This document describes the privacy policy of Dural Psychology for the management of your personal information. The psychological service provided is bound by the legal requirements of the Australian Privacy Principles set out in the Privacy Act 1988 (Cth) and the NSW Health Records and Information Privacy Act (2002).
Your information is stored securely and accessed only by your psychologist and the authorised staff or providers of the practice, as required, in accordance with the practice’s policies and procedures.
Your information is stored using Zanda (practice management software), which uses encryption and access controls that meets the highest standards for security and privacy. Zanda adheres to the Australian Privacy Laws.
The information collected includes your personal details such as name, address and contact phone numbers. As part of providing a psychological service, such as a psychological assessment or treatment, we will also need to collect and record other personal information that is relevant to your current situation. This includes keeping a record of what happens during sessions, any psychological tests you complete, and any information received from others, such as your GP, lawyer or insurance company.
There are a number of ways your personal information is collected, including when:
You provide information directly to your psychologist in your session and in writing such as letters, email or text messages.
You interact directly with your treating Psychologist, [Insert Name of Psychologist] or Dural Psychology employees such as our administration staff.
Other health practitioners, such as your GP, provide personal information to your treating Psychologist, [Insert Name of Psychologist] or Dural Psychology through referrals, correspondence and medical reports.
We receive personal information from other sources, such as lawyers, employers or insurance companies through correspondence or reports.
If you have concerns that the information recorded is not correct, please discuss your concerns with our administration staff or your psychologist.
Your personal information is gathered and used for the purpose of providing a psychological service to you. Your personal information is retained in order to document what happens during sessions and enables your psychologist to provide a relevant and informed psychological service to you. This information and record keeping is a necessary part of the services provided and guides treatment.
At times, with your consent we may also gather information from others to help to inform the psychological service. That information is treated in the same way as your personal information.
To support the delivery of safe, ethical and high quality care, your psychologist may, at times, share relevant information about your treatment in professional supervision, peer consultation or with other qualified psychologists and consultants. These discussions are a normal part of professional practice and are undertaken to enhance the quality and effectiveness of your treatment. Whenever this occurs, your information will be de-identified, meaning that no details that could reveal your identity will be included and you remain anonymous.
Some of the questionnaires you complete will be de-identified and will be compiled with other clients, to evaluate the overall effectiveness of the practice as a group.
If you are receiving treatment under a Mental Health Treatment Plan (MHTP), Medicare requires your psychologist to provide progress reports to your GP.
Your psychologist will review the intended uses of your information with you at your first session. Please discuss any questions or concerns you may have, as the service may not be able to be provided without your consent.
Psychologists are required to keep clear and accurate client records as part of their professional obligations.
If you do not wish for your personal information to be collected, we may not be able to provide the psychological service to you. Please discuss any concerns you have with your psychologist.
At any stage, you can request to access your personal information kept on file. There may be some exceptions that impact your ability to access the information, which are outlined in the relevant legislation.
If you would like to access your information, please discuss it with us or you can request in writing. All written requests for access to information will be responded to in writing within 30 days and an appointment will be made if necessary for clarification purposes.
Your psychologist will keep your personal information confidential, except in specific situations outlined in this document or as required by law. In most situations, your information will only be shared with others if you give permission. If your psychologist needs to speak with someone involved in your care, they will obtain your written and verbal consent before sharing information and explain what information may be shared and why. Your Psychologist may ask for consent to share information with some of the following:
• Sharing information with a family member, guardian, or carer.
• Communicating with other parties, including a doctor, other health professionals, employer, or any organisation funding your sessions (e.g., insurer or EAP provider).
• Providing written reports about your assessment or treatment to another professional or agency (for example, your doctor, lawyer, school, or insurance company).
• Any other form of disclosure not already described in this document.
You may withdraw or change your consent at any time by notifying your psychologist.
Your personal information will never be shared overseas unless you consent or the disclosure is required by law. Your information will never be sold, rented, or used for marketing purposes.
There are times when your psychologist may release your information without obtaining your consent such as:
· Legal Requirement – When a court requires information by issuing a subpoena, or providing information is otherwise required or authorised by law.
· Serious Risk of Harm – Your psychologist believes that not sharing information could place you or someone else at serious risk to life, health, or safety.
Mandatory Reporting – Psychologists are legally required to report suspected child abuse, neglect, or other matters as required under state and federal law.
In the event that any unauthorised access, disclosure or loss of your personal information occurs, Dural Psychology will activate its data breach plan and use all reasonable endeavours to minimise any risk of consequential serious harm.
At any stage you may request to see and correct the personal information about you kept on file. Your psychologist may discuss the contents with you and/or give you a copy, subject to the exceptions in the Privacy Act 1988 (Cth).
If your psychologist is satisfied that your personal information is inaccurate, out of date or incomplete, reasonable steps will be taken in the circumstances to ensure that this information is corrected. All requests by you for access to or correction of personal information held about you should be lodged with your psychologist or our administration staff.
All written requests for access to information will be responded to in writing within 30 days and an appointment will be made if necessary for clarification purposes.
Your feedback is important to us. If you ever have a concern about your care, your personal information, or any aspect of the service you receive, please raise it directly with your psychologist or our reception staff. We will listen carefully, take your concern seriously, and aim to resolve it respectfully and promptly.
Upon request you can obtain a copy of the Australian Privacy Principles, which describe your rights and how your personal information should be handled.
Ultimately, if you wish to lodge a formal complaint about the use of, disclosure of, or access to, your personal information, you may do so with the Office of the Australian Information Commissioner:
· By phone on 1300 363 992.
· Online at https://www.oaic.gov.au/privacy/privacy-complaints/lodge-a-privacy-complaint-with-us
· By post to: Office of the Australian Information Commissioner, GPO Box 5288, Sydney, NSW 2001.
