Privacy Policy

1. Who we are

Pandora’s Box Sexual Health Rehabilitation (“Pandora’s Box,” “we,” “us,” or “our”), founded by Wendy Beck-Orlando, provides person-centred, trauma-informed sexual health assessment, education, and training across British Columbia. We are responsible for the personal information in our custody and control, and we are committed to protecting it in accordance with PIPA.

2. What this policy covers

This policy explains what personal information we collect through this website and in the course of our services, why we collect it, how we use and protect it, when we may share it, and the rights you have. “Personal information” means information about an identifiable individual, as defined under PIPA.

3. Information we collect

We collect only what we need, and we collect it directly from you wherever possible:

• Contact & enquiry information: when you use our contact or intake form, we collect your name, email address, phone number (if you provide it), the role you select (for example, family member, individual, clinician, or organization), and the message you send.
• Information you choose to share: if you include details about yourself or the person you support in your message, we receive that information. Please do not send sensitive health details through the website form. We will gather any necessary health-related information securely and with your consent once we are in contact.
• Service information: if you become a client, we collect the information needed to provide care, such as assessment and planning records. This is collected and handled directly with you, not through this website.
• Basic technical information: our hosting provider may automatically log standard technical data (such as IP address and browser type) to operate and secure the site. This website does not use advertising or third-party tracking cookies.

4. Why we collect it, and your consent

Under PIPA, we collect, use, and disclose personal information only for purposes a reasonable person would consider appropriate in the circumstances, and only with your consent (express, or implied where permitted by law). We use your information to:

• respond to your enquiry and arrange a first conversation;
• provide, coordinate, and improve our assessment, education, and training services;
• communicate with you about your care, appointments, or requests;
• meet our legal, regulatory, and professional obligations.

You may withdraw your consent at any time, subject to legal or contractual limits, by contacting our Privacy Officer (see section 11). Withdrawing consent may affect our ability to provide certain services.

5. How we share information

We do not sell your personal information. We disclose it only as needed and as permitted by law, for example:

• Service providers who help us operate (such as our website host and form provider), bound to protect your information and use it only for the services they provide to us;
• With your consent and at your direction: for example, to coordinate with a caregiver, clinician, or organization you ask us to involve;
• When required or authorized by law: for example, to comply with a legal obligation or to protect health and safety.

When we transfer personal information to a service provider for processing, we remain responsible for that information and require the provider to protect it under terms consistent with this policy.

6. Where your information is stored

Some of our service providers (including our website and form provider) may store or process data on servers located outside Canada, including in the United States. Where that is the case, your information may be subject to the laws of those jurisdictions. We take reasonable steps to ensure our providers protect your information to a comparable standard. If you would prefer to share information without using the online form, you are always welcome to call or email us instead (see section 11).

7. How we protect it

We make reasonable security arrangements to protect personal information against unauthorized access, collection, use, disclosure, copying, modification, or disposal, appropriate to its sensitivity. These include limiting access to those who need it, using reputable service providers, and handling health-related information with particular care.

8. How long we keep it

We keep personal information only as long as reasonably necessary to fulfil the purposes described here or to meet legal and professional requirements. When information is no longer needed, we securely destroy, erase, or de-identify it. If we use your information to make a decision that directly affects you, we retain it for at least one year afterward, as required by PIPA.

9. Your rights: access and correction

Under PIPA, you have the right to:

• Access the personal information we hold about you, how it has been used, and to whom it has been disclosed;
• Request a correction if you believe the information is inaccurate or incomplete.

To make a request, contact our Privacy Officer (section 11). We will respond within 30 business days, with the possibility of an extension as permitted under PIPA. In limited circumstances permitted by law, we may not be able to provide access; if so, we will explain why.

10. Children and dependents

We often work with families and caregivers who support a loved one. Where you provide information on behalf of another person, you confirm you have the authority to do so. We handle information about minors and dependents with additional care and in accordance with applicable law.

11. Contact us: our Privacy Officer

For any privacy question, to withdraw consent, or to request access or correction, please contact our Privacy Officer:

12. If you have a concern

We will do our best to resolve any privacy concern directly. You also have the right to contact the Office of the Information and Privacy Commissioner for British Columbia:

Office of the Information and Privacy Commissioner for B.C.
PO Box 9038, Stn. Prov. Govt., Victoria, B.C. V8W 9A4
Phone: 250‑387‑5629 · Toll-free in B.C.: 1‑800‑663‑7867
Email: info@oipc.bc.ca
www.oipc.bc.ca

13. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. We will post the revised version here with an updated “Last updated” date. Significant changes will be communicated where appropriate.