Privacy Policy

To provide services to you, we need to gather personal and sensitive information about you, including (but not limited to) medical, psychological and other allied health reports, school records and reports, referral letters, medication history, health and developmental history, and other important information. We may also ask to collect identifying information, including Medicare details, credit card and bank account details, and details of third parties involved in the management or funding of your appointments to support payment of services. This information is necessary in the delivery of psychological assessment and treatment services.

There are a number of ways we might collect your personal and sensitive information, including:

• directly from you in person or via phone, email, or if you send us information through our website or practice management software (Halaxy), and

• from other sources, including your GP, allied health professionals, government agencies administering your entitlements and benefits, parents/caregivers, teachers/educators, legal professionals or a person responsible for your healthcare decisions when appropriate.

Our website and services may collect other information, including IP addresses, browser type, and other information relating to the device used to access the website.​

Touch The Sky Psychology takes reasonable steps to protect your personal and sensitive information from misuse, loss, unauthorised access and modification or disclosure. We use commercially available, administrative and physical measures to protect personal and sensitive information that we hold, and:

• ensure physical security over paper and electronic data stores, such as locks and security systems, is maintained and monitored regularly,

• maintain security systems, by using a firewall, using strong passwords and encryption to control access to electronic devices and systems, and using two-factor authentication when available to access electronic systems,

• take reasonable steps to destroy and de-identify your personal and sensitive information once it is no longer needed, and

• conduct regular privacy and data security audits to assess whether we have adequately complied with and implemented these measures.

​​

Unfortunately, no data security system can guarantee 100% security all the time. The security of the information transmitted to us via the internet cannot be guaranteed. If you choose to send us information online, you do this at your own risk. Wherever possible, we recommend sending us information through our practice management system, Halaxy, which has its own inbuilt security measures.

​

You are responsible for protecting any passwords or account information relating to apps, software, platforms or services used through the services you access with Touch The Sky Psychology.

​

Your information may be stored electronically through third party data centres located overseas (that to the best of our knowledge comply with Australian legislation) or in physical storage at our premises. When services are completed, we convert all client files into electronic format and store them online via our secure practice management software (Halaxy). Once digitised, hard copies of documentation are shredded and disposed of securely.

We collect your personal and sensitive information for a number of reasons, including (but not limited to):

• to assess whether we are an appropriate service for you,

• to provide you with psychological services such as assessment and diagnosis and/or preparing reports and other written documentation,

• to send you communication via SMS or email, to remind you about your appointments, send invoices, and to provide you with questionnaires and reports/documentation,

• to ensure you receive the correct entitlements to benefits and funding for our services from third-party payers, as well as to comply with their requirements as needed,

• to respond to your enquires, requests, and feedback, and

• to keep your information up to date and when updating records.