Thriving Direct ADHD is committed to protecting your privacy and maintaining the confidentiality of your personal information and personal health information.
This Privacy Policy explains how Thriving Direct ADHD collects, uses, stores, protects, and discloses information when you visit our website, communicate with us, book an appointment, complete an assessment, or receive virtual healthcare services.
We have written this policy in clear language so you can understand how your information is handled and the choices and rights available to you.

Thriving Direct ADHD provides virtual ADHD assessment, treatment, and ongoing ADHD care for eligible adults aged 18 and older.
Our services may include:
• Online appointment booking
• Patient registration and intake forms
• Virtual healthcare appointments
• ADHD assessments
• Treatment planning
• Follow up care
• Prescription management when clinically appropriate
• Patient communications
• Educational resources
• Administrative and payment services
Clinical services are provided by appropriately licensed healthcare professionals in accordance with applicable professional standards and provincial requirements.

Thriving Direct ADHD handles personal information and personal health information in accordance with applicable Canadian federal and provincial privacy laws.
Depending on the province in which healthcare is provided, different privacy requirements may apply. These may include provincial health information privacy legislation, provincial private sector privacy legislation, and federal privacy legislation where applicable.
Where applicable law establishes requirements that differ from this Privacy Policy, the requirements of the law will apply.
Healthcare professionals providing care through Thriving Direct ADHD are also required to comply with the privacy, confidentiality, documentation, and record keeping requirements established by their respective regulatory colleges.

Thriving Direct ADHD is committed to responsible management of personal information and personal health information under its control.
We take reasonable steps to:
• Identify why information is being collected
• Collect only information reasonably necessary for identified purposes
• Obtain consent where required
• Limit access to authorized individuals
• Keep information as accurate and current as reasonably possible
• Protect information using appropriate safeguards
• Retain healthcare records for required periods
• Respond to requests for access or correction
• Investigate privacy concerns and suspected breaches
• Meet applicable legal, regulatory, and professional obligations
We maintain responsibility for our privacy practices and designate an appropriate individual to oversee privacy related matters.

The information we collect depends on how you interact with Thriving Direct ADHD and the services you receive.
Personal Information
We may collect:
• Full name
• Date of birth
• Address
• Email address
• Telephone number
• Province of residence
• Location at the time healthcare is provided
• Emergency contact information
• Payment and transaction information
• Communication preferences
Personal Health Information
When you request or receive healthcare, we may collect information such as:
• Current health concerns
• ADHD symptoms
• Medical history
• Mental health history
• Current and previous medications
• Allergies
• Previous diagnoses
• Previous ADHD assessments
• Relevant family health history
• Screening and assessment information
• Clinical notes
• Diagnoses
• Treatment recommendations
• Prescriptions when applicable
• Treatment response
• Follow up information
• Relevant information received from another healthcare professional with appropriate consent or lawful authority
We collect health information that is reasonably necessary to assess your needs, provide healthcare, maintain appropriate records, and meet our professional and legal responsibilities.
Website and Technical Information
When you visit our website or use our digital services, certain technical information may be collected automatically.
This may include:
• IP address
• Browser type
• Device type
• Pages visited
• Date and time of visits
• Website performance information
• Cookie information
• Security and system information
This information may be used to maintain website functionality, improve performance, understand general website usage, and protect the security of our systems.

We may collect and use personal information and personal health information to:
• Confirm your identity
• Determine whether our services are available in your province
• Register you as a patient
• Schedule and manage appointments
• Conduct ADHD assessments
• Provide treatment and follow up care
• Support clinical decision making
• Review medications and treatment response
• Communicate with you about your healthcare
• Maintain appropriate healthcare records
• Process payments and provide receipts
• Respond to questions and requests
• Maintain the security and functionality of our systems
• Improve the quality and safety of our services
• Investigate concerns or complaints
• Respond to privacy or security incidents
• Meet legal, regulatory, professional, and reporting obligations
We aim to collect only information reasonably necessary for legitimate clinical, administrative, operational, security, or legal purposes.

Thriving Direct ADHD seeks meaningful consent when consent is required for the collection, use, or disclosure of personal information or personal health information.
The type of consent required may depend on the circumstances, the sensitivity of the information, and the reason the information is being collected, used, or disclosed.
For example, information you provide during an ADHD assessment may be used by your healthcare professional to evaluate your symptoms, consider possible diagnoses, and develop appropriate treatment recommendations.
Separate consent may be requested when information is to be used or disclosed for a purpose that is not reasonably connected with providing or administering your healthcare.
There may also be circumstances in which applicable law permits or requires us to collect, use, or disclose information without your consent.

You may request to withdraw or limit consent for certain uses or disclosures of your information, subject to applicable legal, professional, contractual, and clinical limitations.
Before applying a requested restriction, we may explain how the restriction could affect our ability to provide healthcare or other services.
For example, if a healthcare professional cannot access information necessary to safely assess or treat you, we may be unable to provide certain services.
Withdrawal of consent does not normally require Thriving Direct ADHD or the healthcare professional responsible for your records to destroy information that must be retained for legal, regulatory, professional, or patient safety reasons.

Thriving Direct ADHD does not sell personal health information.
Your information may be disclosed when reasonably necessary for your healthcare, when you authorize the disclosure, or when disclosure is permitted or required by law.
Depending on the circumstances, information may be shared with:
• Healthcare professionals involved in your care
• Pharmacies
• Laboratories or diagnostic services when required
• Other healthcare providers when appropriate
• Electronic medical record providers
• Technology providers supporting clinical services
• Secure communication providers
• Payment processors
• Professional advisors when legally appropriate
• Regulatory authorities when required
• Government authorities when legally required
• Law enforcement when disclosure is legally required
We seek to limit disclosures to information reasonably necessary for the intended purpose.

Thriving Direct ADHD may use third party service providers to help operate our virtual healthcare services.
These providers may support:
• Electronic medical records
• Secure patient portals
• Appointment scheduling
• Virtual appointments
• Secure messaging
• Payment processing
• Website hosting
• Cloud infrastructure
• Email and communication services
• Security services
• Technical support
Service providers should receive access only to information reasonably necessary to perform their authorized services.
We take reasonable steps to select appropriate service providers and use contractual, administrative, organizational, and technical safeguards where appropriate.

Some technology or service providers may process or store information outside Canada.
When information is processed in another country, it may become subject to the laws of that jurisdiction and may be accessible to courts, law enforcement agencies, or government authorities according to applicable law.
Where cross border processing occurs, Thriving Direct ADHD takes reasonable steps to assess service providers and implement safeguards appropriate to the sensitivity of the information and applicable legal requirements.
You may contact our Privacy Officer if you have questions about the way service providers process personal information.

Thriving Direct ADHD currently does not provide direct billing to private insurance companies.
We may collect information necessary to process payments and provide receipts for services.
Payment information may be processed by an authorized third party payment provider. Thriving Direct ADHD may not directly receive or retain complete payment card information when transactions are handled by these providers.
Patients may choose to submit eligible receipts to their insurance provider for possible reimbursement.
Insurance coverage and reimbursement are determined by the patient's insurance provider. Thriving Direct ADHD cannot guarantee that any service will be reimbursed.

Our website may use cookies and similar technologies to support functionality, security, navigation, and website performance.
Some cookies may be necessary for the website to operate correctly.
Other technologies may help us understand general website usage and identify areas where the website can be improved.
Where required, appropriate choices will be provided regarding nonessential cookies.
You may also be able to control cookies through your browser settings. Disabling certain cookies may affect website functionality.
Personal health information collected as part of your clinical care is not sold to advertisers.

Thriving Direct ADHD may provide educational information, newsletters, service updates, or other optional communications where appropriate.
Marketing communications will be sent where we have appropriate consent or another lawful basis to communicate with you.
You may unsubscribe from optional marketing communications at any time.
Unsubscribing from marketing communications does not prevent us from contacting you about appointments, healthcare, payments, security matters, privacy matters, or other necessary administrative communications.
We do not sell personal health information to advertisers.

Thriving Direct ADHD may use social media to provide general educational information, ADHD awareness content, and updates about our services.
Social media is not a secure environment for discussing personal healthcare matters.
Please do not post personal health information, medical questions, or confidential information in public comments, posts, or other publicly visible areas.
Clinical or confidential matters should be discussed using the secure communication methods provided by the clinic.
Information voluntarily posted publicly on a third party social media platform may be subject to that platform's own privacy practices.

Thriving Direct ADHD provides healthcare primarily through virtual services.
We take reasonable steps to protect privacy and confidentiality during virtual healthcare appointments.
Patients also play an important role in maintaining privacy during telehealth appointments.
We recommend that you:
• Attend appointments from a private location
• Use a trusted internet connection
• Protect your passwords and login information
• Avoid sharing patient portal credentials
• Keep devices reasonably secure and updated
• Tell your healthcare professional if another person is present during the appointment
Thriving Direct ADHD does not routinely record clinical appointments.
If recording is ever proposed for a legitimate purpose, appropriate consent will be obtained where required.
Patients should not record, photograph, reproduce, or distribute a clinical encounter without first discussing it with the healthcare professional and complying with applicable law and clinic policy.

Personal health information is sensitive and requires appropriate safeguards.
Depending on the system and circumstances, safeguards may include:
• Access controls
• Authentication requirements
• Encryption where appropriate
• Secure communication systems
• Role based access
• Privacy and confidentiality training
• Policies limiting access to authorized individuals
• Security monitoring
• Secure record storage
• Vendor security requirements
• Privacy and security procedures
• Processes for responding to privacy incidents
No electronic or physical information system can guarantee absolute security.
However, Thriving Direct ADHD takes reasonable measures appropriate to the sensitivity of the information to reduce the risk of unauthorized access, use, loss, alteration, or disclosure.

Healthcare records must be retained according to applicable legal, regulatory, and professional requirements.
Because Thriving Direct ADHD may provide services to patients in different Canadian provinces, required retention periods may vary depending on the jurisdiction and the healthcare professional responsible for the record.
We maintain records according to applicable requirements.
When information is no longer required and may lawfully be destroyed, reasonable measures are used to securely dispose of or permanently delete the information.
We do not promise indefinite storage of healthcare records beyond applicable retention requirements.

You may request access to personal information or personal health information maintained about you, subject to limitations or exceptions permitted by applicable law.
We may require a written request and information sufficient to verify your identity and identify the records you are requesting.
We will respond to requests within the time required by applicable legislation.
Where permitted by law, a reasonable fee may apply for processing certain requests. If applicable, you will be informed before the request is completed.
In limited circumstances, access to some information may be restricted or refused where permitted or required by law.
If access is restricted or refused, we will provide information about the reason and available complaint or review options where required.

You may request correction of personal health information if you believe information contained in your record is inaccurate or incomplete.
Requests will be considered according to applicable privacy and healthcare laws.
Not every disagreement with a professional opinion, diagnosis, observation, or clinical judgment requires the original healthcare record to be changed.
Where a requested correction is refused, additional rights may be available under applicable legislation, including the ability to submit a statement of disagreement in certain circumstances.

Accurate information is important for safe and appropriate healthcare.
Please notify us when relevant information changes.
This may include:
• Contact information
• Current medications
• Allergies
• Medical conditions
• Healthcare providers
• Province of residence
• Other information relevant to your assessment or treatment
You are responsible for providing information that is accurate and complete to the best of your knowledge.
Thriving Direct ADHD and its healthcare professionals rely on the information provided by patients and authorized third parties when making clinical decisions.

Where permitted by applicable law, Thriving Direct ADHD may use appropriately deidentified or aggregated information for legitimate purposes such as:
• Quality improvement
• Service planning
• Internal analytics
• Security monitoring
• Understanding general service use
• Improving clinic operations
Reasonable measures are taken to reduce the risk that deidentified information could be linked back to an identifiable individual.
Identifiable personal health information will not be used for unrelated research without appropriate consent or another lawful authority.

Thriving Direct ADHD may occasionally participate in or support legitimate research or quality improvement activities.
If identifiable personal health information is required for research, appropriate consent, legal authority, ethics approval, or other requirements will be followed as applicable.
Participation in optional research will not be required as a condition of receiving ordinary clinical care unless otherwise permitted by law.
Declining optional research participation will not affect your eligibility to receive regular healthcare services.

A privacy breach may involve unauthorized access, collection, use, disclosure, loss, or other compromise of personal information or personal health information.
If Thriving Direct ADHD becomes aware of a suspected or confirmed privacy breach, reasonable steps will be taken to:
• Contain the incident
• Investigate what happened
• Determine what information was affected
• Assess potential risks
• Reduce the possibility of further harm
• Take appropriate corrective action
• Notify affected individuals when required
• Notify applicable privacy authorities when required
• Notify professional regulatory authorities when legally or professionally required
Our response will depend on the circumstances of the incident and applicable legal requirements.

Thriving Direct ADHD currently provides clinical ADHD services to eligible adults aged 18 and older.
Our website and Learning Hub may contain general educational information about ADHD in children, teenagers, families, or other populations. This educational content does not mean that Thriving Direct ADHD provides clinical assessment or treatment to individuals under 18.
Individuals under 18 should not independently register for our adult clinical services.
If information about a minor is provided to us unintentionally, it will be handled according to applicable privacy requirements and the circumstances involved.

Our website may contain links to websites, resources, or services operated by independent third parties.
Thriving Direct ADHD does not control the privacy practices, security practices, content, or operations of independent third party websites.
When you leave our website and visit another website, that organization's privacy policy and terms will apply.
We encourage you to review the privacy practices of third parties before providing personal information.

If you have questions about how your information is handled or believe that your privacy rights have not been respected, please contact our Privacy Officer.
We will review privacy concerns fairly and respond according to applicable legal requirements.
If you are not satisfied with our response, you may have the right to contact the privacy commissioner, privacy regulator, or other authority responsible for the jurisdiction applicable to your concern.
Making a good faith privacy complaint will not affect your ability to receive appropriate healthcare from Thriving Direct ADHD.

Questions, requests, or complaints concerning privacy may be directed to:
Privacy Officer
Thriving Direct ADHD
7030 Woodbine Avenue, Suite 500
Markham, Ontario, L3R 6G2
Privacy Email: info@thrivingdirectadhd.ca
Telephone: [INSERT TELEPHONE NUMBER]
Please avoid including sensitive medical information in ordinary unsecured email unless specifically instructed to do so.
For confidential clinical information, use the secure communication method provided by Thriving Direct ADHD whenever possible.

Thriving Direct ADHD may update this Privacy Policy when our services, technology, privacy practices, professional requirements, or applicable laws change.
The current version will be posted on our website with an effective or updated date.
When a material change affects how sensitive personal information is collected, used, or disclosed, we will take additional steps to provide notice or obtain consent where required by law.
We encourage patients and website visitors to review this Privacy Policy periodically.

This Privacy Policy is intended to operate in accordance with applicable Canadian federal and provincial privacy and healthcare requirements.
The specific legislation that applies may depend on the province where healthcare is provided, the type of information involved, and the circumstances in which information is collected, used, or disclosed.
If any provision of this Privacy Policy conflicts with a mandatory requirement of applicable law, the applicable legal requirement will prevail.
Nothing in this Privacy Policy is intended to limit rights provided to an individual under applicable privacy or healthcare legislation.

We want you to understand how your information is handled.
If you have questions about this Privacy Policy, your personal health information, access to your records, correction of information, consent, or a privacy concern, please contact our Privacy Officer.
Thriving Direct ADHD
7030 Woodbine Avenue, Suite 500
Markham, Ontario, L3R 6G2
Privacy Email: info@thrivingdirectadhd.ca
Telephone: [INSERT TELEPHONE NUMBER]
Hours:
Monday to Friday: 9:00 AM to 6:00 PM
Saturday: 10:00 AM to 6:00 PM