1. Privacy Policy

Last updated: November 2025

This policy explains how our practice collects, stores, uses, and protects your personal and health information in line with the Privacy Act 1988 (Cth), Australian Privacy Principles, AHPRA National Law, and the Psychology Board of Australia Code of Conduct (2025).

2. Information Collection and Use

We collect personal and health information that is necessary to provide psychological services. This may include:

• Contact details

• Date of birth and demographic information

• Medical and mental health history

• Information you provide during therapy

• Referral details (e.g., GP or specialist)

• Medicare or funding information (if relevant)

We only collect information that is reasonably necessary for care, safety, administration, and legal obligations. 

3. How We Use Your Information

We use your information to:

• Provide psychological assessment and treatment

• Coordinate care with other professionals (with your consent)

• Manage appointments, billing, and administration

• Meet legal, ethical, and regulatory obligations

• Improve the quality of our service

We do not use your information for marketing without your explicit consent.

4. Information Sharing

We only share information when:

• You give written consent, or

• There is a serious and imminent risk to your safety or the safety of another person, or

• We are legally required (e.g., subpoena, court order, mandatory reporting), or

• We seek supervision or consultation to support clinical quality (identifying details minimised as far as possible), or

• It is required by third-party funders (e.g., Medicare, DVA), strictly limited to what is necessary.

We do not share information for any other purpose.

5. How Your Information Is Stored

We use Zanda, a secure Australian practice management system used by healthcare providers. Zanda:

• Stores data on secure servers located in Australia

• Implements encryption and modern security standards

• Controls access based on practitioner roles

• Maintains audit trails

Telehealth sessions are conducted via Zoom Workspace, which is integrated within Zanda and meets international telehealth privacy and security requirements.

Paper records (if any) are stored securely and destroyed according to legal retention requirements.

6. Data Security

We take reasonable steps to protect your information from:

• Loss

• Misuse

• Unauthorised access

• Modification

• Disclosure

No online platform is 100% risk-free, but we use industry-standard security measures and follow professional obligations for secure data handling.

7. Your Rights

You have the right to:

• Access your personal and health information

• Request corrections to inaccurate or incomplete information

• Ask how your information is stored and used

• Withdraw consent for sharing (unless legally required)

• Make a complaint if you believe your privacy has been breached

We will respond to access or correction requests within a reasonable timeframe.

8. Telehealth and Electronic Communication

Our telehealth services use Zanda + Zoom Workspace, which comply with privacy and security standards for healthcare.

We may use email or SMS for:

• Appointment reminders

• Invoices and receipts

• Practice updates

• Administrative communication

These methods are secure but not without risk. By using our service, you consent to receiving necessary communications electronically unless you tell us otherwise.

9. Research, Training, and Quality Improvement

From time to time, we may invite you to participate in research or service improvement activities. Participation is always voluntary, and declining has no impact on your care.

For professional supervision or consultation, your information may be discussed without identifying details to support clinical quality and safety.

10. Complaints 

f you have a concern about how we handle your information, please contact us directly and we will aim to resolve it quickly.

If you are not satisfied, you can contact:

• Office of the Australian Information Commissioner (OAIC) – privacy complaints

• Australian Health Practitioner Regulation Agency (AHPRA) – professional conduct concerns

Contact details are available on their respective websites.

11. Changes to This Policy 

We may update this policy periodically to reflect changes in our practices or legal requirements. The most current version will always be available on our website. 

11. Contact Us 

If you have questions or would like to access or correct your information, please contact us at:

• admin@parragamartin.com