Privacy policy
Last updated: August 2, 2026
PsyPsy is a Québec platform that connects people with mental health professionals. This policy explains what information we collect, why, who we share it with, and what your rights are.
1. Who we are
PsyPsy is operated by Audrey Lalonde, whose establishment is located at 14, rue de Falaise, Blainville (Québec) J7B 1X6.
PsyPsy is not a care service. We provide no treatment, make no diagnosis, and are not an emergency service. The professional relationship that follows a match is formed directly between you and the professional, under their own professional obligations.
Privacy officer
In accordance with the Act respecting the protection of personal information in the private sector (as amended by Law 25), the person responsible is Audrey Lalonde, founder of PsyPsy. You may write to her at info@psypsy.ca with any question, to exercise your rights, or to file a complaint.
2. What this policy covers
It applies to psypsy.ca and to the platform accessible from it, for all four account types: client, professional, clinic and PsyPsy administration.
It does not cover what happens after your match: once you become a professional's client, they become responsible for the information they collect in their practice, under the rules of their order.
3. Information we collect
If you are looking for a professional
| Information | Required | Why |
|---|---|---|
| Full name | Yes | To identify you; shared with a professional only after your consent |
| Email address | Yes | Authentication and notifications |
| Password | Yes | Stored as an irreversible hash, never in plain text |
| Phone | No | To reach you after a match, if you provide it |
| Postal code | Yes | To suggest professionals within a reasonable distance |
| Month and year of birth | Yes | Some professionals only practise with certain age groups. We do not ask for the day |
Your consultation request contains: who it is for, the reasons chosen from the official taxonomy of the Ordre des psychologues du Québec, a free-text description if you write one, the type(s) of professional sought, language, preferred gender, meeting format, maximum distance, budget, third-party payer and your availability.
Sensitive information. A consultation reason reveals information about your health. Law 25 classifies such information as sensitive and requires your express, separate and informed consent. That is why the platform asks for an explicit confirmation when you submit your request, and logs that consent.
If your request concerns your child or someone close to you, the information identifying them is kept in a separate field, never visible to professionals until you have consented to lifting anonymity.
If you are a professional
Full name and title, profession, professional order and licence number, proof of licence, profile photo, biography, practice address and postal code, gender, languages, reasons you take on, services and rates, consultation formats, accepted third-party payers, availability and, where applicable, your clinic affiliations. We also keep the history of administrative decisions concerning you, so that we can account for them.
If you represent a clinic
Clinic name, address, Québec enterprise number, name and contact details of the contact person, phone, logo, and the list of affiliated professionals — each of whom has individually consented to that affiliation.
In all cases
- Consents: nature, date and time of each consent given or withdrawn.
- Notifications we send you, and whether they resulted in an email.
- Feedback sent through the feedback module: your message, the page it came from, the device type and any attachments.
- Support thread: your exchanges with the PsyPsy team.
- Administration log: actions taken by our team on accounts.
What we do not collect
We use no audience measurement, advertising or behavioural tracking tools — no Google Analytics, no advertising pixel, no third-party statistics service. We do not sell, rent or trade any personal information. We do not ask for your day of birth, your health insurance number, or any financial data.
4. Account access by the administration
For support and diagnostic purposes, our team can access the platform seeing what you see. This access is reserved for senior administrators, limited to 30 minutes, and flagged by a visible banner throughout.
Your private messaging with a professional is excluded from it, for reading as well as writing: the PsyPsy team cannot read the content of those exchanges, even during such a session. Every session is logged: who, which account, when, from which address and which browser.
5. Why we use this information
| Purpose | Basis |
|---|---|
| Creating and managing your account | Performance of our service |
| Presenting your anonymized request to relevant professionals | Your express consent |
| Allowing a professional to offer you an appointment | Performance of the service |
| Revealing your identity to a professional | Your explicit consent, case by case |
| Verifying a professional's licence and order membership | Safety of individuals and legitimate interest |
| Notifying you (proposal, message, request expiry) | Performance of the service |
| Security, abuse prevention, access logging | Legal obligation and legitimate interest |
| Sending you launch updates | Your consent, withdrawable in one click |
No decision producing a legal effect is made on a solely automated basis. Matching a request with professionals is a display filter: it is the professional who decides to contact you, and you who decide to accept.
6. The anonymity principle
When you submit a request, verified professionals see the reason, the type of professional sought, the language, the approximate area, the budget, the availability and your free-text description. They do not see your name, your email, your phone, your exact address, or the information identifying the person concerned if it is not you.
This separation is enforced at the database level: professionals read requests through a technical view that simply does not contain the identifying fields. It is not a display filter that a workaround could defeat. Your identity is shared only when you authorize it, for one specific professional.
An honest caveat: your free-text description is a field you fill in yourself. If you write your name or phone number in it, professionals will see it. The platform reminds you of this as you type.
8. How long we keep your information
| Information | Duration |
|---|---|
| Active account | As long as your account exists |
| Consultation request | Active for 30 days (extendable), then kept inactive for 24 months |
| Messages exchanged | As long as your account exists; anonymized on deletion |
| Consents | 3 years after the end of the relationship, to be able to demonstrate they were obtained |
| A professional's proof of licence | As long as the account is active, then 12 months |
| Administration and account-access logs | 24 months |
| Launch newsletter registration | Until you unsubscribe |
Account deletion. You can request it from your account. A 30-day grace period then opens, during which you can change your mind. At the end of it, your identifying information is irreversibly anonymized: what remains no longer identifies you and serves only to preserve the consistency of records.
9. Your rights
- Access the information we hold about you.
- Have it corrected if it is inaccurate or incomplete.
- Withdraw your consent, in particular to the distribution of your request.
- Request deletion of your account and anonymization of your information.
- Receive your information in a structured, commonly used technological format.
- Be informed of any automated use concerning you.
- File a complaint with the Commission d'accès à l'information du Québec if our response does not satisfy you.
Write to info@psypsy.ca. We respond within 30 days, free of charge. We may ask you to confirm your identity before acting — that is a protection for you.
11. Security
- All communications are encrypted in transit (HTTPS enforced).
- Passwords are stored as irreversible hashes — we cannot read them.
- Data access is controlled at the database level itself, table by table: a professional technically cannot read what is not meant for them, even in the event of an application defect.
- Sensitive documents are held in private storage.
- Administrative access is logged.
- We carry out regular security reviews and fix what they reveal.
No system is infallible. In the event of a confidentiality incident presenting a risk of serious injury, we would inform you and the Commission d'accès à l'information promptly. We keep an incident register, as the law requires.
12. Minors
A PsyPsy account must be created by a person of full age. A request for a child or teenager is submitted by their parent or guardian, who consents on their behalf.
13. Changes
Any significant change will be signalled to you by email or by a notice in your account, before it takes effect. The update date appears at the top of this document.
14. Contact us
Audrey Lalonde — privacy officer
info@psypsy.ca · 14, rue de Falaise, Blainville (Québec) J7B 1X6
Commission d'accès à l'information du Québec — the authority with which you may file a complaint. Its contact details are public on its website.