TheraSite

Compliance by design

Bridging the gap between clinical ethics and digital infrastructure.

PHIPA-informed architectureHTTPS-encrypted transmission

The digital landscape for mental health professionals in Ontario is unique. While generalist agencies prioritize aggressive marketing and conversion, TheraSite functions as a risk management partner. We help your online presence meet the ethical frameworks of the CRPO, OCSWSSW and PHIPA.

Navigating advertising standards

Marketing for regulated health professionals has to pass a compliance check against strict ethical codes.

The ban on testimonials

CRPO Standard 6.2 says that registrants “do not request or solicit testimonials or use them in their advertising”. This rule exists to protect the therapeutic relationship from power imbalances.

Our approach:

We never include review carousels or star ratings. Instead, we build trust with verifiable qualifications and a clear statement of your approach (written or as a short video).

Managing third-party reviews

While you cannot prevent a client from leaving a Google review, you are strictly forbidden from “republishing” it. Replying to a review can breach confidentiality.

Our approach:

We advise you not to engagewith reviews, and we provide reply templates for your Google Business Profile that acknowledge feedback without confirming the client's identity.

Data security and encryption

Under PHIPA, the therapist is the “Health Information Custodian” (HIC) and is legally responsible for the security of client data.

Privacy-forward by design

Your website collects as little as it can: no health details, only what a visitor needs to reach you.

All contact form data is transmitted over HTTPS encryptionand processed through Cloudflare's secure infrastructure. Messages aren't kept on our servers. Full PHIPA compliance depends on how you use your website and the additional safeguards you implement in your practice.

Secure intake forms

Forms that never ask for health details

Site builders like Wix and WordPress come with generic forms that aren't checked against PHIPA or CRPO expectations. We replace them with our own, which never ask for health details:

A booking link

Each therapist's booking button takes visitors to their own page in the booking system you already use, such as Jane or Owl Practice, so bookings and client details stay there.

A contact form without health details

It asks for contact details and a short message, never health details. Messages reach you by email and aren't kept on our servers.

Clinical design and crisis aversion

Trauma-informed, calm design

High-friction design or aggressive colours can trigger a stress response.

Our approach:

We follow calm design principles, with settling palettes of soft greens and earth tones.

Mobile safety and the thumb zone

Therapy searches often happen in private moments, in a parked car or late at night.

Our approach:

We design for the thumb zone: key actions (booking, crisis lines) sit within easy reach, and a booking button is always easy to reach on a phone.

AODA accessibility

Visual contrast

We ensure text has sufficient contrast against the background for users with low vision.

Keyboard navigation

Our sites are navigable without a mouse, essential for users with motor control issues.

Screen reader compatibility

We write descriptive alt text for all images to ensure a respectful experience for visually impaired visitors.

Build a practice website that is safe, secure, and CRPO-aware.

Let us handle the technical complexities so you can focus on what matters most: your clients.

Book your Compliance Audit