Service privacy policy

Last Updated: June 27 2024

Layla Care Inc. (“Layla”, “we” or “us”) values the relationship it has with its clients and is committed to protecting their Personal Information (as defined below in Section III, “Definitions”) in accordance with applicable laws. When used herein, the term “client” means any individual who is receiving or has signed up or requested to receive the Layla Services and Partnership Services. (defined below).

b) Partnership Services
Layla provides personalized psychological assessment and psychotherapy services (“Partnership Services”)  as an agent to its healthcare provider partners (our “Partners”). Layla employs or contracts our team of psychologists and mental health therapists (“Layla Health Professionals”).

By receiving the Layla Services or Partnership Services, you acknowledge that you have read and understood this Privacy Policy, and you agree and consent to the collection, use, and disclosure of your Personal Information in accordance with the terms set out below. If you do not agree with this Privacy Policy, you must not supply your Personal Information to us.

I. Background

a) Layla Services
Included in the services that Layla provides is the provision of assistance to individuals to find, choose, and facilitate access to therapists and mental health programs based on individuals’:• current situation and goals for therapy;• Insurance coverage considerations;• scheduling and logistical preferences; and• therapist preferences,(collectively, the “Layla Services”).
Therapists and mental health programs suggested by Layla for clients based on the above criteria are referred to in this Privacy Policy as “Therapists”. Layla’s selection of a Therapist is a suggestion only. The Therapists are regulated healthcare professionals and are solely responsible for the services that they provide, and Layla is unable to guarantee the Therapist’s services. Clients are free to accept or reject such suggestion. Layla may engage the assistance of regulated health professionals (other than Therapists) such as social workers, social service workers, and psychotherapists (“Contracted Professionals”) to assist it in providing the Layla Services.

II. Application of privacy policy

This Privacy Policy describes Layla’s Personal Information management policies and practices, including how Layla collects, uses and discloses Personal Information in the course of providing the Layla Services and Partnership Services.
This Privacy Policy applies to Personal Information collected by Layla from individuals in the course of providing the Layla Services and Partnership Services.
This Privacy Policy does not cover:
• Personal Information provided by clients to a Therapist directly or indirectly through the Therapist’s employees or agents;
• use of Layla’s website https://www.layla.care and all webpages of that website, any other websites, digital properties, audio offerings, mobile applications and/or mobile enabled sites that are owned and/or operated by Layla and that do not have a separate terms and conditions (collectively, the “Layla Website”). A separate privacy statement, which can be found at www.layla.care/web-privacy-policy, applies to the Layla Website. This Privacy Policy is in addition to and not in substitution for the privacy policy that applies to the use of Layla’s Website; and
• any third party websites, including any websites linked from the Layla Website.  Clients are responsible for reviewing the privacy policies (if any) of any such third parties. Layla has no control over, and disclaims all responsibility for, the content, privacy policies or practices of any such third-party websites

III. Definitions

“agent” means a person that, with the authorization of a health information custodian (as defined in section 3 of the Personal Health Information Protection Act, Ontario, 2004 (“PHIPA”), acts for or on behalf of the custodian in respect of personal health information for the purposes of the custodian and not the agent’s own purposes.
“collect” means to gather, acquire, receive or obtain Personal Information by any means from any source, and “collection” has a corresponding meaning.
“consent” means voluntary agreement to the collection, use and/or disclosure of Personal Information for identified purposes.  Consent can be either “express” or “implied” and can be provided directly by the individual or by an authorized representative. “Express” consent can be given orally, electronically or in writing, but is always unequivocal and does not require any inference on the part of Layla.  “Implied” consent is consent that can reasonably be inferred from an individual’s action or inaction.
“disclose” means to release or make available Personal Information that is in the custody or control of Layla to another person who is not using the Personal Information as an agent of Layla, and “disclosure” has a corresponding meaning.
“health information custodian” means health information custodian as “Personal Health Information” means identifying information about an individual in oral or recorded form, if the information:
• Relates to the physical or mental health of the individual, including the individual’s medical history and the individual’s family medical history;
• Relates to the providing of health care to the individual, including the identification of a person as a provider of health care to the individual;
• Relates to the payment or eligibility for health care;
• Is the individual’s health care number; or
• Identifies an individual’s substitute decision-maker.
“Personal Information” means information about a specific, identifiable individual, regardless of form, including, for example, name, date of birth, address, and Personal Health Information, but does not include, for example, information related to a person in their professional (work) capacity.
“use” means to handle or deal with Personal Information that is in the custody or control of Layla, transferred from our Partners to Layla, and includes transferring the information to an agent acting on behalf of Layla.

IV. Collection of personal information by Layla

Layla may collect the following Personal Information from clients:
• name, contact information (including home address and email address), date of birth, religious affiliation(s), gender, employment status, Personal Health Information, and certain other Personal Information about the client
• credit card information and/or bank account information (where provided to us for the purposes of paying for the Layla Services); and
• other identifying information about the client that we did not request but that is provided by the client or any other person authorized to provide such information on the client’s behalf.
Please refer to Section V of this Privacy Policy for information regarding how Personal Information is used by Layla.
We will always collect Personal Information by fair and lawful means.  We may collect Personal Information from clients directly and/or from third parties (including our Partners), where we (and/or those third parties) have obtained the client’s consent to do so, or as otherwise required or permitted by applicable law. Generally, however, we collect Personal Information directly from clients when they voluntarily provide it in the course of accessing the Layla Services and Partnership Services. For example, Personal Information will be collected when a client:
• completes a client profile or intake form;
• provides it to Layla Health Professionals in the course of the client’s care;
• communicates with representatives of the Layla, via telephone, email or mail.
In any event, we limit our collection of Personal Information to that which is necessary to fulfill the purposes identified in this Privacy Policy.

Layla's privacy practices are intended to comply with applicable privacy laws, including, without limitation, the Personal Health Information Protection Act (Ontario) ("PHIPA") and the Personal Information Protection and Electronic Documents Act (Canada) ("PIPEDA"), the Personal Information Protection Act (British Columbia) (PIPA). We will maintain the privacy of Personal Information as required by applicable privacy laws in applicable jurisdictions.

V. How we use client’s personal information

We use client’s Personal Information for the following purposes:
• to provide mental health and assessment treatment services;
• to plan, administer and monitor the Layla Services and Partnership Services;
• for quality control purposes;
• for billing purposes;
• to communicate with Therapists and their agents about the client in order to determine whether the client will be matched with the Therapist and if so, to provide the Therapist with information to assist in their provision of services (e.g. psychotherapy, counselling) to the client; and
• to de-identify it (i.e. make it so that it is no longer identifies a client). Layla may use de-identified and/or aggregate information (i.e. information that is no longer Personal Information) for any reason it determines appropriate.

From time to time and in addition to the Therapists, we may retain third party individuals or companies act as service providers to assist us in the provision of the Layla Services and Partnership Services, or to perform certain tasks related to our business operations such as to provide accounting and financial, audit, legal, consulting, operational and practice management, and or other services to us. Any such service providers will be subject to any restrictions and conditions that are necessary to enable Layla to continue to provide the Layla Services and Partnership Services in accordance with applicable law.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties

VI. Access to client’s personal information

Client’s Personal Information will be accessible to Layla’s employees, Layla Health Professionals, and third party service providers, including Contracted Professionals and the Therapists, on a “need-to-know” basis (i.e. where the employee or service provider requires such information for a purpose described above in Section V and according to the principles of the Circle of Care). However, prior to gaining access to Personal Information, we require all parties to enter into agreements with us under which they are bound to abide by applicable law (including privacy laws), this Privacy Policy and our other related policies and procedures.

VII. Disclosure of personal information

Layla will maintain the client’s Personal Information in strict compliance with this Privacy Policy, including by only disclosing Personal Information in accordance with applicable laws.
We identify to whom, and for what purposes, we may disclose Personal Information, at the time we collect such information from the client to whom it relates and obtain such client’s consent to such disclosure except as required or permitted by applicable law. For example, in accordance with section 7(2)(b) of the Personal Information and Protection of Electronic Documents Act, Layla may - without the knowledge or consent of the client - use the client’s Personal Information for the purpose of acting in respect of an emergency that threatens the life, health or security of an individual.  In the event that we are required by applicable law to disclose a client’s Personal Information without their consent, we will aim to disclose only the specific information that is required in the circumstances and unless prohibited by applicable law from doing so, will inform the client about the disclosure.

VIII. Security and safeguards

Information that we collect may be processed and stored on servers located in Canada, or outside of Canada. If Personal Information is processed and/or stored outside of Canada, it will be subject to the laws of the jurisdiction where it is processed and/or stored (as the case may be) and may be accessible to that jurisdiction’s governments, courts, law enforcement or regulatory agencies. Layla uses standard security procedures and practices and other reasonable means appropriate to the nature of the Personal Information to protect it from theft, loss or unauthorized access, use (including modification and copying), disclosure or destruction.

Sometimes, unless we are otherwise prohibited, our employees, partners, and third-party service providers, may be located in other provinces or countries outside Canada, and your personal information may be subject to the laws of those provinces and countries. All such persons, whether or not they are located in Canada, are required to protect the confidentiality of your personal information in a manner that is consistent with our privacy policy and practices.

IX. Retention of personal information

We will use, disclose or retain Personal Information that clients provide to us for as long as necessary to fulfill the purposes for which that Personal Information was collected, and as permitted or required by applicable law.
Layla will return the Personal Information to its Partners following completion of the Partnership Services agreement between Layla and the specific Partner.

X. Contracted professionals and Layla health professionals

Without limiting or affecting any other part of this Privacy Policy (including, for example, Section VI):
• by receiving the Layla Services, you agree that: (i) Layla may use Contracted Professionals to assist it in delivering the Layla Services;(ii) the Contracted Professionals may, themselves, be subject to other privacy legislation, such as PHIPA; and(iii) the Contracted Professionals may: (a) use Personal Information collected / received from Layla, its employees and third party service providers for the purposes of assisting Layla in delivering the Layla Services; and (b) provide Layla, its employees and other third party service providers with Personal Information that the Contracted Professionals have received in the course of carrying out their duties to Layla; and
• By receiving Partnership Services, you agree that:
Layla Health Professionals may (a) use Personal Information collected/ received from our Partners, Layla, its employees and third party service providers for the purpose of assisting Layla Health Professionals in delivery the Partnership Services, and (b) provide our Partners, Layla and other third party service providers with Personal Information that Layla Health Professionals have received from you in the course of their provision of services
• Layla requires Contracted Professionals and Layla Health Professionals to enter into written agreement with us under which they agree to abide by applicable law (including PHIPA, as applicable), this Privacy Policy and other related policies and procedures.

XI. Changes to our privacy policy

Layla may, in its sole and absolute discretion, change this Privacy Policy from time to time. Layla will post a copy of the Privacy Policy as changed on the Layla Website. The top of the Privacy Policy will contain the date on which the Privacy Policy was last updated.

You should review the Privacy Policy from time to time. A client’s continued use of the Layla Services constitutes his/her/their agreement to abide by the Privacy Policy as changed.  If, at any point, a client objects to any term of the Privacy Policy, this client's sole recourse shall be to cease using the Layla Services. We will make a copy of the most recent Privacy Policy available on the Layla Website. Anyone may also request a copy of the Privacy Policy currently in effect at any time by contacting us via the contact information listed below in Section XII.

XII. Access, correction, or other requests

Our Chief Privacy Officer can be contacted as follows: Email: contact@layla.care, Telephone: (647) 374-4210
Clients have the right to request access to the Personal Information we have collected about them. Clients may request their Personal Information by submitting a written request to our Chief Privacy Officer. If you believe there is a mistake in your Personal Information you have the right to request that it be corrected, by sending a request to our Chief Privacy Officer.  If you have any other questions about this Privacy Policy or our privacy-related practices and procedures, please contact our Chief Privacy Officer.