Rose Park Psychology Privacy Policy

1. Our Commitment to Your Privacy

Rose Park Psychology is committed to protecting your privacy and the confidentiality of your personal and health information. We understand that your information is sensitive, and we take our legal and professional responsibilities seriously. This policy explains how we collect, use, store and disclose your personal information, and how you can access or correct your information or make a complaint.

We comply with:

• The Privacy Act 1988 (Cth)
• The Australian Privacy Principles (APPs)
• The Notifiable Data Breeches Scheme
• Professional Obligations under AHPRA and the APS code of Ethics

2. What Information We Collect
We may collect the following types of information:

Personal information

• Name, date of birth, address, phone number, email
• Emergency contact details
• Medicare or private health insurance details
• Referral information

Health information (sensitive information)

• Presenting issues and mental health history
• Assessment results
• Treatment notes and progress records
• Correspondence from or to other health professionals

We only collect information that is necessary to provide psychological services and manage your care and appointments.

3. How We Collect Your Information

We may collect your information when you:

• Make an enquiry or book an appointment
• Complete intake or consent forms
• Attend sessions
• Provide information over the phone, email, or online systems
• Are referred by your GP or another professional

We may also recieve information from:

• Referring doctors or health professionals
• Medicare or private health insurers (for billing purposes)

Where possible, we collect information directly from you.

4. Why We Collect and Use Your Information
We collect and use your information to:

• Provide psychological assessment and treatment
• Manage appointments and practice adminstration
• Communicate with you about your care
• Process Medicare or insurance claims
• Meet legal, professional, and regulatory obligations

If you do not provide necessary information, we may not be able to provide appropriate services.

5. Consent

By engaging with Rose Park Psychology and providing your information, you are providing informed consent for us to collect, use and store your information for the purposes of providing psychological services and managing your care. You may withdraw or limit consent for certain disclosures at any time in writing. However, withdrawing consent may affect our ability to provide services or coordinate your care.

Consent is specifically required before we:

• Provide reports to third parties (e.g., lawyers, insurers, employers)
• Share information with family members or other non-treating parties

6. Who We May Share Your Information With
We may disclose your information to:

• Other health professionals involved in your care (with consent)
• Medicare or private health insurers for billing and rebates
• Administrative staff for appointment and billing management (confidentiality agreements apply)

We may disclose information without your consent when required or authorised by law, including when:

• There is a serious and imminent risk to your safety or someone else’s safety
• Disclosure is required by law (e.g., subpoena, court order, mandatory reporting)
• It is necessary to prevent or investigate serious crime

Where possible, we will discuss this with you before disclosure.

7. Overseas Storage and Cloud Systems

Rose Park Psychology uses secure electronic practice management systems. Some data may be stored on servers located outside Australia, depending on the service provider.
We take reasonable steps to ensure that any overseas service providers comply with privacy and security standards that are comparable to Australian privacy laws.

8. How We Store and Protect Your Information

We take reasonable steps to protect your information from misuse, loss, unauthorised access or disclosure.
This includes:

• Secure, password-protected electronic systems
• Encrypted data storage
• Locked filing cabinets for paper records
• Restricted staff access based on role
• Confidentiality agreements for administrative staff

Only authorised staff and your treating psychologist can access your clinical information.

9. How Long We Keep Your Information

We retain client records in line with professional and legal requirements:

• Adults: at least 7 years after last contact
• Children: until the client turns 25 years of age

After the retention period, records are securely destroyed using approved destruction methods.

10. Accessing and Correcting Your Information

You have the right to:

• Request access to your personal information
• Request correction of inaccurate or incomplete information

To request access or correction, please contact us in writing. We may require proof of identity before releasing information.
Access may be limited in rare circumstances where releasing information could pose a serious risk to your safety or another person, or where permitted by law.

11. Communication Outside of Sessions

We may contact you via phone, SMS, or email for:

• Appointment reminders
• Billing and administrative matters
• Practice updates (with your consent)
  We aim to avoid sending sensitive clinical information via email or SMS.
  However, electronic communication carries some privacy risks, and by providing your contact details you acknowledge and accept these risks. You may opt out of non-essential communications at any time.

12. Data Breaches and Notification

A data breach occurs when personal information is accessed, disclosed, or lost without authorisation.

If a data breach occurs that is likely to result in serious harm, we will:

• Investigate promptly
• Take steps to reduce risk
• Notify affected individuals
• Notify the Office of the Australian Information Commissioner (OAIC), as required by law

13. Complaints and Concerns

If you have concerns about how your information has been handled, please contact:
Practice Admin
Rose Park Psychology
�� admin@roseparkpsychology.com.au
�� (08) 8333 0940
We will investigate your complaint and respond as soon as possible.
If you are not satisfied with our response, you may also contact:
Office of the Australian Information Commissioner (OAIC)
www.oaic.gov.au | 1300 363 992
You may also raise concerns with relevant professional bodies such as AHPRA or the APS.

14. Policy Review

This privacy policy is reviewed at least annually and whenever there are changes to legislation or professional requirements.
The most current version will always be available from our practice or on our website.