Privacy Policy
Privacy Policy
Effective date: August 21, 2026
Last updated: August 21, 2026
1. About This Privacy Policy
Safoura Manual Therapy (“Safoura Manual Therapy,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information and personal health information entrusted to us.
This Privacy Policy explains how we collect, use, disclose, retain, and protect information obtained through:
Our website at https://safouratherapy.ca/;
Appointment and contact requests;
Telephone, email, and other communications;
Consultations, assessments, and treatment services;
Payment, insurance receipt, and direct-billing activities; and
Other interactions with Safoura Manual Therapy.
Business name: SAFOURA MANUAL THERAPY
Business Identification Number (BIN): 1001543340
Our privacy practices are intended to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and, where applicable to our services and professional responsibilities, Ontario’s Personal Health Information Protection Act, 2004 (“PHIPA”).
2. Information We May Collect
The information we collect depends on how you interact with us and which services you request.
Contact and Appointment Information
We may collect:
Your first and last name;
Email address;
Telephone number;
Preferred appointment date and time;
Details included in an appointment or contact request;
Communication preferences; and
Records of communications with us.
Personal and Health Information
When reasonably necessary to assess your needs, provide treatment, or maintain an appropriate client record, we may collect:
Date of birth, address, and emergency-contact information;
Relevant health history;
Current symptoms, concerns, or treatment goals;
Information about injuries, medical conditions, medications, allergies, or previous treatments;
Assessment findings and treatment plans;
Treatment dates, services provided, progress notes, and outcomes;
Consent forms and other clinical documentation;
Referrals or information received from other care providers with proper authorization; and
Other information you voluntarily provide in connection with your care.
We limit the collection of personal health information to information reasonably necessary for the identified purposes.
Payment, Receipt, and Insurance Information
Where applicable, we may collect:
Billing address and transaction details;
Information required to prepare treatment receipts;
Insurance provider and plan information;
Policy, member, or certificate numbers;
Information required to submit or support a direct-billing claim;
Claim status and benefit information; and
Records related to payments, refunds, outstanding balances, and accounting.
Payment-card information may be processed by a payment service provider. We may not directly store complete payment-card information when payment is handled through such a provider.
Website and Technical Information
When you visit our website, certain technical information may be collected automatically, including:
Internet Protocol address;
Browser and device type;
Operating system;
Referring website or page;
Pages viewed and time spent on the website;
Approximate location derived from an IP address;
Website errors and performance information; and
Cookie or similar technology identifiers.
3. How We Collect Information
We may collect information:
Directly from you;
Through our website forms;
During appointments, consultations, assessments, or treatments;
By telephone, email, text message, or social media;
From a parent, guardian, substitute decision-maker, or authorized representative;
From an insurer or benefit administrator;
From another care provider, with consent or as otherwise permitted by law; and
Automatically through website technologies and server logs.
4. How We Use Information
We may use personal information and personal health information to:
Respond to inquiries and appointment requests;
Schedule, confirm, reschedule, or cancel appointments;
Assess your needs and provide treatment services;
Develop, document, and manage treatment plans;
Maintain accurate clinical and business records;
Communicate information related to your appointments or care;
Prepare insurance receipts and process authorized direct-billing claims;
Collect payments and manage refunds or outstanding balances;
Communicate with insurers, benefit administrators, or authorized care providers;
Operate, maintain, secure, and improve our website;
Detect and prevent fraud, misuse, or security incidents;
Meet legal, regulatory, insurance, tax, accounting, and professional obligations;
Respond to lawful requests, court orders, or regulatory requirements; and
Protect the rights, health, safety, and security of our clients, practitioners, and others.
We will not use personal information for a materially different purpose without obtaining additional consent unless the use is permitted or required by law.
5. Consent and Withdrawal of Consent
We obtain consent in a manner appropriate to the sensitivity of the information and the circumstances. Consent may be express or implied where permitted by law.
By voluntarily submitting information through our website, contacting us, or receiving services from us, you consent to the collection, use, and disclosure of information for the purposes explained at or before the time of collection and as described in this Privacy Policy.
You may withdraw consent to certain uses or disclosures by contacting our Privacy Officer. Withdrawal of consent will not affect information already collected or processed with valid consent. It may also be subject to legal, contractual, insurance, or professional record-keeping requirements.
Withdrawing consent may limit our ability to provide certain services, process insurance claims, or communicate with you about your care. We will explain the applicable consequences before processing your request.
6. Disclosure of Information
We do not sell or rent personal information or personal health information.
We may disclose information in the following circumstances:
Service Providers
We may use trusted providers that support:
Website hosting and maintenance;
Website and appointment forms;
Email and communication services;
Appointment scheduling;
Secure record storage;
Payment processing;
Insurance claim processing;
Accounting and bookkeeping;
Data backup and cybersecurity; and
Professional or legal services.
These providers are authorized to access information only as necessary to perform services for us and are expected to protect it appropriately.
Insurance and Direct Billing
With your consent, we may disclose the information reasonably required to verify coverage, submit a claim, process direct billing, respond to an insurer’s request, or address a claim-related issue.
Insurers and benefit administrators have their own privacy practices. You should review the privacy policy of your insurance provider for information about how it handles your data.
Care Providers and Authorized Representatives
With your consent, we may disclose relevant information to another treatment provider, physician, regulated health professional, caregiver, parent, guardian, substitute decision-maker, or other authorized representative.
Legal, Safety, and Regulatory Purposes
We may disclose information without consent when permitted or required by law, including where necessary to:
Comply with a court order, warrant, subpoena, or lawful regulatory request;
Report information required by applicable law;
Address an emergency or serious threat to health or safety;
Investigate fraud, misconduct, or a security incident;
Collect a lawful debt; or
Protect our legal rights or respond to legal proceedings.
7. Processing Outside Ontario or Canada
Some service providers may store or process information outside Ontario or Canada. When information is processed in another jurisdiction, it may be subject to that jurisdiction’s laws and may be accessible to courts, law-enforcement agencies, or government authorities in accordance with local law.
We remain responsible for personal information under our control and take reasonable steps to require service providers to protect it appropriately.
You may contact our Privacy Officer for more information about service providers that may process information outside Canada.
8. Website Forms and Electronic Communications
Information submitted through our website forms is used to respond to inquiries and appointment requests.
Website forms and standard email should not be used to send highly sensitive medical information unless we specifically request it through an appropriate channel. Although we take reasonable precautions, no website, email, or internet transmission can be guaranteed to be completely secure.
Our website and email are not monitored continuously. If you are experiencing a medical emergency, call 911 or seek immediate medical assistance.
9. Cookies and Website Technologies
Our website may use cookies and similar technologies required for:
Basic website operation;
Form functionality;
Security and fraud prevention;
Remembering user preferences; and
Understanding general website performance.
Our website may also load resources supplied by third parties, such as website-hosting, form, plugin, or font providers. These providers may receive limited technical information, such as an IP address, browser type, and the page requesting the resource.
You can control or delete cookies through your browser settings. Blocking necessary cookies may prevent certain website features or forms from functioning properly.
If we introduce advertising, behavioural tracking, or additional analytics technologies, we will update this policy and obtain consent where required.
10. Marketing Communications
We may send promotional emails or text messages only where we have the consent or other lawful authority required under Canada’s anti-spam legislation.
Appointment confirmations, treatment-related communications, receipts, and responses to your inquiries are service communications and are not necessarily marketing messages.
You may unsubscribe from promotional communications at any time by using the unsubscribe method provided in the message or by contacting us. We may retain limited information necessary to respect and document your unsubscribe request.
11. Retention and Disposal
We keep personal information only for as long as reasonably necessary to:
Provide services and manage our relationship with you;
Maintain appropriate treatment and clinical records;
Meet legal, tax, accounting, insurance, and professional requirements;
Resolve disputes;
Respond to complaints or investigations; and
Enforce agreements and protect legal rights.
Retention periods may vary depending on the type of information, the age of the client, the nature of the treatment, and applicable legal or professional requirements.
When information is no longer required, we securely delete, destroy, or anonymize it, subject to technical and legal limitations.
12. Safeguards and Privacy Breaches
We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information, which may include:
Limiting access to authorized individuals;
Password protection and account controls;
Secure storage and backup practices;
Confidentiality requirements;
Secure disposal procedures;
Locked storage for physical records; and
Reviewing service providers’ privacy and security practices.
No system can guarantee absolute security. If a privacy or security breach occurs, we will investigate, contain, document, and address it. We will notify affected individuals and the appropriate privacy regulator when required by law.
13. Accessing or Correcting Your Information
Subject to legal exceptions, you may request:
Confirmation that we hold information about you;
Access to your personal information or personal health information;
Information about how it has been used or disclosed; and
Correction of information that is inaccurate or incomplete.
Requests should be made in writing to our Privacy Officer. We may need to verify your identity before responding.
Access may be limited where disclosure would reveal another person’s information, confidential commercial information, legally privileged information, or where another legal exception applies. If access or correction is refused, we will explain the reason where legally permitted and advise you of available complaint options.
We will respond within the period required by applicable law. A reasonable fee may apply where legally permitted, but you will be informed of the estimated cost in advance.
14. Children and Minors
Where services are provided to a child or minor, consent will be obtained from the individual legally authorized to provide it, taking into account the minor’s capacity and applicable law.
Parents, guardians, and substitute decision-makers may exercise privacy rights on behalf of a minor where legally authorized. In some circumstances, a capable minor may control their own personal health information.
15. Third-Party Websites and Social Media
Our website may contain links to third-party websites or social-media services. Those services operate independently and have their own privacy policies.
We are not responsible for the privacy, security, or content practices of third-party websites. We encourage you to review their privacy policies before providing information.
Information posted publicly on social media may be visible to other users. Please do not use public comments or social-media posts to communicate confidential health information.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technology, legal obligations, or privacy practices.
The revised policy will be posted on our website with an updated “Last updated” date. Where required, we will provide additional notice or obtain new consent for material changes.
17. Contacting the Privacy Officer
Questions, access or correction requests, consent withdrawals, and privacy complaints may be directed to:
Safoura Rafiee
Privacy Officer — Safoura Manual Therapy
BIN: 1001543340
Email: info@safouratherapy.ca
Telephone: (647) 575-8595
Website: https://safouratherapy.ca/
Please do not include unnecessary medical details in an initial email. We may arrange a more appropriate communication method if sensitive information is required.
18. Privacy Complaints
We encourage you to contact our Privacy Officer first so we can investigate and attempt to resolve your concern.
If your concern is not resolved, you may be entitled to contact the appropriate privacy regulator:
Office of the Privacy Commissioner of Canada
https://www.priv.gc.ca/en/report-a-concern/
Information and Privacy Commissioner of Ontario
https://www.ipc.on.ca/en/health-individuals/file-a-health-privacy-complaint