1. Purpose and scope
This Privacy Policy explains how Braxia Health (“Braxia”, “we”, “us”, “our”) collects, uses, discloses, and protects information collected through our website braxiahealth.com, including contact, referral and other online forms, and any related online services (the “Site”).
This Policy applies to information collected through the Site and supplements, and does not replace, any privacy notices or consent forms provided to you in our clinics or during your care.
2. Our role under PHIPA
Braxia Health operates outpatient clinical and research treatment facilities that provide psychedelic therapy and other mental health treatments for depression and other mood disorders. In providing these services, we are a “health information custodian” under Ontario’s Personal Health Information Protection Act, 2004 (“PHIPA”), which establishes rules for the collection, use, and disclosure of personal health information in Ontario.
We are required by law to protect personal health information, to collect, use and disclose it only as permitted or required by PHIPA, to obtain consent except in limited circumstances, and to maintain appropriate administrative, technical and physical safeguards.
3. Information we collect through the Site
Depending on how you use the Site, we may collect the following categories of information:
- Basic contact information, such as your name, email address, phone number and city or province, when you submit a question or request that we contact you.
- Referral‑related information submitted by health‑care providers through our referral or “refer a patient” pages, which may include patient identification and relevant clinical information, in accordance with PHIPA and applicable professional standards.
- Technical and usage information, such as IP address, browser type, device identifiers, and pages visited, collected through cookies or similar technologies to operate and improve the Site.
- Any other information you choose to provide to us through web forms, email links or other interactive features on the Site.
Where information collected through the Site constitutes personal health information, we handle it in a PHIPA‑directed manner, as outlined below.
4. How we use information
We may use information collected through the Site for the following purposes:
- To respond to your inquiries, provide information about our services, and schedule or manage appointments or assessments.
- To process and review referrals from health‑care providers, determine eligibility for psychedelic therapy or other mental health treatments, and coordinate care.
- To operate, maintain, secure and improve the Site, including monitoring performance and usage patterns.
- To comply with our legal, regulatory and professional obligations, including obligations under PHIPA and other applicable laws.
- For de‑identified or aggregated analytics, quality improvement, planning and research, where permitted by law and applicable ethics requirements.
When using personal health information, we limit use to what is reasonably necessary for the purposes identified and as permitted or required by PHIPA.
5. PHIPA‑directed handling of personal health information
When we collect personal health information through the Site (for example, through referral forms or information you provide to support your care), we manage it in accordance with PHIPA and related guidance:
- Consent: With limited statutory exceptions, we obtain implied or express consent to collect, use, and disclose personal health information for the purpose of providing or assisting in the provision of health care, and will rely on your or your substitute decision‑maker’s instructions regarding consent and withdrawal of consent.
- Collection, use and disclosure: We collect only as much personal health information as is reasonably necessary, use it only for the purposes permitted or required by PHIPA, and disclose it only as permitted by PHIPA (for example, to other health‑care providers involved in your care, or where required by law).
- Safeguards: We implement administrative, technical and physical safeguards to protect personal health information against theft, loss and unauthorized access, use, disclosure, copying, modification or disposal, including secure systems for health records and appropriate access controls.
- Access and correction: You have rights under PHIPA to request access to and correction of your personal health information in our custody or control, subject to limited exceptions.
Details on how to exercise these rights or make a complaint are set out in section 11 below.
6. Email and chat – do not send personal health information
While you may contact us via email or any chat or messaging features associated with the Site to request general information about our services, these channels are not secure for transmitting sensitive or clinical details.
We strongly advise that you do not include personal health information (such as diagnoses, treatment history, medication lists, or detailed clinical descriptions) in any email or chat message you send to us. If personal health information is initially received by email or chat, we will, where appropriate, redirect the conversation to a more secure channel and manage any health information we receive in a PHIPA‑directed manner.
Where we communicate personal health information electronically with other health information custodians (for example, in connection with referrals), we take reasonable steps to secure such communications, including the use of encryption and other safeguards where appropriate, in accordance with PHIPA and applicable guidance.
7. Cookies and analytics
The Site may use cookies or similar technologies to:
- Remember your preferences and improve your browsing experience.
- Compile statistics about Site usage to help us understand how visitors use the Site and to improve its content and layout.
You may be able to adjust your browser settings to refuse or delete cookies; however, this may affect the functionality of the Site.
8. How we share information
We may disclose information collected through the Site:
- To our staff, contractors and service providers who need the information to perform services for us and who are subject to appropriate confidentiality and security obligations.
- To other health‑care providers or organizations involved in your care, as permitted or required by PHIPA.
- To regulatory bodies, professional colleges, courts, law enforcement, or other parties where we are required or permitted by law to do so.
- In a de‑identified or aggregated form that does not reasonably identify you, for purposes such as research, quality improvement and planning, where permitted by law.
We do not sell personal information or personal health information collected through the Site.
9. Retention and security
We retain personal health information and other personal information collected through the Site for as long as necessary to fulfill the purposes described in this Policy and to meet our legal and regulatory obligations, including health‑record retention requirements.
We take reasonable steps to protect information in our custody or control through administrative, technical and physical safeguards appropriate to the sensitivity of the information, including access controls, secure storage and secure disposal practices.
10. Links to other sites
The Site may contain links to third‑party websites or resources that are not operated or controlled by Braxia Health, such as information resources or partner organizations. This Policy does not apply to those third‑party sites, and we are not responsible for their privacy practices. You should review the privacy policies of any third‑party sites you visit.
11. Your rights and contact information
Under PHIPA, you have rights in relation to your personal health information, including the right to:
- Request access to your personal health information in our custody or control, subject to limited exceptions.
- Request corrections to your health records where you believe they are inaccurate or incomplete.
- In certain circumstances, restrict or withdraw your consent to the use or disclosure of your personal health information, subject to legal and clinical limitations.
- Complain to the Information and Privacy Commissioner of Ontario if you are not satisfied with our response to your privacy concerns.
To ask a question about this Policy, request access or correction, or raise a privacy concern, please contact:
Braxia Health
1100 Dundas Street West, Unit 7–8
Mississauga, ON L5C 4E7
Privacy Officer: Dr. Kevin Kratiuk
Email: [email protected]
You may also contact:
Information and Privacy Commissioner of Ontario
2 Bloor Street East, Suite 1400
Toronto, Ontario M4W 1A8
Telephone: 416‑326‑3333 or 1‑800‑387‑0073
Website: www.ipc.on.ca
12. Updates to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The “last updated” date below indicates when this Policy was most recently revised. We encourage you to review this Policy periodically.
Last updated: March 3, 2026
English 
French