Home About Us Our Team Services Funding & Coverage FAQ & Resources Contact Get Started
Legal

Privacy Policy

How Heartful ABA collects, uses, and protects your personal information.

Effective Date: April 19, 2026  |  Last Updated: April 19, 2026  |  Governing Law: Ontario, Canada

Heartful ABA ("we", "us", or "our") is committed to protecting the privacy of families, children, and individuals who interact with our services. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Personal Health Information Protection Act (PHIPA, Ontario).

By using our website (www.heartfulaba.com) or submitting any form, you consent to the practices described in this policy.

1. Who We Are

Heartful ABA is a home-based Applied Behaviour Analysis (ABA) therapy and speech therapy provider operating in the Greater Toronto Area (Mississauga, Vaughan, Brampton, Caledon, Oakville, and Toronto), Ontario, Canada.

2. Information We Collect

2.1 Information You Provide Directly

When you complete our contact form or intake form, we may collect:

  • Parent/guardian name, email address, and phone number
  • Child's first name, age, and relevant developmental or diagnostic information
  • Location/city (to assess service availability)
  • Your message, questions, or service enquiry details
  • Preferred contact times and communication preferences

2.2 Information Collected Automatically

When you visit our website, standard web technologies may collect:

  • IP address and approximate geographic location
  • Browser type, device type, and operating system
  • Pages visited, time spent on pages, and referring URL
  • Cookie identifiers (see our Cookie Policy)

3. How We Use Your Information

We use your personal information only for the purposes for which it was collected, including:

  • Responding to your enquiries and intake requests
  • Scheduling consultations and coordinating service delivery
  • Communicating about your child's therapy program and progress
  • Processing and managing OAP funding, insurance, or payment arrangements
  • Sending service-related updates, scheduling reminders, or important notices
  • Improving our website and services
  • Complying with legal and regulatory obligations

We do not use your information for unsolicited marketing without your explicit consent, and we do not sell personal information to third parties.

4. How We Share Your Information

We may share your information only in the following limited circumstances:

  • Service Providers: We use Formspree and Web3Forms to process website form submissions. These services receive form data solely to deliver it to us and operate under their own privacy policies.
  • OAP & Funding Bodies: With your consent, we may share relevant information with the Ontario Autism Program (OAP) or your extended health insurer to facilitate funding.
  • Supervised Practice: Our therapists operate under BCBA (Board Certified Behaviour Analyst) supervision. Relevant case information may be shared within our clinical team for treatment purposes.
  • Legal Requirements: We may disclose information if required by law, court order, or regulatory authority.

5. Personal Health Information & PHIPA

Information relating to the health, diagnosis, or treatment of a child (including autism-related or developmental information) is considered personal health information (PHI) under PHIPA. We collect, use, and disclose PHI only:

  • With the informed consent of the parent or legal guardian
  • For the purpose of providing or facilitating health care services
  • As required or permitted by law

Please also review our full PHIPA Notice for details on your health information rights.

6. Data Retention

We retain personal information only as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Client therapy records are retained in accordance with Ontario's regulated health record-keeping standards. When information is no longer required, it is securely deleted or anonymised.

7. Data Security

We take reasonable technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Under PIPEDA and PHIPA, you have the right to:

  • Access — request a copy of the personal information we hold about you or your child
  • Correction — request correction of inaccurate or incomplete information
  • Withdrawal of Consent — withdraw consent for the collection or use of your information (subject to legal or contractual limitations)
  • Complaint — file a complaint with the Office of the Privacy Commissioner of Canada (PIPEDA) or the Information and Privacy Commissioner of Ontario (PHIPA)

To exercise any of these rights, contact us at heartfulabaservices@gmail.com.

9. Third-Party Links

Our website may contain links to external sites (e.g. Instagram, WhatsApp). We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

10. Children's Privacy

Our services are intended for families with children. All personal information relating to a child is collected from, and with the consent of, a parent or legal guardian. We do not knowingly collect information directly from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our website or services after any changes constitutes acceptance of the revised policy.

12. Contact Us

For privacy-related enquiries or to exercise your rights, please contact: