Privacy Policy
1. Overview
2. Website & Personal Data Collection
3. Data Storage & Practice Management (Zanda)
4. Use of AI Tools
5. Disclosure of Information
6. Contact & Access to Records
This practice is committed to protecting your privacy and handling your personal health information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy outlines how your information is collected, stored, and managed across our website, practice management systems, and clinical workflows.
When you interact with our website or book an appointment online, we collect personal details necessary to provide psychological services, including:
Contact details (name, email address, phone number).
Demographic details, emergency contacts, and funding information (e.g., Medicare, NDIS, WorkSafe).
General website analytics to ensure smooth portal navigation and site functionality.
All client records, administrative data, appointment histories, and invoicing details are securely stored using Zanda, an Australian practice management system.
Security Standards: Zanda is ISO 27001 certified and complies with the Australian Privacy Principles (APPs). Data is encrypted both in transit and at rest.
Access Control: Access to your clinical notes and personal health file is strictly restricted to authorised practice personnel.
To enhance client care and allow the practitioner to focus fully on consultations without the distraction of manual typing, AI-assisted clinical scribing technology may be used during sessions to transcribe and summarise clinical discussions.
Privacy & Compliance: The AI scribing tool operates in strict accordance with Australian healthcare privacy regulations. Transcripts and summaries are stored securely and encrypted.
Opt-Out Rights: The use of AI scribing is optional. Clients may opt out at any time—before or during a session—and manual note-taking will be used instead.
Your personal and health information remains confidential and will not be shared with external parties except:
When required to facilitate third-party billing or rebates (e.g., Medicare, NDIS Plan Managers, WorkSafe insurers).
When authorised by you (e.g., providing reports to your GP or referring doctor).
Where required or permitted by Australian law (e.g., court subpoenas or duty-of-care obligations regarding serious risk to life or safety).
You have the right to request access to or correction of the personal information held about you. For any privacy-related inquiries or requests, please contact the practice directly via email at howard.errey@gmail.com.