and patient portal systems.

In most cases, consent is obtained directly when you complete registration forms, book appointments, or engage in consultations. By providing this information, you acknowledge that it will be used to create and maintain accurate health records, support diagnosis and treatment, and facilitate communication with clinicians. Consent may also be explicitly requested for specific uses, such as participation in research projects, sharing information with third-party providers, or receiving educational or marketing communications.

You have the right to withdraw consent at any time, subject to legal or contractual restrictions. For example, withdrawing consent may not release Thriving Direct ADHD from its obligation to maintain records for the period required under Canadian healthcare laws. Patients who choose to limit or withdraw consent may also affect the clinic’s ability to provide certain services, and such implications will be clearly explained.

By continuing to use our services, you acknowledge that consent is an ongoing process and that your information will only be used in ways consistent with transparency, necessity, and compliance with applicable legislation.

Thriving Direct ADHD will only disclose your personal health information when it is necessary for the provision of care, when required by law, or when you have provided consent. Disclosure is limited to the minimum amount of information reasonably necessary to achieve the intended purpose, and we make every effort to ensure that disclosures are consistent with professional and legal obligations.

Your information may be shared with clinicians, nurses, or other authorized healthcare providers directly involved in your diagnosis, treatment, or follow-up care. In some cases, disclosure may also occur to pharmacies, laboratories, or other specialists if such sharing is required to coordinate your treatment. Administrative disclosures may include billing entities, insurers, or authorized third parties responsible for processing claims or payments.

Thriving Direct ADHD may also disclose information in compliance with legal obligations, such as responding to court orders, complying with public health reporting requirements, or cooperating with regulatory authorities. In rare circumstances, disclosure may be necessary to prevent or reduce a serious risk of harm to you or others, consistent with applicable Canadian law.

We do not sell or disclose personal health information for commercial gain. Where information is shared with third parties for legitimate operational purposes, such as secure hosting providers or telehealth platforms, contractual safeguards are in place to protect your privacy.

By continuing to use our services, you acknowledge that disclosures will occur only in limited, lawful, and transparent circumstances necessary to support care and compliance.

Thriving Direct ADHD may engage third-party service providers to support the secure and efficient delivery of its services. These providers perform essential functions such as cloud-based data storage, telehealth video conferencing, secure messaging, payment processing, and technical support for the patient portal and website. By using our services, you acknowledge that certain limited disclosures of your personal information may occur to enable these providers to fulfill their contracted responsibilities.

All third-party providers engaged by Thriving Direct ADHD are required to comply with Canadian privacy laws and must adhere to strict contractual obligations. These obligations include safeguarding personal health information, using the information only for authorized purposes, and prohibiting further disclosure without consent. Providers are carefully selected based on their ability to meet recognized standards of data security and confidentiality.

In some cases, service providers may operate outside of Canada. Where this occurs, your information may be subject to the laws of those jurisdictions. Thriving Direct ADHD takes reasonable measures to ensure that equivalent safeguards are in place, including contractual commitments and security protocols, to reduce risks associated with cross-border transfers.

You may contact Thriving Direct ADHD at any time for further details about the types of service providers used and the safeguards implemented to protect your data. By continuing to use our services, you agree to the responsible involvement of third-party providers as necessary to support patient care, clinic operations, and system functionality.

Thriving Direct ADHD retains personal health information and related records only for as long as necessary to fulfill the purposes for which they were collected and to comply with legal, regulatory, and professional obligations. Retention periods are guided by Canadian healthcare legislation, including provincial health information laws, and by the standards established by professional regulatory bodies. These requirements ensure that records remain available for continuity of care, accountability, and compliance with applicable laws.

Clinical records, including assessment results, diagnoses, treatment plans, prescriptions, and communications with clinicians, are retained for the minimum period mandated by law, typically ranging from several years following the last clinical interaction to the longer timeframes required for specific jurisdictions. Administrative records, such as billing information and consent forms, are also maintained as long as required for regulatory or financial compliance.

Once the legally required retention period has expired, records are securely destroyed using recognized methods, such as permanent deletion of digital files or the shredding of physical documents, to ensure that confidentiality is preserved. Thriving Direct ADHD does not guarantee indefinite storage of personal information and is not obligated to retain records beyond these mandated periods.

By accessing our services, you acknowledge and agree that your information will be stored for only as long as legally necessary and will be securely disposed of once retention requirements have been satisfied.

Thriving Direct ADHD is committed to protecting your personal health information and other data through the use of technical, administrative, and physical safeguards. These measures are designed to prevent unauthorized access, loss, misuse, alteration, or disclosure of your information. By using our services, you acknowledge that while no system can be guaranteed to be completely secure, Thriving Direct ADHD applies industry-recognized practices to minimize risks and uphold confidentiality.

Technical safeguards include the use of encrypted communications, secure servers, firewalls, and access controls to protect information stored within the patient portal, telehealth platform, and related systems. Administrative safeguards include staff training, role-based access restrictions, and protocols for handling sensitive information. Physical safeguards, such as secure storage facilities and controlled access to administrative offices, are also applied where necessary.

Despite these precautions, patients are responsible for taking steps to protect their own information. This includes maintaining the confidentiality of login credentials, ensuring that devices used to access the platform are secure, and avoiding the use of public or unsecured networks for sensitive communications. Thriving Direct ADHD cannot be held liable for breaches that result from a patient’s failure to take reasonable precautions.

If a security incident does occur, Thriving Direct ADHD will act promptly to investigate, contain, and address the issue in accordance with applicable breach notification procedures and privacy legislation. Our commitment is to maintain the highest possible level of trust by safeguarding your information at all stages of care.

Thriving Direct ADHD primarily seeks to store and manage personal health information within Canada. However, in certain circumstances, your information may be transferred, processed, or stored outside of Canada through third-party service providers that support our telehealth platform, patient portal, or administrative systems. By using our services, you acknowledge and consent that cross-border transfers of data may occur when necessary to enable the secure and effective delivery of care.

When information is transferred outside of Canada, it may be subject to the laws of the jurisdiction in which it is processed or stored. These laws may differ from Canadian privacy protections and, in some cases, may allow foreign authorities to access information under specific legal processes. Thriving Direct ADHD cannot guarantee that the same protections mandated under Canadian legislation will always apply in those jurisdictions.

To mitigate risks, Thriving Direct ADHD takes reasonable contractual, organizational, and technical measures to ensure that third-party providers handling data outside of Canada comply with standards equivalent to those required under Canadian law. This may include encryption, restricted access protocols, and contractual agreements prohibiting unauthorized disclosure or use of information.

Patients who do not wish to allow their data to be processed outside of Canada must refrain from using services that rely on international hosting or providers. By continuing to use our services, you provide informed consent to these limited cross-border practices.

Thriving Direct ADHD may use cookies, web beacons, and similar tracking technologies to enhance the performance, functionality, and security of its website and patient portal. Cookies are small files stored on your device that allow our systems to recognize your browser and provide features such as secure login, session management, and personalization of your experience. By using our website and patient portal, you consent to the use of these technologies as outlined in this Privacy Policy.

Some cookies are strictly necessary to ensure the proper functioning of our digital platforms, while others may support analytics to help us understand how users interact with the site. This information allows us to identify technical issues, improve navigation, and enhance overall usability. Data collected through cookies is generally aggregated and does not identify you personally, though certain functional cookies may be linked to your account for authentication purposes.

You may choose to disable or restrict cookies by adjusting your browser settings. However, doing so may limit your ability to use certain features of the website or portal and may reduce the security or efficiency of your experience. Thriving Direct ADHD does not use cookies for the purpose of selling personal information to third parties.

Any third-party tools used for analytics or performance monitoring are carefully selected to ensure compliance with recognized privacy and security standards. By continuing to use our services, you acknowledge and accept the use of cookies and tracking technologies for these limited and responsible purposes.

As a patient of Thriving Direct ADHD, you have the right to access your personal health information in accordance with Canadian privacy laws and professional standards. This right ensures transparency, accountability, and your ability to actively participate in your care. Records that may be accessed include clinical notes, assessment results, treatment plans, prescriptions, and other documents created in the course of providing services.

To exercise this right, you must submit a written request through the secure patient portal or using the designated contact methods outlined by the clinic. Requests should clearly identify the records being sought to allow for accurate and timely processing. Thriving Direct ADHD will review and respond to access requests within the timelines required by provincial legislation, typically within thirty days unless an extension is permitted under law.

While most requests will be granted, there may be limited circumstances where access must be restricted. These include situations where disclosure could cause harm to you or another individual, where records contain third-party information that cannot be disclosed without consent, or where legal restrictions apply. In such cases, you will be provided with an explanation of the reasons for limited or denied access.

By recognizing your right to access records, Thriving Direct ADHD supports your role as an informed participant in your healthcare and ensures compliance with Canadian privacy legislation.

As a patient of Thriving Direct ADHD, you have the right to request corrections to your personal health records if you believe the information is inaccurate, incomplete, or misleading. This right ensures that your records accurately reflect your medical history, diagnosis, and treatment, which is essential for safe and effective care. Thriving Direct ADHD is committed to addressing correction requests fairly and in compliance with Canadian privacy laws and healthcare regulations.

To request a correction, you must submit a written request through the secure patient portal or other designated communication methods provided by the clinic. The request should clearly identify the record or entry in question and include supporting details or documentation that explain why the correction is necessary. Thriving Direct ADHD will review your request and respond within the timelines set out in applicable provincial legislation, usually within thirty to sixty days.

If a correction is approved, the record will be amended, and updated information will be shared with providers involved in your care when appropriate. If your request is denied, you will be informed of the reasons, and you have the right to ask that a statement of disagreement be added to your file. This ensures that your perspective is preserved even when the clinic does not agree to amend the record.

By exercising this right, you help maintain the accuracy and reliability of your healthcare records, which supports high-quality, patient-centered care.

As a patient of Thriving Direct ADHD, you have the right to withdraw your consent for the collection, use, or disclosure of your personal health information, subject to legal and contractual limitations. This right ensures that you maintain control over how your information is managed and allows you to make choices that reflect your preferences and comfort level. Thriving Direct ADHD is committed to respecting and processing such requests in accordance with Canadian privacy laws.

To withdraw consent, you must submit a written request through the secure patient portal or another designated contact method provided by the clinic. The request should specify the scope of consent you wish to withdraw, such as limiting the sharing of information with other providers, discontinuing participation in research, or restricting certain communications. Once received, the clinic will review your request and advise you of any legal obligations or practical implications.

It is important to note that withdrawal of consent may affect the ability of Thriving Direct ADHD to provide certain services. For example, if you restrict access to critical health information, clinicians may not be able to deliver safe and comprehensive care. In addition, legal requirements may obligate the clinic to retain and use certain information despite your withdrawal.

By exercising this right, you acknowledge both your authority over your personal information and the potential limitations that withdrawal may create in the delivery of services.

Thriving Direct ADHD is committed to maintaining personal health information that is accurate, complete, and up to date. Accuracy is essential to ensuring safe and effective care, as clinicians rely on the information contained in your records to make informed decisions regarding assessment, diagnosis, and treatment. By using our services, you agree to provide information that is truthful and current, and to notify the clinic of any changes that may affect the quality of your care.

The accuracy of your information begins at the point of collection. During registration, intake, or consultation, you are responsible for disclosing complete and accurate details regarding your health history, medications, allergies, and other relevant factors. Failure to provide correct information may compromise the safety and effectiveness of the care you receive.

Thriving Direct ADHD also reviews and updates records on an ongoing basis to reflect new information obtained during consultations, follow-up care, or communications. Patients have the right to request corrections if they believe an error has been made, as outlined in the section on Patient Rights: Correction of Records.

While every effort is made to ensure records remain accurate, Thriving Direct ADHD cannot be held responsible for omissions or inaccuracies caused by incomplete or incorrect information supplied by patients or third parties. By continuing to use our services, you acknowledge that maintaining accurate records is a shared responsibility between you and the clinic, ensuring safe, reliable, and high-quality care.

Thriving Direct ADHD may use certain personal health information and related data for research, quality improvement, and analytics purposes. These activities are undertaken to evaluate and enhance the effectiveness of our clinical services, improve patient outcomes, and contribute to broader knowledge in the field of ADHD care. All use of information for these purposes is carried out in accordance with Canadian privacy laws and professional ethical standards.

Whenever possible, information used for research and analytics will be de-identified or aggregated to minimize the possibility of identifying individual patients. Examples of such uses include analyzing patterns of service utilization, monitoring clinical outcomes, evaluating digital platform performance, and identifying areas where patient care processes can be improved.

In limited cases, identifiable information may be used for research projects, but only with your explicit consent or where otherwise permitted by law. Participation in research involving identifiable data is always voluntary, and patients who choose not to participate will continue to receive the same level of care and access to services without prejudice.

Thriving Direct ADHD does not sell patient data or share identifiable information with external organizations for commercial purposes. Research and analytics are conducted strictly to support clinical excellence, operational efficiency, and public health goals.

By continuing to use our services, you acknowledge and consent that your information may be responsibly used in de-identified or aggregated form to support research and analytics that advance the quality of ADHD care in Canada.

Thriving Direct ADHD is committed to protecting your privacy by applying de-identification practices whenever possible. De-identification is the process of removing or modifying personal identifiers so that data cannot reasonably be used to identify an individual. This approach allows the clinic to use information for research, analytics, and quality improvement purposes while safeguarding patient confidentiality.

Personal identifiers that may be removed during de-identification include names, contact details, health card numbers, and other direct identifiers. In addition, indirect identifiers, such as unique demographic information or small data sets, may be altered, coded, or aggregated to further reduce the risk of re-identification. Thriving Direct ADHD applies industry-recognized methods and follows applicable Canadian privacy standards to ensure de-identified data is handled responsibly.

De-identified information may be used internally to monitor service delivery, assess system performance, and identify trends in patient care. It may also be shared with academic institutions, research organizations, or professional associations for legitimate purposes, provided that strict contractual safeguards are in place. These agreements prohibit the re-identification of data and restrict use to approved purposes only.

While de-identification reduces risks significantly, it cannot guarantee complete anonymity in all circumstances. Thriving Direct ADHD takes additional precautions to minimize risks and ensures that any de-identified data used or disclosed is done so in a lawful, ethical, and responsible manner.

By using our services, you consent to the use of de-identified data for approved research and improvement activities that support better ADHD care.

Thriving Direct ADHD may use limited forms of marketing and advertising to inform patients and the public about available services, educational resources, and new clinical initiatives. All marketing and advertising activities are conducted in compliance with Canadian privacy laws, healthcare regulations, and ethical standards. We do not sell, rent, or disclose personal health information to third parties for marketing purposes.

Marketing communications may include newsletters, educational materials, website announcements, or email updates about programs or services. Patients will only receive such communications if they have provided consent, either directly during registration or by subscribing through designated channels. You may withdraw your consent at any time by following the opt-out instructions included in each communication or by contacting Thriving Direct ADHD directly. Withdrawing consent for marketing communications does not affect your ability to receive important clinical, administrative, or legal notices.

Advertising on our website or digital platforms may occasionally reference external organizations or resources. Such references are for informational purposes only and do not constitute endorsements. Patients are encouraged to exercise their own judgment when accessing external content.

Thriving Direct ADHD strives to ensure that all marketing and advertising materials are accurate, respectful, and aligned with professional standards. By continuing to use our services, you acknowledge that limited, responsible marketing may occur, always with a commitment to transparency, privacy protection, and patient choice.

Thriving Direct ADHD may use social media platforms to share educational content, raise awareness about ADHD, and provide updates about services. These platforms are intended for general information only and are not a substitute for professional medical advice, telehealth consultations, or secure patient communications. By engaging with our social media accounts, you acknowledge that interactions on these platforms are public and not subject to the same privacy protections as communications through the patient portal or telehealth platform.

Patients and visitors are strongly discouraged from posting personal health information, confidential details, or sensitive questions on social media. Any information shared voluntarily on these platforms should be considered public and may be accessible to others beyond the control of Thriving Direct ADHD. To protect your privacy, we encourage the use of secure communication channels for clinical or administrative matters.

Thriving Direct ADHD reserves the right to moderate, edit, or remove any comments, posts, or messages that are inappropriate, offensive, misleading, or unrelated to ADHD education and awareness. Engagement with third-party content or links shared through our social media accounts does not imply endorsement or validation of those sources.

By interacting with our social media platforms, you agree to use them responsibly and understand their limitations. Thriving Direct ADHD remains committed to fostering respectful and informative online discussions while prioritizing the protection of patient privacy and confidentiality.

Thriving Direct ADHD is committed to protecting the privacy of children and adolescents who may use our services. Our telehealth and patient portal platforms are primarily intended for adults or legal guardians acting on behalf of minors. Children are not permitted to independently register for or manage accounts without the direct involvement and consent of a parent or legal guardian.

Personal health information about minors is collected only with the consent of a parent or guardian and is handled in compliance with Canadian privacy laws and provincial health information legislation. Parents or guardians are responsible for ensuring that the information provided during registration, consultations, or communications is accurate and complete. Thriving Direct ADHD may request verification of guardianship or legal authority before granting access to a child’s records or services.

We do not knowingly collect personal information from minors without the involvement of a legal guardian. If it is discovered that a child has submitted information without appropriate consent, the clinic will take immediate steps to restrict access or delete the information in accordance with privacy regulations.

The clinic also ensures that minors receive care in a manner appropriate to their age and maturity while safeguarding confidentiality within the boundaries of legal and professional obligations.

By using our services on behalf of a child, you confirm your role as a legal guardian and consent to the collection and management of the child’s personal information in accordance with this Privacy Policy.

Thriving Direct ADHD provides services primarily through secure telehealth platforms to ensure patients across Canada have timely access to care. Because telehealth involves the electronic transmission of personal health information, additional safeguards are applied to protect privacy and confidentiality. By using our telehealth services, you acknowledge and consent to these specific protections and responsibilities.

All telehealth sessions are conducted through secure, encrypted video conferencing systems that comply with Canadian healthcare privacy standards. Thriving Direct ADHD does not permit unauthorized recording, copying, or distribution of telehealth sessions. Patients are not allowed to record, photograph, or share any part of a clinical encounter without prior written consent from the clinic. Clinicians are similarly bound by professional obligations not to record sessions without patient knowledge and agreement.

You are responsible for ensuring that your own environment is private during telehealth appointments. This includes using a secure internet connection, choosing a confidential location, and preventing unauthorized individuals from overhearing or observing the consultation. Thriving Direct ADHD cannot be held responsible for breaches caused by a patient’s failure to maintain privacy within their physical environment.

Despite these measures, you acknowledge that no electronic system can guarantee absolute security. Technical failures, connectivity issues, or risks beyond the clinic’s reasonable control may occur. Thriving Direct ADHD remains committed to minimizing these risks by applying best practices in technology and clinical conduct, ensuring your information is protected while delivering care through virtual platforms.

Thriving Direct ADHD takes the protection of personal health information seriously and applies safeguards to minimize the risk of unauthorized access, disclosure, or misuse. Despite these precautions, no system is completely immune to incidents. In the event of a suspected or confirmed breach, Thriving Direct ADHD follows a structured process to investigate, respond, and notify affected individuals as required by Canadian privacy laws.

If a breach is identified, immediate steps will be taken to contain the incident, secure systems, and prevent further exposure of information. A thorough internal investigation will be conducted to determine the nature and scope of the breach, the type of information involved, and the individuals affected. Where necessary, external experts may be engaged to assist with the investigation.

If it is determined that the breach presents a real risk of significant harm to patients, Thriving Direct ADHD will notify affected individuals promptly. The notification will include a description of the breach, the type of information involved, potential consequences, and steps taken by the clinic to address the situation.
Recommendations for patient actions, such as monitoring accounts or updating passwords, may also be provided.
In addition, Thriving Direct ADHD will notify the appropriate privacy commissioner or regulatory authority where legally required. By using our services, you acknowledge and consent to this structured approach, which ensures transparency, accountability, and timely response in the event of a breach.

Thriving Direct ADHD relies on third-party service providers to support the delivery of telehealth care, patient portal access, and administrative functions. These providers may include technology platforms for secure video conferencing, electronic health record systems, billing processors, cloud storage providers, and communication tools. By engaging with our services, you acknowledge that limited access to your personal information may be granted to these providers when necessary to perform their designated tasks.

Each third-party provider is bound by contractual agreements requiring them to comply with Canadian privacy standards. These agreements restrict providers from using or disclosing personal health information for any purpose other than fulfilling their responsibilities to Thriving Direct ADHD. Providers must implement security safeguards that are consistent with industry best practices, including encryption, access restrictions, and monitoring to reduce risks of unauthorized access.

In some cases, providers may operate in jurisdictions outside of Canada. Where this occurs, your information may be subject to the laws of those regions. Thriving Direct ADHD takes steps to ensure that equivalent protections are in place, including contractual commitments and technical safeguards, to protect your data when handled outside Canada.

By continuing to use our services, you consent to the involvement of third-party service providers for operational, clinical, and administrative purposes. This ensures that Thriving Direct ADHD can provide secure, efficient, and reliable ADHD care while maintaining accountability for the protection of your information.

Thriving Direct ADHD is committed to respecting your privacy rights and ensuring that concerns are addressed promptly and fairly. If you believe that your personal health information has been mishandled, used improperly, or disclosed without authorization, you have the right to file a complaint. This process is designed to provide transparency, accountability, and an opportunity for resolution.

Complaints should be submitted in writing through the patient portal or using the official contact methods provided by the clinic. The complaint should include a description of the issue, the relevant dates, and any supporting details. Once received, Thriving Direct ADHD will acknowledge the complaint and conduct an internal review to determine the facts and address the matter. Every effort will be made to provide a response within the timelines set by Canadian privacy legislation.

If your complaint cannot be resolved through internal processes, you may escalate the matter to the appropriate provincial privacy commissioner or regulatory authority. Thriving Direct ADHD will cooperate fully with external investigations and comply with any resulting recommendations or legal requirements.

By accepting this Privacy Policy, you acknowledge that complaints should first be raised directly with the clinic to allow for timely and fair resolution. This approach ensures that patient concerns are addressed responsibly while preserving the right to seek external review if necessary.

Thriving Direct ADHD reserves the right to update, modify, or amend this Privacy Policy at any time to reflect changes in legal requirements, regulatory standards, or operational practices. Updates may also be made to improve clarity, address patient feedback, or reflect technological advancements used in providing our services. By continuing to use our website, telehealth platform, or patient portal after updates are posted, you agree to be bound by the revised Privacy Policy.

When material changes are made, Thriving Direct ADHD will make reasonable efforts to notify patients. This may include announcements on the website, secure messages through the patient portal, or email notifications. Examples of significant changes include updates to the categories of information collected, new methods of data sharing, or modifications to patient rights. Minor edits that do not affect your rights or obligations may be introduced without prior notice but will always be reflected in the most current version available online.

Patients are encouraged to review this Privacy Policy regularly to remain informed about how their information is handled. If you do not agree with a change, your sole remedy is to discontinue use of our services.

By accepting this Privacy Policy, you acknowledge that periodic updates are necessary to maintain compliance, transparency, and alignment with Canadian privacy laws and professional obligations.

Thriving Direct ADHD may assign or transfer its rights and obligations under this Privacy Policy to another organization in the event of a merger, acquisition, restructuring, or transfer of operations. Such an assignment ensures continuity of services and the ongoing protection of personal health information. If a transfer occurs, the successor organization will assume responsibility for safeguarding your data in accordance with this Privacy Policy and applicable Canadian laws.

Patients will be notified of any material changes resulting from an assignment through official communication channels, such as website announcements, portal notifications, or email. Continued use of services following such notification constitutes acceptance of the new entity’s responsibility for managing your personal information.

You may not assign, transfer, or delegate your rights or obligations under this Privacy Policy without the prior written consent of Thriving Direct ADHD. Unauthorized attempts to transfer your rights or responsibilities will be considered invalid and unenforceable.

Thriving Direct ADHD ensures that any assignment of rights occurs in a manner that respects privacy laws and maintains the same or higher level of safeguards for patient information. By accepting this Privacy Policy, you agree that your data may be transferred to a successor organization under these circumstances, and that such assignment does not relieve you of your own responsibilities under this policy.

Thriving Direct ADHD shall not be held liable for any failure or delay in fulfilling its obligations under this Privacy Policy if such failure or delay is caused by circumstances beyond its reasonable control. These circumstances, often referred to as force majeure events, may include but are not limited to natural disasters, fires, floods, earthquakes, severe weather, epidemics, pandemics, labor disputes, strikes, power outages, cyberattacks, telecommunications failures, acts of war, terrorism, civil unrest, or actions taken by government authorities.

During a force majeure event, services may be disrupted, delayed, or temporarily unavailable. Thriving Direct ADHD will take reasonable steps to minimize the impact of such events and to restore operations as quickly as possible. However, patients acknowledge that some disruptions are unavoidable and agree that the clinic will not be responsible for damages, losses, or inconvenience resulting from such circumstances.

If a force majeure event significantly affects the clinic’s ability to deliver services for an extended period, Thriving Direct ADHD may suspend or permanently discontinue affected services without liability, provided reasonable notice is given when possible.

By accepting this Privacy Policy, you acknowledge that certain events are outside the control of Thriving Direct ADHD and that the clinic’s obligations may be limited under such conditions. This provision ensures clarity, fairness, and mutual understanding in situations where extraordinary circumstances prevent normal operations.

This Privacy Policy shall be interpreted in accordance with Canadian privacy and healthcare laws, as well as the professional standards that govern the handling of personal health information. The provisions contained herein are intended to be applied fairly and consistently, with the primary goal of protecting patient rights and ensuring responsible data management. Headings are included for convenience only and do not alter the meaning or interpretation of any provision.

The Privacy Policy has been prepared in English, which is the governing language for purposes of interpretation. While Thriving Direct ADHD may provide translations of this policy into other languages for accessibility, the English version shall prevail in the event of discrepancies or conflicts. Patients relying on translated versions are encouraged to contact the clinic if clarification is needed to avoid misunderstandings.

When interpreting this Privacy Policy, singular terms shall be understood to include the plural where appropriate, and references to one gender shall be deemed inclusive of all genders. Words such as “including” or “for example” are intended to be illustrative and not restrictive.

By agreeing to this Privacy Policy, you acknowledge that interpretation will be guided by principles of transparency, fairness, and compliance with applicable laws. Should ambiguity arise, provisions will be construed in a manner consistent with the overall purpose of safeguarding patient privacy and ensuring ethical handling of personal information.

Thriving Direct ADHD is committed to maintaining open communication with patients, caregivers, and visitors regarding privacy practices and the handling of personal information. If you have questions, concerns, or requests related to this Privacy Policy or to the management of your personal health information, you may contact the clinic using the official communication channels listed below.

The preferred method for submitting privacy-related inquiries is through the secure patient portal, which offers encrypted messaging and ensures that sensitive information remains protected. Patients may also contact the clinic via email, telephone, or postal mail, as outlined on the official Thriving Direct ADHD website. To protect your confidentiality, you are advised not to include sensitive health details in regular email messages unless specifically instructed to do so through secure channels.

Thriving Direct ADHD will make reasonable efforts to respond to privacy inquiries or requests within the timeframes required by Canadian privacy laws. Requests to access or correct records, withdraw consent, or raise complaints should be submitted in writing to ensure clear documentation and proper handling.

By continuing to use our services, you acknowledge that maintaining up-to-date contact details with the clinic is your responsibility. This ensures that you receive important communications promptly, including notices about policy updates, data practices, or regulatory obligations.

Certain provisions of this Privacy Policy will continue to apply even after you stop using the services of Thriving Direct ADHD. These surviving obligations ensure that important protections and responsibilities remain in effect to safeguard both patients and the clinic. Specifically, obligations relating to confidentiality, data security, record retention, dispute resolution, and compliance with applicable laws will remain binding beyond the termination of your relationship with Thriving Direct ADHD.

Your rights regarding access to and correction of personal health information also survive in accordance with legal retention requirements. Thriving Direct ADHD remains obligated to maintain and protect your health records for the legally mandated period, even if you are no longer an active patient. During this time, you retain the right to request access, corrections, or clarifications, consistent with Canadian privacy legislation.

Similarly, your responsibilities—such as respecting the privacy of communications, complying with clinic policies, and refraining from misuse of services—do not automatically end when your active use of the platform concludes. These provisions are designed to protect the integrity of records, ensure accountability, and uphold professional and legal standards long after a patient’s active care has ended.

By accepting this Privacy Policy, you acknowledge that certain obligations are ongoing and that both Thriving Direct ADHD and its patients remain accountable to one another under these continuing provisions.

The failure of Thriving Direct ADHD to enforce any provision of this Privacy Policy at any given time shall not be interpreted as a waiver of that provision or of the right to enforce it in the future. A delay or omission in exercising rights under this policy does not affect those rights, nor does it constitute a permanent relinquishment of obligations. Each provision of this Privacy Policy is independently enforceable and remains valid unless formally waived in writing.

Any waiver granted by Thriving Direct ADHD must be documented in writing and signed by an authorized representative of the clinic. Informal communications, verbal agreements, or assumptions by patients or visitors shall not be considered valid waivers. This ensures that the rights and responsibilities outlined in this Privacy Policy remain intact unless specifically addressed through a formal written process.

By agreeing to this Privacy Policy, you acknowledge that your obligations—such as safeguarding your login credentials, respecting confidentiality, and complying with clinic requirements—remain binding unless explicitly waived in writing. Likewise, Thriving Direct ADHD’s responsibilities to protect your information, maintain security, and comply with Canadian privacy laws continue unless formally amended.

This waiver provision ensures that accountability, fairness, and consistency are preserved in the application of this Privacy Policy. It protects both the clinic and patients from misunderstandings by requiring clear, written documentation for any exception.

If any provision of this Privacy Policy is found by a court of competent jurisdiction or a regulatory authority to be invalid, unlawful, or unenforceable, that specific provision shall be deemed severed from the policy. The remaining provisions will continue in full force and effect, ensuring that the Privacy Policy as a whole remains legally binding and enforceable. This approach safeguards the integrity of the policy even if a particular clause cannot be applied.

Whenever possible, an invalid or unenforceable provision will be interpreted, modified, or replaced in a way that reflects the original intent while remaining consistent with Canadian privacy laws and professional standards. The goal is to preserve the effectiveness of the Privacy Policy while aligning with applicable legal requirements.

The invalidity of a provision in one context does not automatically render it invalid in all circumstances. For example, a provision may be unenforceable for one patient or situation but remain valid for others. By continuing to use Thriving Direct ADHD’s services, you acknowledge and accept that each clause operates independently unless explicitly stated otherwise.

This severability clause ensures continuity, accountability, and stability in the Privacy Policy, protecting both patients and the clinic. It reinforces that no single provision is essential to the overall agreement unless expressly noted.

This Privacy Policy constitutes the entire agreement between you and Thriving Direct ADHD with respect to the collection, use, storage, and disclosure of personal health information and other personal data. It supersedes any prior discussions, communications, or informal agreements—whether oral or written—that may have addressed similar matters. By accepting this Privacy Policy, you acknowledge that no other promises, representations, or commitments will govern your rights or obligations unless expressly stated in writing and authorized by Thriving Direct ADHD.

This provision ensures consistency and clarity in the way privacy practices are communicated and applied. Patients are encouraged to carefully review this Privacy Policy and to seek clarification if any section is unclear. No verbal statements, marketing materials, or informal explanations override the terms of this Privacy Policy.

Updates to this Privacy Policy, as described in the section on Updates and Amendments, automatically become part of the entire agreement once they are published. Continued use of the website, patient portal, or telehealth services constitutes your acceptance of these updates.

By agreeing to this Privacy Policy, you confirm that it represents the complete and binding understanding between you and Thriving Direct ADHD with respect to privacy matters. This reinforces transparency, accountability, and mutual understanding in the protection of personal health information and related data.

These Closing Provisions reaffirm the binding nature of this Privacy Policy and summarize its role in governing how Thriving Direct ADHD collects, uses, stores, and discloses personal health information. By using our services, whether through the website, patient portal, or telehealth platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. This agreement ensures that your rights are respected, that your responsibilities are clear, and that the clinic operates in compliance with Canadian privacy laws.

If any part of this Privacy Policy is found to conflict with applicable legislation, the relevant laws will prevail, and the remaining provisions will continue in effect. The failure of Thriving Direct ADHD to enforce a right or obligation at any time does not constitute a waiver of that right in the future. Patients are reminded that this Privacy Policy should be read as a whole, with each provision contributing to a consistent and transparent framework for data protection.

By continuing to use Thriving Direct ADHD’s services, you affirm your commitment to this Privacy Policy and agree to its ongoing application. If you do not agree with any section, your sole remedy is to discontinue the use of services. These provisions underscore fairness, accountability, and mutual respect in the handling of personal health information.

This Privacy Policy shall be governed by and interpreted in accordance with the laws of Canada and the applicable provincial laws in the jurisdictions where Thriving Direct ADHD provides services. These laws include, but are not limited to, provincial health privacy legislation such as Ontario’s Personal Health Information Protection Act (PHIPA) and other provincial frameworks that regulate the collection, use, and disclosure of personal health information. Federal laws such as the Personal Information Protection and Electronic Documents Act (PIPEDA) may also apply when relevant.

By accepting this Privacy Policy, you acknowledge that any disputes or legal matters arising from the handling of your personal information will be subject to the jurisdiction of Canadian courts and applicable privacy regulators.

This ensures consistency, accountability, and adherence to recognized standards of patient privacy and data protection.
In the event of a conflict between this Privacy Policy and applicable legislation, the requirements of the law will prevail. Thriving Direct ADHD is committed to ensuring that its practices align with legal obligations and that patients continue to benefit from the strongest protections available under Canadian law.

By using our services, you agree that this Privacy Policy is enforceable under Canadian legal frameworks and that compliance with governing laws is essential to safeguarding your rights and ensuring transparency in how your information is managed.

Thriving Direct ADHD reserves the right to amend this Privacy Policy at any time to reflect changes in legislation, regulatory guidance, or organizational practices. Amendments may also be made to improve clarity, respond to patient feedback, or reflect updates to technology used in the delivery of services. Any modifications will take effect as soon as they are posted on the official website or communicated through other appropriate channels.

Significant amendments, such as changes to the way personal health information is collected, used, or disclosed, will be communicated to patients through secure portal messages, email notifications, or public announcements on the clinic’s website. Minor adjustments that do not materially affect your rights may be introduced without prior notice but will always be reflected in the updated version of this Privacy Policy.

Patients are encouraged to review the Privacy Policy periodically to remain informed about how their information is handled. By continuing to use our website, telehealth platform, or patient portal after amendments are posted, you consent to the revised terms and agree to be bound by them.

Thriving Direct ADHD remains committed to ensuring that all amendments align with Canadian privacy laws and professional obligations. By accepting this Privacy Policy, you acknowledge that periodic updates are necessary to maintain transparency, accountability, and compliance in the handling of personal health information.

By accessing and using the services provided by Thriving Direct ADHD, including the website, telehealth platform, and patient portal, you acknowledge that you have read, understood, and agreed to the terms outlined in this Privacy Policy. Your continued use of our services constitutes your ongoing acceptance of how personal health information is collected, used, disclosed, and safeguarded in accordance with Canadian privacy laws and professional standards.

If you do not agree with any part of this Privacy Policy, you must discontinue your use of the services immediately. Continued engagement with Thriving Direct ADHD signifies your consent to the privacy practices described herein and your commitment to comply with the responsibilities outlined in this document.

Patients are encouraged to review this Privacy Policy regularly, as updates or amendments may occur from time to time. Thriving Direct ADHD will take reasonable steps to notify patients of material changes, but it is ultimately your responsibility to remain informed of current policies.

By formally accepting this Privacy Policy, you confirm that you understand your rights, including access, correction, and withdrawal of consent, as well as the safeguards in place to protect your information. This acknowledgment reinforces the relationship of trust between you and Thriving Direct ADHD, ensuring that privacy, transparency, and accountability remain central to all services provided.