Privacy Policy

Excelsis Psychology Joondalup (ABN: 20 687 814 213) and Excelsis Psychology West Leederville (ABN: 40 687 816 360) (“us”, “we”, or “our”) recognise the importance of your privacy and respect your right to control how your personal information is collected and used.

We are APP Entities as defined in the Privacy Act 1988 (Cth) (the “Act”). This Privacy Policy is aligned with the Australian Privacy Principles (APPs) and describes the way we may collect, hold, use, and disclose your personal information.

This Privacy Policy applies to:

• Our websites: www.excelsispsychology.com.au and www.excelsispsychology.com (the “Site”)

• Our clinic services, including in-person and telehealth appointments

• Online courses, digital resources, and other services we provide

In this policy:

• “Personal Information” means any information that identifies you or could reasonably identify you.

• “Sensitive Information” includes health information, medical history, referrals, or other information relevant to psychological care.

1. Collection of Information

We may collect information such as:

• Contact details (name, address, phone, email)

• Payment and billing details (including Medicare, private health, or NDIS information)

• Health information relevant to your psychological care (referrals, reports, treatment notes, medication, history)

• Information provided by parents/guardians when services relate to a child or adolescent

• Website and usage data (IP address, browser type, site activity)

Information may be collected:

• Directly from you (face-to-face, phone, email, online forms, telehealth platforms)

• From third parties with your consent (GPs, specialists, schools, NDIS providers)

• Automatically via our website through cookies and analytics

2. Use and Disclosure of Information

Your information is used to:

• Provide psychology services, assessments, and therapy

• Manage bookings, billing, and rebates (Medicare, private health, NDIS)

• Communicate with you regarding your care

• Deliver online programs, courses, or resources

• Improve our services, website, and educational content

We may disclose your information:

• To treating health professionals (with your consent or where reasonably necessary)

• To Medicare, private health insurers, or NDIS for billing purposes

• To service providers we engage (IT, administration, cloud storage), bound by confidentiality and security obligations

• Where required or authorised by law (e.g., serious risk to life, health, or safety; legal reporting obligations)

We will never sell or trade your personal information.

3. Access and Correction

You may request access to your personal information or ask us to correct it if inaccurate. We will respond within a reasonable time.
In limited circumstances (e.g., legal proceedings, serious threats), we may refuse access, and we will provide written reasons.

4. Storage and Security

We take reasonable steps to protect your information from misuse, loss, unauthorised access, modification, or disclosure. Measures include:

• Secure practice management software (Halaxy and/or equivalent)

• Password protection and encryption

• Secure cloud-based and physical storage

• Limited access by authorised staff only

If information is no longer required, it will be securely destroyed or de-identified in accordance with professional record-keeping obligations.

5. Telehealth & Online Services

Where services are provided via telehealth platforms (e.g., Teams, Zanda), information is transmitted using secure channels. While we take steps to protect data, no internet transmission can be guaranteed as 100% secure.

If you access our online resources, courses, or guides, we may collect your name, email, and payment details to deliver the service.

6. Data Breach Notification Scheme

If we suspect a data breach, we will promptly assess it. Where an eligible breach is confirmed, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the law.

7. Identifiers

We will not adopt, use, or disclose government-issued identifiers (such as Medicare or Tax File numbers) except where necessary and permitted by law.

8. Marketing Communications

We may, from time to time, send you updates about services, resources, or events where you have consented. Communications will comply with the Spam Act 2003 (Cth). You may opt out at any time by following the unsubscribe link in emails or contacting us directly.

We do not provide your details to third parties for marketing.

9. Children and Adolescents

When working with children under 18, we collect information with the consent of a parent/guardian. Information shared in sessions with a child is treated with confidentiality, except where disclosure is required for safety or legal reasons, or where consent is provided to share with parents, schools, or other services.

10. Third-Party Websites

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of external sites.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be published on our Site. Continued use of our services after updates indicates your acceptance.

12. Complaints and Enquiries

If you have any concerns or complaints about privacy, please contact us:

Dr Liezl Addinall
Director
Excelsis Psychology

Joondalup: 2/7 Wise Street, Joondalup WA 6027
West Leederville: 176A&B Cambridge Street, West Leederville WA 6007

Phone: (08) 6115 0024

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

• Phone: 1300 363 992

• Address: GPO Box 5218, Sydney NSW 2001