Privacy Policy

Hi there! We want to let you know how we collect information so that you can feel comfortable sharing it with us. That's why we have this privacy policy which outlines the way we at Kylie Walls Psychology (including Curated Mind Psychology and Refuge Psychology, ABN 12357029260) collect, hold, use, and disclose personal information. We may collect personal information from children as well as adults.


WHAT PERSONAL INFORMATION WE COLLECT & HOW AND WHY WE COLLECT IT?

What personal information do we collect?

The personal information we collect is generally limited to:

  • date of birth, name and contact details;

  • opinions; and

  • any communications we have.

However, we may also collect:

  • sensitive information from you with your consent, such as where we ask for information about your health, religious beliefs or affiliations and sexual preferences;

  • financial information, such as your credit card or debit card details; and

  • information about how you use our website, via third parties.

How do we collect your personal information?

The main ways we collect information are when you give it to us directly or indirectly. This might be by filling out forms on our website like sign-up or intake forms, or providing us information through sessions, phone calls, emails, or social media. Additionally, we may collect information from SMS interactions, such as responses to SMS notifications or promotional messages sent by us. We may also collect information from the person that referred you, or other people or organisations.

We love hearing from you, and we promise to keep your information safe and secure.

We also use cookies on our website. These are little bits of data that help our website work better. They might identify you and keep track of the pages you visit. This helps us improve our website and make it more secure. Plus, it makes it easier for you to use our website! You won’t have to fill in your information again and again.

At times personal information may also be gathered from third parties, such as Google Analytics or Facebook Pixel or WIX. These third parties may use cookies, web beacons and similar technology to collect or receive information about your habits on the internet.


Why do we collect your personal information?

We need your personal information to:

  • communicate with you in relation to your enquiry;

  • verify your identity for security purposes;

  • send you news if you have signed up via email or SMS (you can unsubscribe from either of these at any time);

  • conduct our business, and enable your use of our website, products, and services; and

  • in some cases, to comply with our legal obligations, such as record keeping (currently, the law requires us to keep adult records for 7 years and children's records until they turn 25 years of age).

We also collect personal information to analyse and enhance our business operations and improve your experience with our business. This is used as statistical information to analyse our website traffic and to customise the content and advertising we provide.

Communication and Contact

By engaging in psychological services, you acknowledge and consent to being contacted by this practice via email, SMS, and telephone for purposes directly related to your care. This may include appointment reminders, scheduling changes, sending forms or resources, invoicing and payment information, phoning you during your appointment (e.g., if disconnection occurs), and other administrative communication.

Email and SMS communication may involve the transmission of personal information. While reasonable steps are taken to protect privacy and security, these communication methods cannot be guaranteed to be fully secure. By continuing with services, you consent to the use of email, SMS, and telephone communication as outlined above. 

If at any time you would like to discuss alternative arrangements for communication, please let us know.

Electronic Communication and Privacy

While reasonable steps are taken to protect your privacy, the use of email and SMS for communicating personal and sensitive information carries inherent limitations and some risk to confidentiality. By choosing to communicate personal information with us via email, you acknowledge and accept these limitations. To protect your confidentiality, clients are encouraged to limit the personal or sensitive information shared via email and, wherever possible, discuss such information during appointments where privacy can be more appropriately safeguarded.

You can opt-out of the collection and use of this information by changing your privacy settings or opting out. 
To opt-out of Google advertising you can go here: https://tools.google.com/dlpage/gaoptout
To change your Facebook ad preferences you can go to "Facebook Help Centre", "Manage my account" and "Ad preferences".

To opt out of our SMS you can text back on the opt out link.

Where we collect your financial information, we use it to help you pay for our products and services. Only the staff that need to know this information have access to it, and we only keep it as long as it is necessary. We use SSL certificates to verify your identity and encrypt any data you give us. All financial information is encrypted on our servers, and we do not keep all your data (to prevent unauthorised and duplicated transactions). We use STRIPE to store your credit card information and process transactions securely.

WHEN DO WE DISCLOSE PERSONAL INFORMATION & HOW YOU CAN ACCESS IT? 

When do we disclose your personal information?

We use reasonable precautions to make sure your information stays safe and secure. Only authorised personnel can access it, and we keep it in accordance with our legal record keeping obligations. When we don't need it anymore, or it is unsolicited, we destroy it appropriately. We generally will not disclose your personal information unless we have your consent, it's required by law*, or it's necessary for us to provide you with our services.

* This can include the following: (a) a court subpoena for the information; (b) if a psychologist reasonably believes that the collection, use, or disclosure is necessary to lessen or prevent a serious threat to the life, health, or safety of any individual, or to public health or safety. This includes if there is reasonable suspicion that a child has suffered, is suffering, or is at unacceptable risk of suffering significant harm caused by physical or sexual abuse and may not have a parent willing and able to protect the child from harm (Child Protection Act 2009). This also includes when there is reasonable suspicion that indicates a person’s unsuitability to possess a weapon, this information may be shared with the police (Weapons Act); (c) if another adult has the power of attorney/guardianship for health matters, and the information is required to make an informed decision regarding the adult’s treatment and care; (d) when seeking peer supervision from another registered psychologist, in which case identifying information will not be shared; (e) your prior approval has been obtained to share the information; (f) where reasonably necessary for the administration and operation of the practice, including billing, payment processing, responding to financial enquiries or disputes, or establishing, exercising, or defending a legal or financial claim. In such circumstances, only the minimum necessary information will be disclosed, and all administrative staff and relevant third-party providers are bound by confidentiality obligations.

We will only disclose your sensitive information for the purpose for which you gave it to us or for directly related purposes that you would reasonably expect or if you otherwise agree.

Sometimes we do disclose your personal information where it is necessary to obtain third-party services, like analytics, data storage, online administration of psychological assessments, secure artificial intelligence tools, virtual assistants, payment providers or advertising services. Some of these third parties may be overseas. We do our best to make sure the providers we use comply with privacy laws and regulations. You can opt-out of the collection and use of this information by changing your privacy settings or opting out.


How can you access or delete your information? 

If you want to access, correct, or delete your information, or to change your communication preferences via email or SMS, please email us at admin@kyliewallspsychology.com.au. We're happy to help unless we're required by law to withhold it. And if you have any concerns at all about your privacy, please also email us at admin@curatedmind.com.au. You can also make a complaint with the Office of the Australian Information Commissioner by phone on 1300 363 992, online at http://www.oaic.gov.au where you can go to the "Lodge a Privacy Complaint with us" page, or post to: Office of the Australian Information Commissioner, GPO Box 5218, Sydney, NSW 2001.


ADDITIONAL PROVISIONS FOR EUROPEAN CITIZENS

If you are a resident of the European Economic Area (“EEA”) or the UK you have certain rights and protections under the General Data Protection Regulations ("GDPR") or its UK equivalent, The Data Protection Act 2018. We want you to know that we take these rights seriously and will always do our best to protect your personal information. We're what's called a "controller" under the GDPR as we collect, use, and store your personal information to provide you with our website services and information about them.

We'll always rely on a lawful reason for processing your information like:

  • where you have given us valid express consent to use your personal information we will rely on that consent, and only use the personal or sensitive information for the specific purpose for which you have given consent; and

  • where we need comply with the law or act in an emergency, we will rely on that lawful means of processing your personal information.


Your Rights

As an EEA or UK resident, you have various rights including the right to be informed; right of access; to rectification; to object; to restrict processing; to erasure or to be forgotten; to data portability; and the right not to be subject to automated processing. If you want to access personal information we hold about you, or ask if that the information be corrected, or deleted or otherwise exercise your rights, please contact us at admin@curatedmind.com.au. You can also opt out of email newsletter communications by following the instructions in those emails or by clicking unsubscribe. In some circumstances where we have a legal basis to do so we may continue to process your information after you have withdrawn consent, for example if it is necessary to comply with an independent legal obligation or if it is necessary to do so to protect our legitimate interest in keeping our services secure.


Security

We keep all personal information on our website platform confidential and secure, and it can only be accessed by authorised personnel. We collect what's necessary, and keep it only as long as is necessary, taking into account the purpose for which it was collected. We implement and maintain appropriate technical, security and organisational measures to protect your personal information against unauthorised or unlawful processing and use, and against accidental loss, destruction, damage, theft, or disclosure. We ensure the encryption and pseudonymisation of personal information and we have adequate cyber security measures in place. By providing us with your personal information you consent to us disclosing it to third parties who reside outside the EEA countries and the UK. We will ensure that those third parties are GDPR compliant as much as possible.


Thank you!

Thank you for trusting us with your personal information. Above all, we will do our best to keep it safe and use it responsibly.