Privacy Notice

1. Who this notice covers

This notice is from Petri Wai, the information-technology operator of Innerbloom Mind and Wellness. It describes personal information Petri Wai processes to run the website and tools.

It is not the privacy notice of Rejean M. Lopez or of any other provider. A provider’s duties for session notes, assessments, and clinical correspondence are that provider’s, under the provider’s own notice and under the law that applies to that practice, which may include the Philippine Data Privacy Act of 2012, the Mental Health Act (Republic Act No. 11036), professional-ethics rules, and, for some providers, U.S. health-privacy law.

The English text controls over the Filipino summary.

2. Two roles, kept apart

For technical data needed to run the site — language preference, security logs, and payment status — Petri Wai decides the purposes and is the personal-information controller of that limited data.

For information you give so a provider can consider care — your name, contact details, preferred time, and anything you write about your concerns — the provider is the controller once it reaches the provider. Petri Wai’s role, if any, is only to let you transmit it. Petri Wai does not use that information to diagnose you, score your health, or market to you.

Petri Wai does not want psychotherapy notes and does not provide a chart, a journal stored on its servers, or a voice-note archive. Do not send session notes to Petri Wai.

3. Information this site actually handles

Language choice is stored in your browser (localStorage) so the site can reopen in Filipino or English. You can clear it in your browser.

Match answers are stored in this browser tab (sessionStorage) so the booking page can highlight times. They are not uploaded as a profile. The safe-exit control clears session storage. Closing the tab generally clears it as well.

An appointment request is composed in your browser. When you send it, your email program opens a message addressed to the provider. This website does not save that message in a database.

A video room is opened at a third-party address. Petri Wai stores the room code in the link itself. Petri Wai does not record audio or video and does not keep a transcript.

If you use checkout, the payment company processes the card or wallet. Petri Wai may learn whether checkout was created and whether it was marked paid, the service name, and the amount. Petri Wai does not store full payment-card numbers.

The host of the website may create ordinary connection logs, such as IP address, time, and the page requested, to keep the site secure and to debug failures. Those logs are not used to build an advertising profile.

The crisis list uses publicly known helpline numbers. Opening it does not create an account and is not written to a client database.

4. What is not collected here

Petri Wai does not operate an end-to-end encrypted journal, a stored mood diary, or a voice-note inbox on this site. Marketing text must not say otherwise. If a future tool does store health information, this notice will be updated before that tool is offered, and a provider’s own consent will be required.

Petri Wai does not knowingly buy personal information, and does not sell or “share” personal information for cross-context behavioral advertising.

5. Sensitive information

What you type about your concerns, and the topics you select, can be sensitive personal information and health information. You do not have to type details into the note. A time, a name, and an email are enough to make a request.

The booking checkbox is the consent to transmit that information to the named provider for the purpose of considering an appointment. Petri Wai does not rely on that information for its own purposes.

Do not include someone else’s health information unless you have the legal right to share it.

6. Purposes and legal bases

Petri Wai processes technical data to provide the site you asked to use (contract, or steps before a contract), to keep the site secure (legitimate interests, or a legal duty where one exists), and, for sensitive details you choose to type, on your consent.

You may withdraw consent for a future request by not submitting it. Withdrawal does not recall a message already delivered to a provider. Ask that provider if you want it deleted from the provider’s inbox or records, subject to records the provider is legally required to keep.

7. Who receives information

The provider you address receives the booking email. Today, requests written to Rejean M. Lopez go to the clinical email published on the site. That mailbox is hers, not Petri Wai’s. Her email host (for example Google, if the address is Gmail) processes it under that host’s terms.

Video is processed by the video host. Payments are processed by the payment company. The website host processes connection logs. Fonts may be fetched from a font host, which may see your IP address.

Petri Wai may disclose technical information if a law, court, or regulator requires it, and will limit the disclosure to what is required. Petri Wai does not voluntarily give clinical content to employers, schools, or family members.

Petri Wai generally cannot produce a provider’s clinical records, because Petri Wai does not hold them.

8. Location of processing

You may be in the Philippines or elsewhere, including as an overseas worker. The website host, email host, video host, and payment company may process data in the United States or another country that may not have the same privacy law as the Philippines.

By using the tools after reading this notice, you consent to that transfer for the limited purposes above. This consent does not waive rights the Data Privacy Act says cannot be waived.

9. Retention

Browser storage lasts until you clear it, use safe exit (session storage), or the tab closes. Petri Wai does not set a server-side retention period for booking text it does not store.

Payment-status records, if created, are kept only as long as needed for the payment, for accounting, and for any legal hold, and then deleted or de-identified.

Host logs follow the host’s ordinary short operational cycle unless a longer period is needed to investigate abuse or to meet a legal duty.

A provider’s retention of clinical records follows the provider’s profession, not this notice.

10. Security

Petri Wai uses reasonable measures appropriate to a marketing and scheduling site, including HTTPS and access limited to what the software needs. No method of transmission or storage is perfectly secure.

Email and third-party video are not confidential in the way a dedicated medical-record system can be. Do not use them for information you would only put in a clinical chart. A provider who needs a different channel is responsible for offering one.

11. Your rights

Depending on where you live, you may have rights to be informed, to access, to correct, to delete, to object, to portability, and to complain. Philippine residents may exercise rights under the Data Privacy Act and may complain to the National Privacy Commission (privacy.gov.ph). People in the EEA or UK may have GDPR or UK GDPR rights. People in some U.S. states may have additional consumer-privacy rights.

For technical data that Petri Wai actually holds, write to notices@innerbloommindandwellness.com. Petri Wai will respond within the time the applicable law requires and, where no shorter period applies, within 30 days after a request that identifies you and the data. Petri Wai may need to confirm your identity.

For clinical information, write to the provider. Petri Wai will forward a misdirected clinical request to the provider when it is identifiable and the provider’s address is known, and will tell you that the provider is the right respondent.

Petri Wai will not discriminate against you for exercising a privacy right. The site does not require an account.

12. Children

The site is not directed at children under 18, and Petri Wai does not knowingly collect personal information from them. If you believe a child sent personal information without a parent’s involvement, write to notices@innerbloommindandwellness.com and to the provider so it can be deleted from any place it is still held.

13. Breaches

If Petri Wai discovers a breach of personal data it holds, it will notify affected people and, where the law requires, the National Privacy Commission or another authority, within the required time.

Petri Wai is not the party that notifies you of a breach that occurs only in a provider’s records, inbox, or device. That provider has that duty.

14. HIPAA and similar laws

Petri Wai is not a health-care provider and is not, by operating this website, a “covered entity.” This site is not offered as a HIPAA-compliant electronic health-record system.

A provider who is a U.S. covered entity or business associate must not use the site to create, receive, or store protected health information unless a business-associate agreement with Petri Wai is signed first. No such agreement is in place merely because this notice exists. Public video rooms and ordinary email should be assumed not to meet HIPAA’s security rule.

References anywhere on the site to “HIPAA principles” mean a design preference for data minimization. They are not a representation of HIPAA compliance.

15. Changes and contact

This notice may be updated by posting a new dated version. The date at the top is the current version.

Platform privacy contact: notices@innerbloommindandwellness.com. Clinical privacy contact: the provider named in your request. National Privacy Commission, Philippines: privacy.gov.ph.