Review Agreements

Terms of Use
Privacy Policy
Business Associate Agreement

A. For Treatment Providers Part of an Organization

This Section A of the Provider Terms of Use is applicable to treatment providers that are associated with a provider organization that has a clinic account on the Platform.

Pursuant to an agreement between your organization and Greenspace Mental Health Ltd. (“Greenspace”), the platform located at https://greenspacehealth.com/ and https://app.greenspacehealth.com/ (“Platform”) is made available by Greenspace for use by your organization’s treatment providers and patients.

By creating a Therapist account and accessing the Platform, you acknowledge and agree that your access as a treatment provider is provided to you strictly in connection with your organization’s agreement with Greenspace (the “Agreement”). The terms and conditions applicable to your account and use of the Platform —including privacy, security, and permitted use - are governed by the Agreement, including the conditions outlined below. If you require details or a copy of the Agreement, please contact your organization’s designated representative.

Terms of Use:

To use the Platform with a patient you are required to have a clinical relationship with the patient outside of the Platform.
Greenspace is a technology provider only and has no role in the credentialing, delivery, or oversight of clinical care. You are solely responsible for the care provided to your patients.
While the Platform may provide access to certain general medical information, it cannot and is not intended to provide medical, health care or other advice to patients. The content on the Platform is not and should not be considered medical advice or a substitute for individual medical advice, diagnosis or treatment.
The Platform and services do not constitute a medical device, clinical decision support system, or other diagnostic tool. For greater clarity, no services provided by Greenspace shall be construed as a diagnosis of a Patient.
Greenspace is not responsible for the quality or effectiveness of the assessments provided by the Platform. You are responsible for selecting the appropriate assessments for your patients.
Upon registration, you will choose a username and password. You alone are responsible for keeping that password and username confidential and for any and all activity that occurs on Greenspace under such password or username. You agree to immediately notify Greenspace of any unauthorized use of your password or username or any other breach of security. You agree not to give or make available access to your account to any unauthorized individual.
You will maintain the confidentiality of Protected Health Information in accordance with all applicable federal, provincial/territorial laws and local regulations, as well as the ethical and professional standards applicable to you currently.
As a condition of your continued access to and use of Greenspace, you agree not to:

knowingly include or use any false or inaccurate information in any profile;
circumvent, disable, or otherwise interfere with security-related features of the Platform;
attempt to probe, scan or test the vulnerability of the Platform or any other Greenspace system or network or breach, impair or circumvent any security or authentication measures protecting the Platform; or
copy, disassemble, reverse engineer, decompile or otherwise attempt to discover the source code of the Platform;

Greenspace is not an electronic medical record system and you are solely responsible for maintaining your patients’ medical records in accordance with applicable laws, regulations and health regulatory college policies.
You acknowledge that Greenspace or its third party licensors and service providers shall own and retain all right, title and interest in and to all intellectual property rights in the Platform and services, including all names, copyrights, patents, trade secrets, logo designs, trade names, trade-marks and other intellectual property rights, data and information
You may close your account at any time and for any reason by providing written notice to Greenspace (support@greenspacehealth.com). Upon any termination by you, your account will no longer be accessible. Any cancellation request will be handled within 30 days of receipt.
You will be made aware of any changes to these Terms of Use or to the Platform, via email, or by posting notices on https://greenspacehealth.com/ or https://app.greenspacehealth.com/. Your continued use of the Platform after notice of any changes constitutes acceptance of the updated Terms of Use.
These Terms of Use are subject to and incorporate by reference your organization’s Agreement with Greenspace and the Privacy Policy (Authorized Users). If you require further details, please contact your organization’s designated representative.

B. For Independent Treatment Providers

This Section B of the Provider Terms of Use is applicable to independent Treatment Providers that are not associated with a provider organization that has entered into an agreement with Greenspace to make the platform available to its providers and patients.

These terms of use (the “Terms of Use” ) govern your access and use of the public website located at https://greenspacehealth.com/ (the “Website”) and the private portal which requires registration to be accessed located at https://app.greenspacehealth.com/ (the “Private Portal”, and together with the Website, the “Platform”). The words “Greenspace,” “we,” “us,” or “our” mean, collectively, Greenspace Mental Health Ltd. and all of its respective affiliates, successors or assigns. “You” or “your” means the regulated professional (“Treatment Provider”) who is permitted to provide psychotherapy services and who opens an account on the Platform. Treatment Providers may include, but are not limited to, psychiatrists, psychologists, social workers, occupational therapists, and psychotherapists.

By creating a Therapist account and accessing the Platform, you acknowledge and agree to be bound by these Terms of Use, which constitute a binding legal agreement between you, as a user of the Services (as defined in Section 4 below), and Greenspace. The obligations set forth in these Terms of Use are in addition to, and not in lieu of, your professional and legal obligations as a regulated professional.

1. Documents Incorporated by Reference

These Terms of Use incorporate by reference the following documents, which shall be construed as forming part of these Terms of Use.

2. Patients

“Patient” means (i) any person who opens an account on the Platform; (ii) any person whose information you input and record on the Platform; or (iii) a parent or legal guardian of a Patient who opens an account on the Platform.

In order to use the Services and Platform in respect of a Patient, you are required to have a clinical relationship with the Patient outside of the Platform. You are solely responsible for obtaining your Patients’ informed consent, where applicable, to treatment using the Platform or Services.

3. Services

The Platform shall enable the provision of the following services: (i) facilitate the delivery by you of assessments to Patients; (ii) enable the display of the results of assessments to you and your Patient(s); (iii) enable the display of aggregate assessment results to you; (iv) facilitate the entry and retention of progress notes and documents; and (v) facilitate the entry and retention of Patient profile information (the “Services”).

THE SERVICES DO NOT INCLUDE THE PROVISION OF HEALTH CARE SERVICES, MENTAL HEALTH SERVICES, SOCIAL OR PSYCHOTHERAPY SERVICES, OR ANY OTHER PROFESSIONAL SERVICES BY GREENSPACE. Greenspace is a technology provider only and has no role in the credentialing, delivery, or oversight of clinical care. You are solely responsible for the care provided to your Patients.

4. Medical Advice

While the Platform and Services may provide access to certain general medical information and is used to store Protected Health Information, the Services cannot and are not intended to provide medical, health care or other advice to Patients. THE CONTENT ON THE SYSTEM IS NOT AND SHOULD NOT BE CONSIDERED MEDICAL ADVICE OR A SUBSTITUTE FOR INDIVIDUAL MEDICAL ADVICE, DIAGNOSIS, OR TREATMENT. No representation or warranty is made that any particular assessment or treatment is safe, appropriate or effective, and Greenspace does not endorse or advocate any treatment method.

5. Diagnosis

The Platform and the Services do not constitute a medical device, clinical decision support system, or other diagnostic tool. If permitted, you are responsible for making your own diagnosis of the Patient or must receive such diagnosis from a qualified health care provider. For greater clarity, no Services provided by Greenspace shall be construed as a diagnosis of a Patient.

6. Assessments

Greenspace is not responsible for the quality or effectiveness of the assessments provided by the Platform. You are responsible for selecting the appropriate assessments for Patients.

7. Use Rights

While you are a registered user of the Platform and subject to the terms of these Terms of Use, Greenspace grants you a limited, non-exclusive, non-transferable, non-sublicenseable and revocable right to access and use the Platform as set out in these Terms of Use (the “Access Grant”). No licenses or other intellectual property rights in the Platform or IP Element (as defined in Section 9 below) are granted to you by implication or otherwise, except for the Access Grant and rights expressly granted in this Agreement.

8. Use Restrictions

You shall not, directly or indirectly: (a) copy, disassemble, reverse engineer, decompile, translate or create derivative works based upon the Platform; (b) license, sell, rent, lease, transfer, grant any rights in or otherwise commercially to exploit the Platform or the Services to any other party; (c) upload, post, email, transmit or otherwise use any IP Elements in any manner not expressly permitted by this Agreement without the prior written consent of Greenspace; (d) use the Services to collect or store Personal Information about other users without their express permission unless otherwise permitted by law; (e) knowingly include or use any false or inaccurate information in any profile; (f) circumvent, disable, or otherwise interfere with security-related features of the Platform or features that prevent or restrict use or copying of any IP Elements; (g) attempt to probe, scan or test the vulnerability of the Platform or any other Greenspace system or network or breach or impair or circumvent any security or authentication measures protecting the Platform or the Services; or (h) remove any copyright and other notices that are on the Platform or any of Greenspace’s social media websites.

9. Intellectual Property

You acknowledge that Greenspace or its third party licensors and service providers shall own and retain all right, title and interest in and to all intellectual property rights in the Platform and Services, including all names, copyrights, patents, trade secrets, logo designs, trade names, trade-marks and other intellectual property rights, data and information (collectively, the “IP Elements”). Any suggestions, enhancement requests, feedback, recommendations or other information provided by the you in respect of the Platform’s functionality shall be owned by Greenspace and shall be deemed included in the IP Elements.

10. Personal Information and Protected Health Information

For the purposes of this Agreement, “Personal Information” shall include (i) Protected Health Information as defined in this Section 1.4; and (ii) De-Identified Information, as defined in Section 1.6. Personal Information and Protected Health Information shall each have the meanings set out in applicable privacy statutes, including without limitation, the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and other health-related privacy statutes, as they may be amended from time to time (collectively, the “Privacy Laws”).

11. Customer Information.

As between the Parties, any information and documentation, which may be uploaded into the Platform or otherwise provided by you to Greenspace in connection with these Terms of Use, including all Personal Information Processed by Greenspace on behalf of you, shall remain the property of you (“Customer Information”). All Customer Information shall be treated as confidential information. For the avoidance of doubt, Customer Information does not include Aggregated Statistics, as defined in Section 13. You hereby grant to Greenspace a non-exclusive, royalty-free, worldwide license to reproduce, distribute, and otherwise use and display the Customer Information and perform all acts with respect to the Customer Information as may be necessary for Greenspace to provide the Services to you in accordance with these Terms of Use and your instructions, and subject to Section 13, a non-exclusive, perpetual, irrevocable, royalty-free, fully paid up, worldwide license to reproduce, distribute, modify, and otherwise use and display Customer Information incorporated within the Aggregated Statistics.

12. De-Identified Information

Any De-identified Information within Greenspace’s control will not be used by Greenspace, either alone or in combination with other information, to identify a specific individual. For the purpose of these Terms of Use, “De-identified Information” means information that has been de-identified to remove all direct personal identifiers in accordance with applicable Privacy Laws and Greenspace’s Privacy Policy (Authorized Users). Greenspace will (i) treat De-identified Information as Personal Information under these Terms of Use; and (ii) use De-identified Information to improve its Services and to train data for machine learning development in accordance with Greenspace’s Privacy Policy (Authorized Users).

13. Aggregate Statistics

Notwithstanding anything to the contrary in these Terms of Use, Greenspace may monitor your use of the Services and collect and compile Aggregated Statistics. For the purpose of these Terms of Use, “Aggregated Statistics” means data and information related to your use of the Services and Greenspace’s provision and operation of the Services for Customer that has been aggregated and anonymized to permanently remove all (direct and indirect) personal identifiers in accordance with applicable Privacy Laws and Greenspace’s Privacy Policy (Authorized Users). For greater clarity, Aggregated Statistics refers to Anonymized Information (as defined in Greenspace’s Privacy Policy (Authorized Users). You agree that Greenspace may (i) publish Aggregated Statistics through various media platforms and academic journals, in compliance with applicable laws, and (ii) share Aggregated Statistics with Greenspace’s current and prospective customers; provided that such Aggregated Statistics do not identify a specific individual, customer or Customer Information.

14. Platform Fees

Access to the Platform requires payment of the applicable fees posted on the Website (“Platform Fees”), plus applicable taxes. Users may choose to pay the Platform Fees on a monthly or annual basis in advance of each subscription period. By submitting payment information, you authorize Greenspace to charge the selected payment method on a recurring basis until the subscription is canceled in accordance with these Terms of Use. Platform Fees are subject to change, and any updates will take effect at the start of the next billing period after notice is provided.

15. Termination

You may cancel your subscription at any time through your account settings or by contacting Greenspace support. Cancellation will take effect at the end of your current subscription period, and you will continue to have access to the Platform until that time. Greenspace does not provide refunds for any partial subscription periods.

Greenspace may suspend or terminate your access to the Platform at any time, with or without notice, if you breach these Terms of Use, if required by law, or if your payment is not successfully processed. Upon termination, your Access Grant and use the Platform will immediately cease.

16. Representations and Warranties

You represent and warrant that (a) you have the legal capacity and authority to agree to acknowledge and agree to these Terms of Use; (b) are responsible for the accuracy of all registration information you submit; (c) have the legal authority and all rights necessary to provide the Customer Information to Greenspace hereunder, your provision of the Customer Information to Greenspace hereunder does not and will not violate or conflict with or result in a breach of any terms, conditions, duties or obligations you have to any third party or any other rights of any third party or any applicable law, rule or regulation; (d) you are and will be at any time you use the Platform, authorized to provide services to Patients, and shall meet all other legal requirements to provide your services to Patients in the states in or from which you provides such services; (e) you shall use the Platform and the Services in accordance with all applicable laws and regulations, including all applicable Privacy Laws; (f) all Personal Information provided or otherwise made available to Greenspace and all instructions for Processing is done in compliance with applicable law, including without limitation, applicable Privacy Laws; (g) you shall provide appropriate notices and obtain all required consents or fall within appropriate exemptions under applicable Privacy Laws to enable Greenspace to Process Personal Information, including De-identified Information, in accordance with these Terms of Use. You acknowledge that Greenspace may suspend its access to the Services without warning or terminate for material breach in accordance with Section 15 if you breach of any of the foregoing representations and warranties or if you fail to pay the Platform Fees in accordance with Section 14.

17. Privacy

You acknowledge that Greenspace is acting in the capacity of a service provider or Business Associate to you in Processing Personal Information of users using the Platform and Services. Greenspace will Process such Personal Information only on your behalf to deliver the Services and provide the Platform in accordance with applicable Privacy Laws, its Privacy Policy (Authorized Users) (incorporated herein by reference), the Terms of Use, or your other documented instructions, whether in written or electronic form. Greenspace will not disclose or transfer Personal Information to, or allow access to Personal Information (each, a “Disclosure”) by any third party (not including affiliates or subcontractors of Greenspace) without your express prior written consent, unless such Disclosure is required by applicable law. However, except in cases of gross negligence or willful misconduct, Greenspace will not be liable for any unauthorized disclosure of Personal Information despite the implementation of reasonable administrative, technical, and physical safeguards.

You acknowledge and agree that (i) Greenspace is not a “health information custodian” or “health information network provider” as those terms are defined under PHIPA or equivalent terms under concordant legislation in other states; and (ii) Greenspace is not an electronic medical record system and you are solely responsible for maintaining your Patients’ medical records in accordance with applicable laws, regulations and health regulatory college policies.

18. Indemnification

You agree to defend, indemnify and hold harmless Greenspace, its affiliates, members, directors, officers, employees, agents, and licensors from and against any third party losses, expenses, damages, claims, fines, penalties, costs and liabilities (including reasonable legal and accounting fees) resulting or arising from (i) your (or anyone using the your password or username) use of the Platform in a manner that breaches the terms of these Terms of Use; or (ii) any negligent act or any wilful misconduct of yours.

19. Warranty

Except as specifically set out in these Terms of Use, the Platform, Services, IP Elements, and all materials, information, products and services included therein, are provided “AS IS” and “AS AVAILABLE” and Greenspace expressly disclaims all warranties of any kind, express, implied, or statutory, including without limitation all implied warranties of title, merchantability, fitness for a particular purpose, non-infringement, and all warranties arising from course of dealing or performance, usage, and trade practice. You acknowledge that you are solely responsible for use of the Services and IP Elements. Greenspace makes no warranty of any kind that the IP Elements, Services, Platform, content or results of the use thereof, will meet your or any other person's requirements, operate without interruption, achieve any intended result, be compatible or work with any software, system, or other services, or be secure, accurate, complete, free of harmful code, or error free. Greenspace make no warranty that the content accessed by you on the Platform or using the Services satisfies the laws and regulations requiring the disclosure of information for prescription drugs.

In addition, Greenspace and its licensors and affiliates disclaim any warranties regarding accuracy, reliability, timeliness and performance of the Services, and the Services may experience service interruptions. No advice or information provided to you by Greenspace will create any warranty that is not expressly stated in these Terms of Use.

Greenspace makes no representations concerning, and does not guarantee, the accuracy of the Services, including, but not limited to, any information provided through the Services or their applicability to your individual circumstances. Greenspace’s services and website content are developed for use in the United States Greenspace and its licensors and affiliates make no representation or warranty concerning the services or website content when they are used in any other country.

The laws of certain jurisdictions do not allow the exclusion or limitation of legal warranties, liability or certain damages or limitations of representations made concerning goods or services. If these laws apply to you, some or all of the exclusions or limitations in these Terms of Use may not apply to you.

20. Limitation of Liability

You acknowledge that Greenspace is not a health care provider, licensed or otherwise. Greenspace cannot and will not assume responsibility for or control over the care of any patient, which shall, at all times remain your responsibility. Greenspace will not be responsible for any activity that involves the practice of medicine or the provision of health care services or social or psychotherapy services. For greater clarity, Greenspace does not provide any medical treatment, advice or opinions to Patients.

You acknowledge and agree that Greenspace is not responsible for any inaccuracy or incompleteness of information on the Platform that is the result of an error by you. Greenspace is not responsible for the results obtained from the use of the Platform or for the provision of Services as a result of reliance on any Personal Information or other data provided by a Patient.

In no event will Greenspace be liable for any special, indirect, reliance, incidental or consequential damages of any kind, lost or damaged data, lost profits or lost revenue, whether arising in contract, tort (including negligence), or otherwise, even if Greenspace has been notified of the possibility thereof.

Greenspace’s liability for all claims arising under or relating to these Terms of Use (including but not limited to warranty claims), regardless of the forum and regardless of whether any action or claim is based on contract, tort, or otherwise, shall not exceed the aggregate fees paid by you to Greenspace in the last 30 days.

21. Liability Insurance or Equivalent Coverage

You are required to maintain appropriate insurance coverage to conduct your practice and provide psychotherapy services to each Patient and to use the Services and the Platform. You acknowledge that Greenspace does not maintain insurance coverage to cover the provision of health care or psychotherapy services by you. It is your sole responsibility to confirm with your insurance provider whether you are covered for all liabilities potentially arising from the provision of health care or psychotherapy services to Patients and to use the Services and the Platform.

22. Electronic Communications

You agree that all electronic communications received by Greenspace in connection with the Services, including communications directing Greenspace to take an action with respect to your account, that match you account information or other identity information you have provided when enrolling in or using the Platform, will be deemed valid, authentic and binding. You agree that all electronic communications it makes, including but not limited to data entry, will not be fraudulent or, to the best of its ability, otherwise incorrect, and that you have the right to disclose any information that it discloses to Greenspace.

23. Changes and Interruptions in Service

Greenspace reserves the right at any time and from time to time to modify or discontinue, temporarily or permanently, the Platform (or any part thereof) with or without notice. Further, Greenspace reserves the right to change these Terms of Use at any time and to notify you by posting an updated version of the Terms of Use on this Website. You are responsible for regularly reviewing the Terms of Use, including, without limitation, by checking the date of “Last Update” at the bottom of this document. Continued use of the Platform after any such changes shall constitute your consent to be bound by such changes, with continued provision of the use of the Platform constituting consideration from Greenspace to you for so being bound. Your only right with respect to any dissatisfaction with (i) these Terms of Use, (ii) any policy or practice of ours in operating the Platform, or (iii) any content available through the Platform, is to stop using the Platform.

We may, from time to time perform maintenance upon the Platform or experience hardware, software or other problems related to the Platform, resulting in interrupted service, delays or errors in the Services. We will attempt to provide prior notice of such interruptions, delays or errors but cannot guarantee that such notice will be provided.

24. Area of Service

Unless otherwise agreed by Greenspace, the Services described in these Terms of Use are solely offered within the United States.

25. Assignment

These Terms of User are personal to you and you may not assign these Terms of Use or your rights to the Services to any other party. We expressly reserve the right to assign these Terms of Use and to delegate any of its obligations hereunder, under our sole discretion and without your consent. We may also assign or delegate certain of our rights and responsibilities under these Terms of Use to independent contractors or other third parties.

26. No Waiver

We shall not be deemed to have waived any of our rights or remedies hereunder unless such waiver is in writing and signed by us. No delay or omission on our part in exercising any right or remedy shall operate as a waiver of that right or remedy or any other rights or remedies. A waiver on any particular occasion shall not be construed as a bar or waiver of any rights or remedies on future occasions.

27. Governing Law

Unless the applicable laws of your jurisdiction require that the laws of its jurisdiction govern, these Terms of Use will be governed by and construed in accordance with the laws of the State of New York applicable therein. In the event of a dispute between the Parties with respect to the Agreement, the Parties shall: (i) first attempt to resolve the dispute by escalating the discussion within the Parties; and (ii) should the matter not be resolved through an internal escalation process, seek resolution through one or more forms of alternative dispute resolution.

28. Entire Agreement

These Terms of Use and any and all other legal notices or statements posted on the Platform constitute the entire agreement between you and Greenspace with respect to the use of the Platform and Services.

29. Notice

Notices to you may be made via email, or in cases of changes to these Terms of Use or to the Services offered by the Platform, by posting notices or links to such notices on the Platform. Your continued use of the Platform after notice of any changes constitutes acceptance of the updated Terms of Use.

30. Independent Parties

These Terms of Use do not create a partnership, joint venture, or relationship of principal and agent or employer and employee between you and Greenspace or any of Greenspace’s employees, agents, representatives, or subcontractors. Under no circumstance shall you or Greenspace be considered the agent of the other. Each party shall have no authority to assume or create any obligation whatsoever, express or implied, in the name of or on behalf of the other party. You are an independent practitioner who is solely responsible for any health care services or social or psychotherapy services provided to Patients.

If you have any questions or comments regarding these Terms of Use please contact us at support@greenspacehealth.com

Last Update: July 22, 2025

Greenspace Mental Health Ltd. (“Greenspace”, “we” or “our”) provides a digital platform that facilitates: (i) the measurement of patient progress and outcomes; (ii) the display of measurement information to patients and their health care provider(s); and (iii) other functions, tools and resources for the purpose of supporting the delivery of mental health care services (collectively, the “Services”). We know that the users of our Services are entrusting us with personal and sensitive information and the privacy of our users is extremely important to us. We are committed to protecting privacy and safeguarding personal information.

Table of Contents

Plain Language Summary of Our Privacy Practices
Scope of this Privacy Policy
Who Has Access to Our Services
Definitions
How We Collect and Use Your Personal Information
How We Use Cookies and Other Similar Tracking Technologies
How We Use Third Party Analytics Tool
How We Use Anonymized Information
How We Use De-Identified Information
How We Use Artificial Intelligence and Machine Learning
How We Share or Disclose Your Personal Information
How We Safeguard and Retain Your Personal Information
Where We Store and Process Your Personal Information
Your Privacy Rights
Third Party Links
Changes to this Privacy Policy
Contact Us

1. Plain Language Summary of Our Privacy Practices

While this summary is not exhaustive, here are some of the key provisions in this Privacy Policy that you should be aware of:

We are a service provider to our Customer: In providing our Services, Greenspace acts as a service provider or business associate to healthcare organizations or individual therapists, who are our Customers (as defined below under section 3 (Who Has Access to Our Services) of this Privacy Policy). This means that as a matter of law, Greenspace collects, uses or discloses personal information in accordance with our agreement with our Customer. This Privacy Policy is intended to provide you with information about those practices.
You must be an Authorized User of our Customer: In order to use the Services, you must be an Authorized User (Administrator, Treatment Provider or Patient, each defined below under section 3 (Who Has Access to Our Services) of this Privacy Policy) of our Customer.
We only collect and use what is needed: We only collect and use personal information that is required to provide our Services on behalf of our Customer. This personal information is provided: (i) directly by you; (ii) indirectly by your Treatment Provider or an Administrator; or (iii) indirectly by your parent, legal guardian or substitute decision-maker if you are a minor Patient.
We do not trade, rent or sell personal information: Under no circumstances will Greenspace trade, rent or sell your personal information.
We do not disclose your personal information, except as described in this Privacy Policy: We do not disclose or otherwise transfer your personal information without your consent, except as otherwise set out in this Privacy Policy.
We safeguard your information: We have implemented reasonable administrative, technical and physical measures to safeguard your personal information that are appropriate to the sensitivity of the information. All protected health information is stored in the United States.
Contact us: You can contact us at any time to exercise your privacy rights, as described below under section 16 (Your Privacy Rights) of this Privacy Policy. Since we are processing your personal information in our capacity as a service provider, certain requests will be forwarded to our Customer for response.

Please read this Privacy Policy carefully. If you have any questions or concerns regarding this Privacy Policy, please contact us at privacy@greenspacehealth.com.

2. Scope of this Privacy Policy

This Privacy Policy describes how we collect, use and disclose your personal information, (which, when used in this Privacy Policy includes your protected health information) when you use our Services in your capacity as an Authorized User (as defined below under section 3 (Who Has Access to Our Services) of this Privacy Policy). It applies whether such information is collected electronically at https://app.greenspacehealth.com or any website or other platform on which this Privacy Policy appears (the “Platform”), in person, over the telephone, in writing, via email messages or text messages. We may provide additional “just-in-time” disclosures or additional information about our data collection, use and disclosure practices. These notices may supplement or clarify our Privacy Policy or may provide you with additional choices about how we will process your personal information. This Privacy Policy does not apply to information which we may receive from you through your access and/or use of the general Greenspace website at https://greenspacehealth.com/ (the “Website”). If you are visiting the Website, please refer to the Website Privacy Policy to learn more about Greenspace’s privacy practices in relation to the Website.

Please note that privacy legislation and/or an individual’s right to privacy are different from one jurisdiction to another. While the Platform can be accessed from different countries around the world, the Platform and our Services are only intended for users in the United States. As such, this Privacy Policy is designed in accordance with applicable privacy laws in the United States. Please note that unless stated otherwise, any reference to personal information in this Privacy Policy includes protected health information.

3. Who Has Access to Our Services

In providing our Services, we act as a service provider or business associate to our customers, such as healthcare clinics or individual therapists (“Customers”), who may be classified as covered entities under applicable privacy statutes.

As a service provider, we supply our Services for the purpose of enabling our Customers to use our platform to collect, use, disclose, modify, retain, dispose or otherwise process personal information. Our collection, use, disclosure and other processing of your personal information is subject to our agreement with our Customer, which is described in this Privacy Policy.

You are entitled to use our Services if you fall within one of the following categories of authorized users of our Customer:

supervisors, managers or administrators of the Customer that do not provide direct clinical treatment for Patients (each, an “Administrator”);
treatment providers, therapists or clinicians of the Customer, including, but not limited to, psychiatrists, psychologists, social workers, occupational therapists, and psychotherapists (each a “Treatment Provider”); and
individuals with whom the Customer or its Treatment Provider(s) have a clinical health care relationship for whom a file has been created on the Platform, whether such file has been opened by: (i) that individual; (ii) the Treatment Provider or Administrator for that individual; or (iii) a parent, legal guardian or substitute decision maker of that individual for that individual or themselves) (each, a “Patient” and collectively, with Administrators and Treatment Providers, the “Authorized Users”).

Patients receiving services from a Treatment Provider will receive a Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Notice of Privacy Practices (“NPP”) from their Treatment Provider or Administrator, with additional information regarding their Treatment Provider or Administrator’s access, use and disclosure of their personal information.

4. Definitions

For the purpose of this Privacy Policy:

“Personal information” means any information that could reasonably be used on its own, or in combination with other information, to identify an individual or as otherwise defined under applicable privacy statutes. Personal information includes protected health information.
“Protected health information” means personal information that is collected by your therapist or clinic and relates to your past, present, or future physical or mental health or condition; the provision of health care; or your past, present, or future payment for the provision of health care.
“De-Identified Information” is information that has been de-identified to remove all direct personal identifiers but retaining some indirect identifiers such as a unique system-generated profile identification.
“Anonymized Information” is information that has been aggregated and anonymized to permanently remove all direct and indirect personal identifiers in accordance with applicable law, our internal policies and industry best practices in a manner that no longer allows a person to reasonably be identified, directly or indirectly.

5. How We Collect and Use Your Personal Information

We only collect personal information that is necessary to operate our Platform and Services. Below is a summary of the ways we collect and use your personal information:

Registering for Our Services:
- Patients can obtain access and use our Services in a number of ways once a file is created by the Patient or for the Patient by an Administrator or Treatment Provider (whether directly on the Platform, through an integration or the browser extension): (i) offline, where your participation is directly facilitated by the Treatment Provider or Administrator; (ii) by invitation, sent to you via an email and/or text message with a request to complete personalized assessments; (iii) by creating a Patient user account, to allow you to complete personalized assessments and view assessment results (a “Patient Account”); or (iv) via a participant account created by a parent, legal guardian or substitute decision-maker if you are a minor.
- The information required to create a Patient Account includes: first and last name, email address, phone number and password, as well as additional personal information set by our Customer.
Delivering Assessments: In order to remotely deliver assessments to Patients:
- For Patients with a Patient Account, we use the Patient's name, email address and/or telephone number, as set by the Patient to send a link to the personalized assessment(s).
- For Patients without a Patient Account, we use the Patient's name, email address and/or telephone number, as set by their Treatment Provider or Administrator, to send a link to the personalized assessment(s).
Completing Personalized Assessments: We collect personal information from Patients such as responses to assessment questions and quantitative assessment scores when Patients respond to a personalized assessment delivered by the Platform. We use this information to provide Patients, their Treatment Provider(s) and any appropriately permissioned Administrators, with a presentation of assessment results and progress.
Assessing Results of Personalized Assessments: We use personal information collected from Patients’ responses to personalized assessments to enable Treatment Providers and Administrators to evaluate results and analyze Patients’ progress. This information is provided to the Patient’s Treatment Provider(s) and any appropriately permissioned Administrators to enhance their delivery of health services to their Patients, inform their care decisions and provide metrics about their practice in accordance with the Customer agreement.
Improving Our Platform and Services: We use De-Identified Information for internal purposes only to improve our Platform and Services, for example to analyze the usage of our Platform and Services to help inform our product and/or user experience decisions, and train data for machine learning development. We only use data for artificial intelligence and machine learning with permission as further described in section 11 (How We Use Artificial Intelligence and Machine Learning) below.
Providing Technical Support: We may use the personal information of an Authorized User in order to provide them the necessary technical support when using our Services.
Interacting With You: When any Authorized User contacts us with a comment, question or complaint, you may be asked for personal information that identifies you such as your name, address, email address and a telephone number along with any additional information we may need to promptly answer your question or respond to your comment or complaint. We use this personal information to respond to your inquiry and improve our Services’ offerings.
Information Received as a Business Associate: Some Treatment Providers, (such as psychiatrists, psychologists, clinical social workers, registered psychotherapists, professional counselors and marriage and family therapists) may be subject to laws and regulations governing the use and disclosure of the health information they create or receive, including the HIPAA and the regulations adopted thereunder. Greenspace will only use or disclose such information as permitted by the controlling business associate agreement or as otherwise permitted by law. Greenspace limits access to protected health information in accordance with HIPAA. Greenspace’s workforce members are trained on the privacy and security requirements applicable to protected health information, and Greenspace’s “business associates” are required, pursuant to the terms of their agreements with us, to implement required safeguards.
Sharing our Newsletter and Other Updates: If you are an Administrator or Treatment Provider, we may use your name and email address, in accordance with applicable law, to provide you with copies of our newsletter or other updates about our products and Services that we believe may be of interest to you. You can unsubscribe at any time by clicking on the unsubscribe link included in every email or by contacting us as set out below at section 17 (Contact Us) of this Privacy Policy. We do not send newsletters or Services updates to Patients.

6. How We Use Cookies and Other Similar Tracking Technologies

Greenspace uses cookies, log files, web beacons and similar tracking technologies to remember user preferences and collect information about visitors to the Platform. Some cookies are required for the operation of the Platform and are not optional.

Cookies are small text files that our Platform can send to your browser, which may then be stored on your hard drive so we can recognize you when you return. We use cookies on the pages on our Platform where you are prompted to log in or that are customizable. If you have registered with our Platform, these cookies (i) may let us know who you are in order to authenticate and confirm your authorization to use the Platform and our Services, (ii) may be necessary to access your account information (stored on our servers) in order to deliver products and personalized services, and (iii) will provide us and our service providers with information that we will use to personalize our Platform and Services in accordance with your preferences.

You may set your Web browser to notify you when you receive a cookie or to not accept certain cookies. However, if you decide not to accept cookies from our Platform, you may not be able to take advantage of all of the features of our Platform.

Log files are records of all visits to the Platform, which are automatically generated. These files make a record of each visit to the Platform and log a number of details, that may include: the user’s operating system; IP address; the date, time and duration of the visit; the pages and documents accessed; and the previous site accessed by the user (such as, the search engine that referred the user to the Platform).

We may also use pixel tags, web beacons, clear GIFs or similar technologies in connection with some of our Platform pages and HTML-formatted email messages to track the actions of users and email recipients, measure the success of our marketing campaigns, and compile statistics about Platform usage and email response rates. These technologies usually work in conjunction with cookies.

7. How We Use Third Party Analytics Tools

Greenspace uses Mixpanel as an analytics tool (“Mixpanel”) to provide statistics about visitors to the Platform. For more information about Mixpanel, please follow the provided hyperlink. Mixpanel uses cookies and other identifiers to collect certain information such as user device or browser type, and user activity on our Platform such as click rates and bounce rates to measure and report statistics about user interactions on the Platform. Mixpanel is used for analysis, to create reports and to identify Platform trends.

Please refer to section 11 (How We Share or Disclose Your Personal Information) of this Privacy Policy for more detail on our analytics service provider (Mixpanel).

8. How We Use Anonymized Information

We fully anonymize and aggregate data based on responses to assessments, feedback on our Services, and the frequency and way users use our Services (a) to publish fully anonymized and aggregated data, metrics or insights regarding our Services on our Platform and through various communication channels; and (b) to share fully anonymized and aggregated data, metrics or insights with current and prospective Customers, to better understand assessment outcomes and benchmark our Services. The data we may publish or share using Anonymized Information includes high level aggregated statistics such as the number and types of assessments completed on our Platform, or the number of Patients that have used our Platform.

None of this Anonymized Information, directly or indirectly, identifies or can be linked back to any Patients or other Authorized Users or Customers.

9. How We Use De-Identified Information

In accordance with our Customer agreement, we may use automated systems to analyze De-Identified Information of Authorized Users collected via user input, cookies, analytics tools and other technologies (as described above) in order to: (i) improve the Platform and Services; (ii) personalize Authorized User’s experience; (iii) automate certain aspects of the Platform; and (vi) protect the safety and security of the Platform. Notwithstanding the foregoing, De-Identified Information may also be used in accordance with section 10 (How We Use Artificial Intelligence and Machine Learning) of this Privacy Policy.

10. How We Use Data for Artificial Intelligence and Machine Learning

In accordance with our Customer agreement (and provided such Authorized Users have not opted out of such features), we may use automated systems to analyze De-Identified Information of Authorized Users collected via user input, cookies, analytics tools and other technologies (as described above) in order to: (i) use such data for machine learning training; and (ii) provide Authorized Users with certain artificial intelligence and machine learning features, such as predictive analytics.

11. How We Share or Disclose Your Personal Information

Under no circumstances will Greenspace trade, rent or sell your personal information. We will not disclose your personal information, without your consent, except as otherwise set out in this Privacy Policy.

Authorized Service Providers: In order to provide our Services, we have arrangements with certain necessary service providers that are subject to contractual agreements that include appropriate privacy standards in accordance with applicable privacy laws. We may transfer (or otherwise make available) your personal information to such affiliates and other third party service providers for the purpose of enabling such parties to provide certain services on our behalf that are directly related to the provision of our Services to you. To the extent that any personal information is provided to our affiliates and service providers, we require that they be bound by legally enforceable written obligations consistent with this Privacy Policy and that they are given only the information they need and solely for the purpose of performing their designated functions. Our affiliates and service providers are not authorized to use or disclose personal information for their own marketing or other purposes. Our authorized affiliates and service providers with whom we share personal information fall into the following categories:
- service providers that authorize and process payments on our behalf;
- service providers that host our Platform, enable certain of its features, deliver assessments, and manage and analyze data;
- service providers that send email and other communications;
- service providers that are used to monitor our systems for reliability, security or compliance; and
- service providers that are used to enable integration with other systems used by our Customers, including clinical systems, administrative systems and identity providers.
Analytics Service Provider (Mixpanel). We do not share personal information with Mixpanel except for IP addresses, which are sometimes required for the operation of the Mixpanel analytics service. Mixpanel either does not store or anonymizes IP addresses, and does not use them for any purpose besides providing its analytics service. Personal health information is not shared with Mixpanel at any time.
Business Transactions: Personal information (but not protected health information) may be disclosed in connection with a prospective or completed business transaction, as permitted in accordance with applicable privacy laws. In such cases, your personal information may only be used or disclosed by the recipient in order to assess and complete the transaction. After the transaction is closed, your personal information may only be used or disclosed by the recipient in accordance with this Privacy Policy, any existing agreements with the Customer, or as otherwise permitted by applicable privacy laws, unless subsequent consent is obtained from you for an additional purpose.
Legal, Compliance and Loss Prevention: Greenspace, our affiliates and our service providers may be required to provide your personal information in response to a lawful request such as: (i) a court order, search warrant or subpoena; (ii) for the purposes of investigating a breach of an agreement, contravention of law, or actual or suspected harm to persons or loss of property; or (iv) as otherwise required or permitted by applicable law. Under no circumstances, will Greenspace disclose your personal information (including any protected health information) unless such disclosure is permitted or required by applicable laws.

12. How We Safeguard and Retain Your Personal Information

We have implemented reasonable physical, organizational and technological measures appropriate to the sensitivity of the personal information in an effort to safeguard the personal information in our custody and control or that we process on behalf of our Customers to protect against theft, loss and unauthorized access, use, modification and disclosure. Such measures, which may necessarily evolve over time as the availability and effectiveness of methods vary, include the following:

restricting access to personal information to employees, contractors and third-party service providers who require access to fulfill their job or services, are bound by confidentiality and/or non-disclosure requirements and who are required to abide by this Privacy Policy and Greenspace’s privacy and security policies;
restricting access to our systems, accounts and electronic databases or other electronic formats that may contain personal information through password protection and internal security policies; and
implementing technical security measures such as firewall technology, anti-malware screening and data encryption technology.

While Greenspace employs advanced data encryption technology when interfacing with our users, third party service providers and other partners, you should be aware that there is a residual risk in transmitting any data electronically. Despite our efforts, no security measure is perfect or impenetrable and no method of data transmission can be guaranteed against any interception or other type of misuse. This risk is inherent in all Internet dealings.

You should exercise discretion when providing any personal information via email or text messages as such communications may not be encrypted. In particular, you should not include any protected health information or other sensitive information in your email or text messages sent to us.

If you suspect your personal information has been improperly accessed, used, or disclosed, please contact us immediately as set out under section 17 (Contact Us) of this Privacy Policy.

We have personal information retention processes designed to retain personal information for no longer than necessary for the purposes stated above, as provided in our Customer agreements, or to otherwise meet legal requirements. We securely dispose of or anonymize personal information of Authorized Users once it has served such purposes, in accordance with applicable law and our agreement with the Customer.

13. Where We Store and Process Your Personal Information

All protected health information is stored in the United States.

Other types of personal information may be stored or processed by Greenspace or our authorized service providers in a foreign jurisdiction outside of the United States. When this occurs, your personal information may be subject to the laws of such jurisdiction and accessible without notice to you by the courts, law enforcement and national security authorities of that jurisdiction. You can obtain more information about our policies and practices with respect to the use of third-party service providers outside of the United States by contacting us as described below, under section 17 (Contact Us) of this Privacy Policy.

14. Your Privacy Rights

Under privacy laws, you have the right to access, update and correct inaccuracies in your personal information, subject to certain exceptions. Since Greenspace is acting as a service provider to clinics or healthcare professionals, we will forward requests for the exercise of user rights under privacy laws to our Customer, who will respond to you.

15. Third Party Links

The Platform may contain links to third party platforms. While we try to link only to platforms that share our high standards and respect for privacy, please understand that we are not responsible for the content of, or the privacy practices employed by, other platforms and this Privacy Policy does not apply to those platforms. We encourage you to review the privacy policies of each platform you visit.

16. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time as our business evolves, in response to legal developments, as new technologies become available, or as we introduce new features, products or services.

When we make changes to this Privacy Policy we will revise the “Last Update” date at the bottom of this page. You should check back here periodically to find out if any changes have been made to this Privacy Policy. If we make substantial changes we will, as appropriate, prominently post these changes to our Platform and/or notify registered users of our Services.

17. Contact Us

Please contact our Privacy Officer at privacy@greenspacehealth.com if:

you have any questions or comments about this Privacy Policy;
you wish to access, update or correct inaccuracies in your personal information;
you wish to withdraw your consent to our collection, use or disclosure of your personal information as described in this Privacy Policy; or
you otherwise have a question or complaint about the manner in which we or our service providers treat your personal information.

Since email communications are not always secure, please do not include protected health information or other confidential or sensitive information in your emails to us.

Last Update: July 22, 2025

THIS BUSINESS ASSOCIATE AGREEMENT (this "Agreement"), effective as of the date and time you select Accept below (the "Effective Date"), is by and between you ("Covered Entity"), and GREENSPACE MENTAL HEALTH, LTD. ("Business Associate").

RECITALS:

WHEREAS, Business Associate has entered into an agreement with Covered Entity for the purposes of performing certain services for Covered Entity (the terms and conditions of such agreement between the parties hereinafter referred to as the "Terms of Use");

WHEREAS, pursuant to the Administrative Simplification provisions of the Health Insurance Portability and Accountability Act of 1996 (the "Act") and the "Health Information Technology for Economic and Clinical Health Act," part of the "American Recovery and Reinvestment Act of 2009" ("HITECH Act"), the Department of Health and Human Services ("HHS") has promulgated regulations at 45 C.F.R. Parts 160-64, including regulations implementing certain privacy requirements (the "Privacy Rule"), certain security requirements regarding electronic media ("Security Rule") and certain breach notification requirements ("Breach Notification Rule"), each as amended from time to time (the Act, HITECH Act, the Privacy Rule, the Security Rule and the Breach Notification Rule referred to collectively herein as "HIPAA");

WHEREAS, Business Associate may receive, maintain, retain, record, store, transmit, hold, use and/or disclose Protected Health Information (as defined below) in conjunction with the services being provided under the Terms of Use, thus necessitating a written agreement that meets applicable requirements of the Privacy Rule and the Security Rule, and making advisable certain additional agreements regarding HIPAA; and

WHEREAS, Business Associate and Covered Entity desire to satisfy the foregoing Privacy Rule and Security Rule requirements through this Agreement, and otherwise to address related matters regarding HIPAA on the terms and conditions set forth herein.

NOW THEREFORE, in consideration of the mutual agreements and undertakings of the parties, and for other good and valuable consideration the sufficiency of which is hereby acknowledged, the parties, intending to be legally bound, hereby agree as follows:

Definitions:

The following terms shall have the following meaning when used in this Agreement:

"Breach" shall have the same meaning as the term "breach" in 45 C.F.R. § 164.402.
"Designated Record Set" shall have the same meaning as the term "designated record set" in 45 C.F.R. § 164.501.
"Electronic Protected Health Information" shall mean Protected Health Information that is "electronic protected health information" as defined in 45 C.F.R. § 160.103.
"Individual" shall have the same meaning as the term "individual" in 45 C.F.R. §160.103 and shall include a person who qualifies as a personal representative in accordance with 45 C.F.R. §164.502(g).
"Protected Health Information" shall have the same meaning as the term "protected health information" in 45 C.F.R. § 160.103, except limited to the information received from Covered Entity, or created, maintained or received on behalf of Covered Entity.
"Unsecured Protected Health Information" shall mean Protected Health Information that is "unsecured protected health information" as defined in 45 C.F.R. § 164.402.
"Required By Law" shall have the same meaning as the term "required by law" in 45 C.F.R. § 164.103.
"Secretary" shall mean the Secretary of HHS or the designee of the Secretary of HHS.
"Subcontractor" shall have the same meaning as the term "subcontractor" in 45 C.F.R. §160.103, except limited to any such individual or entity who creates, receives, maintains, or transmits Protected Health Information on behalf of Business Associate.

Any capitalized term not specifically defined herein shall have the same meaning as is set forth in 45 C.F.R. Parts 160 and 164, where applicable. The terms "use," "disclose" and "discovery," or derivations thereof, although not capitalized, shall also have the same meanings set forth in HIPAA.

Obligations and Activities of Business Associate:

Business Associate agrees to not use or disclose Protected Health Information other than as permitted or required by this Agreement or as Required By Law.
Business Associate agrees to use appropriate safeguards and comply, where applicable, with Subpart C of 45 C.F.R. Part 164 with respect to Electronic Protected Health Information, to prevent use or disclosure of the Protected Health Information other than as provided for by this Agreement.
Business Associate agrees to report to the Covered Entity any use or disclosure of Protected Health Information not provided for by this Agreement, including, without limitation, Breaches of Unsecured Protected Health Information as required at 45 C.F.R. 164.410, and any Security Incident of which it becomes aware. The parties acknowledge and agree that this Section 2(c) constitutes notice by Business Associate to Covered Entity of the ongoing existence and occurrence of attempted but unsuccessful Security Incidents for which no additional notice to Covered Entity shall be required. Unsuccessful Security Incidents shall include, but not be limited to, pings and other broadcast attacks on Business Associate’s firewall, port scans, unsuccessful log-on attempts, denials of service and any combination of the above, so long as such incidents do not result, to the extent Business Associate is aware, in unauthorized access, use or disclosure of Electronic Protected Health Information.
In accordance with 45 C.F.R. 164.502(e)(1)(ii) and 164.308(b)(2), if applicable, Business Associate agrees to ensure that any Subcontractors that create, receive, maintain, or transmit Protected Health Information on behalf of Business Associate agree in writing to the same restrictions, conditions, and requirements that apply to Business Associate under this Agreement with respect to such Protected Health Information.
Business Associate agrees to make available Protected Health Information in a Designated Record Set to Covered Entity as necessary to satisfy Covered Entity’s obligations under 45 C.F.R. § 164.524.
Business Associate agrees to make any amendment(s) to Protected Health Information in a Designated Record Set as directed or agreed to by the Covered Entity pursuant to 45 C.F.R. § 164.526, or take other measures as necessary to satisfy Covered Entity’s obligations under 45 C.F.R. § 164.526.
Business Associate agrees to maintain and make available the information required to provide an accounting of disclosures to Covered Entity as necessary to satisfy Covered Entity’s obligations under 45 C.F.R. § 164.528.
To the extent that Business Associate is to carry out one or more of Covered Entity’s obligations under Subpart E of 45 C.F.R. Part 164, Business Associate agrees to comply with the requirements of Subpart E that apply to Covered Entity in the performance of such obligations.
Business Associate agrees to make its internal practices, books, and records available to the Secretary for purposes of determining compliance with HIPAA.

Permitted Uses and Disclosures by Business Associate:

Business Associate may only use or disclose Protected Health Information as necessary to perform the Terms of Use. In addition, Business Associate is authorized to use Protected Health Information to de-identify the Protected Health Information in accordance with 45 C.F.R. 164.514(a)-(c).
Business Associate may use or disclose Protected Health Information as Required By Law.
Business Associate agrees to make uses and disclosures and requests for Protected Health Information consistent with Covered Entity’s minimum necessary policies and procedures.
Business Associate may not use or disclose Protected Health Information in a manner that would violate Subpart E of 45 C.F.R. Part 164 if done by Covered Entity, except for the specific uses and disclosures set forth in subsections (e), (f) and (g), below.
Business Associate may use Protected Health Information for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate.
Business Associate may disclose Protected Health Information for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate, provided the disclosures are Required By Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that the information will remain confidential and used or further disclosed only as Required By Law or for the purposes for which it was disclosed to the person, and the person notified Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached.
Business Associate may provide Data Aggregation services relating to the Health Care Operations of Covered Entity.

Obligations of Covered Entity:

Covered Entity shall notify Business Associate of any limitation(s) in the notice of privacy practices of Covered Entity under 45 C.F.R. 164.520, to the extent that such limitation may affect Business Associate’s use or disclosure of Protected Health Information.
Covered Entity shall notify Business Associate of any changes in, or revocation of, the permission by an Individual to use or disclose his or her Protected Health Information, to the extent that such changes may affect Business Associate’s use or disclosure of Protected Health Information.
Covered Entity shall notify Business Associate of any restriction on the use or disclosure of Protected Health Information that Covered Entity has agreed to or is required to abide by under 45 C.F.R. 164.522, to the extent that such restriction may affect Business Associate’s use or disclosure of Protected Health Information.
Except with respect to uses and disclosures by Business Associate of Protected Health Information under Sections 3(e), 3(f) and 3(g), above, Covered Entity shall not request Business Associate to use or disclose Protected Health Information in any manner that would not be permissible under Subpart E of 45 C.F.R. Part 164 if done by Covered Entity

Term and Termination:

Term. The Term of this Agreement shall commence as of the Effective Date and shall terminate upon the termination of the Terms of Use or on the date Covered Entity terminates this Agreement for cause as authorized in subsection (b) of this Section 5, whichever is sooner.
Termination for Cause. Business Associate authorizes termination of this Agreement by Covered Entity upon written notice to Business Associate if Covered Entity determines Business Associate has violated a material term of this Agreement and Business Associate has not cured the breach or ended the violation within thirty (30) days of Covered Entity providing written notice thereof to Business Associate.
Obligations of Business Associate Upon Termination. Upon termination of this Agreement for any reason, Business Associate shall:

Retain only that Protected Health Information which is necessary for Business Associate to continue its proper management and administration or to carry out its legal responsibilities;
Continue to use appropriate safeguards and comply with Subpart C of 45 C.F.R. Part 164 with respect to Electronic Protected Health Information to prevent use or disclosure of the Protected Health Information, other than as provided for in this Section, for as long as Business Associate retains Protected Health Information;
Not use or disclose Protected Health Information retained by Business Associate other than for the purposes for which such Protected Health Information was retained and subject to the same conditions set out at Section 3 (e) and (f), above, which applied prior to termination; and
Return to Covered Entity, or, if agreed to by Covered Entity, destroy Protected Health Information retained by Business Associate when it is no longer needed by Business Associate for its proper management and administration, to carry out its legal responsibilities, or to fulfill its obligations under the Terms of Use.

Survival. The obligations of Business Associate under this Section 5 shall survive the termination of this Agreement.

Miscellaneous:

Regulatory References. A reference in this Agreement to a section in the Privacy Rule, the Security Rule, or to another provision of HIPAA means the provision as in effect or as amended.
Amendment. The parties agree to take such action as is necessary to amend this Agreement from time to time as is necessary for the Covered Entity to comply with the requirements of the HIPAA and any other applicable law.
Interpretation. Any ambiguity in this Agreement shall be resolved to permit compliance with HIPAA.
Governing Law and Disputes. The construction, interpretation and performance of this Agreement and all transactions under this Agreement shall be governed and enforced pursuant to the laws of the State of New York, without giving effect to its conflicts of laws provisions, except to the extent New York law is preempted by any provision of federal law, including HIPAA. The Parties agree that all disputes arising out of or relating to this Agreement will be subject to mandatory binding arbitration under the rules of Judicial Administration and Arbitration Services ("JAMS") in effect at the time of submission, as modified by this Section 6(d). The arbitration will be heard and determined by a single arbitrator selected by mutual agreement of the Parties, or, failing agreement within thirty (30) days following the date of receipt by the respondent of the claim, by JAMS. Such arbitration will take place in New York County, New York. The arbitration award so given will be a final and binding determination of the dispute, and will be fully enforceable in any court of competent jurisdiction. Except in a proceeding to enforce the results of the arbitration or as otherwise required by law, neither Party nor any arbitrator may disclose the existence, content or results of any arbitration hereunder without the prior written agreement of both Parties.
No Third Party Beneficiary. Nothing express or implied in this Agreement is intended to confer, nor shall anything herein confer, upon any person other than the parties and the respective successors or assigns of the parties, any rights, remedies, obligations, or liabilities whatsoever.
Controlling Provisions. In the event that it is impossible to comply with both the Terms of Use and this Agreement, the provisions of this Agreement shall control with respect to those provisions of each agreement that expressly conflict. This Agreement shall supersede and replace any prior business associate agreements between the parties, with respect to any actions of Business Associate after the Effective Date.
Effect. This Agreement shall be binding upon, and shall inure to the benefit of, the parties hereto and their respective successors, assigns, heirs, executors, administrators and other legal representatives; provided, however, that if you are employed by or furnish services on behalf of an entity that has entered in to a business associate agreement with Business Associate, the terms of that agreement shall supersede this Agreement.
Severability. In the event any provision of this Agreement is rendered invalid or unenforceable under any new or existing law or regulation, or declared null and void by any court of competent jurisdiction, the remainder of the provisions of this Agreement shall remain in full force and effect if it reasonably can be given effect.
Counterparts. This Agreement may be executed in any number of counterparts, each of which shall be deemed an original.
Notices. Any notice, consent, request or other communication required or permitted under this Agreement shall be in writing and shall be deemed effectively given: (i) upon personal delivery to the party to be notified, (ii) when sent by confirmed electronic mail or facsimile if sent during normal business hours of the recipient, and if not so confirmed, then on the next business day, or (iii) one (1) day after deposit with a nationally recognized overnight courier, specifying next day delivery, with written verification of receipt. All notices shall be addressed as follows:
If to the Covered Entity, to the address or email address provided when creating Greenspace account.

If to Business Associate:

Greenspace Mental Health, Ltd.
1 Adelaide St. E., Suite 530
Toronto, ON
M5C 2V9
Attention: Chief Privacy Officer
Email: support@greenspacehealth.com

The parties hereto shall be deemed to have executed this Agreement at the date and time you select Accept below.

I have read and accept the Terms of Use, Privacy Policy, and Business Associate Agreement*

Create a Therapist account

Create a Therapist account

Already have an account?