Privacy policy requirements BC therapists: what you need to know
If you're a therapist in British Columbia, you might be wondering: do I really need a privacy policy on my website? Especially if you're just collecting basic information like names and emails through a contact form?
The answer is yes! This is an essential step in not only building client trust, but to remain complaint with CCPA and BCACC.
Why BC therapists need a public privacy policy
In Canada, collecting any personal information triggers legal requirements under PIPEDA (the Personal Information Protection and Electronic Documents Act). In BC, you're also expected to meet professional standards set by organizations like the BCACC and CCPA.
If your website has a contact form, an intake form, a newsletter signup, or even basic Google Analytics tracking, you're collecting personal information. That means you need to:
- Clearly explain what data you're collecting
- Share how you use it
- Describe how you protect it
- Give users a way to contact you about their information
A privacy policy isn't just an internal document. It needs to be posted publicly, typically linked in the footer of every page on your site.
What else BCACC and CCPA expect
Beyond just having a privacy policy, therapists must also:
1. Be transparent about consent
Any time you collect personal information (even just an email address), you must obtain informed consent.
Tip: Add a short note near your contact form like:
"By submitting this form, you consent to the collection of your information for the purpose of responding to your inquiry. For more details, please review our Privacy Policy."
2. Clarify that contact does not create a therapeutic relationship
BCACC and CCPA emphasize that submitting a form or inquiry does not automatically establish a therapist-client relationship.
Tip: Include a disclaimer like:
"Submitting an inquiry does not establish a therapeutic relationship. Services are provided only after an initial consultation and signed agreement."
3. Ensure data is stored securely
If you're keeping records of form submissions or emails, BCACC and CCPA expect that data to be encrypted, password-protected, and ideally stored in Canada. Mention this briefly in your privacy policy or intake forms.
If you are using a platform like Squarespace for your website forms and a tool like Jane for virtual therapy sessions, you're already in good shape. Squarespace provides secure encrypted storage for basic inquiries, while Jane is fully PIPEDA-compliant for clinical data.
If you use Zoom for virtual sessions instead of Jane, make sure you:
- Use a paid Zoom account (not the free version)
- Enable end-to-end encryption
- Password-protect your sessions
- Get informed consent from clients acknowledging the use of Zoom and its privacy risks
This information should be included in your intake forms or consent to treatment documents, not necessarily on your website.
4. Market ethically
Therapists must avoid:
- Making guarantees of outcomes (e.g., "Cure your anxiety in 5 sessions!")
- Using misleading language
- Posting testimonials from current clients
Stick to describing your approach, your training, and your philosophy — not promising specific results.
How to create a privacy policy
Creating a privacy policy doesn’t have to be overwhelming. You can:
- Use a free privacy policy generator online (there are many that let you customize for Canadian law, like Termly)
- Hire a lawyer to draft one if you want a custom version
- Draft a basic one yourself by including:
- What personal information you collect (e.g., name, email, phone number)
- Why you collect it (e.g., to respond to inquiries)
- How you store it securely
- Whether you use analytics or third-party tools (like Squarespace, Google Analytics)
- How clients can contact you about their information or request deletion
Make sure your privacy policy is easy to find (linked in your footer) and written in plain language.
Simple "privacy & disclaimer" block for your website
Here's a quick section you can copy and paste under your forms:
Privacy & Disclaimer:
By submitting this form, you consent to the collection of your personal information for the purpose of responding to your inquiry. Please note that submitting an inquiry does not establish a therapeutic relationship. If you are experiencing a crisis, please contact a crisis line or emergency services. For more information, please review our Privacy Policy.
Final takeaway
If you're a therapist in BC, a simple, clear privacy policy is not just "nice to have"—it's required. It helps you build trust, stay compliant with Canadian law, and meet the ethical standards your professional associations expect.
If you use secure tools like Squarespace for your website and Jane or Zoom (with proper precautions) for virtual therapy, you're already well on your way to meeting all requirements.
Sources: