Privacy Policy – Annamariya Hurducas Psychology

Effective date: 14 October 2025

1. Introduction

Annamariya Hurducas Psychology (“we”, “our”, “us”) is committed to protecting your privacy and maintaining the confidentiality of your personal and health information. We adhere to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and to professional standards and ethical obligations set by AHPRA and the Psychology Board of Australia.

This policy explains how we collect, use, disclose, store, and manage your personal information, and how you can access or correct it.

2. What information we collect

• Identity details: name, date of birth, address, email, telephone number
• Health information: medical and psychological history, diagnoses, treatment notes, medications, risk assessments, referrals
• Service details: appointments, attendance, billing information, payment records
• Referrals and reports: information from your GP, psychiatrist, or other health professionals
• Website data: IP address, browser type, device details, pages visited, cookies, analytics data
• Other information that you choose to provide to us

3. How we collect information

• Directly from you (forms, emails, phone calls, consultations, telehealth sessions)
• From third parties (referring practitioners, health professionals, insurers, Medicare/private health funds) where relevant and permitted
• From publicly available sources (if necessary and appropriate)
• Automatically through our website (e.g., cookies and analytics)

4. Why we collect and use your information

• Providing psychological assessment and therapy services
• Coordinating care with other health professionals (with your consent where required)
• Processing payments, insurance claims, and Medicare rebates
• Practice administration, quality assurance, supervision, and record-keeping
• Meeting legal and ethical obligations under the National Law and AHPRA standards
• Risk management, safety, and responding to enquiries
• Managing our website, security, and communications

We only use your information for the purpose for which it was collected, or for related purposes you would reasonably expect, unless you consent to another use or disclosure, or we are required or authorised by law.

5. Disclosure of personal information

• Referring practitioners (e.g., GPs, psychiatrists) and other providers involved in your care
• Medicare and private health insurers (for claims/rebates)
• Practice management software and IT service providers
• Supervisors or professional peers (for clinical supervision/quality assurance, de-identified where possible)
• Legal/regulatory authorities where required by law (e.g., subpoenas, mandatory reporting)
• Other parties you authorise us to share information with

We require third parties to handle your information in accordance with privacy laws and professional confidentiality standards.

6. Website cookies and analytics

Our website may use cookies and analytics tools (e.g., Google Analytics) to collect non-identifiable information such as IP address, browser type, and pages visited. This helps improve performance and user experience. You can disable cookies in your browser settings, though some features may not function properly.

7. Storage and security

• Records are stored securely using password-protected, encrypted systems and/or locked storage.
• Electronic records are stored in secure practice management software and cloud providers aligned with Australian privacy standards.
• We retain adult client records for at least 7 years from the last date of service, and for minors until age 25 (or longer if required by law).
• When no longer required, records are securely destroyed or de-identified.

We take reasonable steps to protect your information from unauthorised access, loss, misuse, or disclosure. However, no internet transmission is entirely secure.

8. Access and correction

You may request access to your personal and health information, or ask for corrections, by contacting us in writing. We may need proof of identity and will respond within a reasonable timeframe. If we cannot provide access, we will explain why and outline your options.

9. Complaints about privacy

If you believe your privacy has been breached, please contact us in writing. We will investigate and respond promptly. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au, phone 1300 363 992, email enquiries@oaic.gov.au.

10. Cross-border disclosure

Where we use cloud or third-party services that store data outside Australia, we take reasonable steps to ensure your information is protected in accordance with the APPs, including contractual and technical safeguards. We will notify you of the jurisdictions involved where practicable.

11. Consent

By engaging our services or using this website (e.g., submitting forms or agreeing to terms online), you consent to the collection, use, and disclosure of your personal information as described in this policy. You may withdraw consent at any time, subject to legal and contractual obligations. Withdrawal may limit our ability to provide services.

12. Changes to this policy

We may update this policy to reflect legislative or practice changes. The most current version will appear on this page with the effective date.

13. Contact us