Privacy Policy

Courtney Griffiths, Psychologist
Last updated: 30 September 2026

1. About this Privacy Policy

Courtney Griffiths, Psychologist ("I", "me", "my" or "the Practice") respects your privacy and is committed to protecting your personal information.

As a registered psychologist providing psychological services in Queensland, I handle personal and health information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how I collect, use, store, disclose and protect personal information.

The information collected in providing psychological services may include sensitive health information. Australian privacy law provides additional protections for sensitive information, including health information.

2. What information do I collect?

Depending on how you interact with the Practice and whether you become a client, I may collect:

  • your name and preferred name;

  • date of birth;

  • contact details, including telephone number, email address and residential address;

  • emergency contact details;

  • Medicare details and other information required for billing or Medicare claiming;

  • GP, psychiatrist, psychologist or other treating practitioner details;

  • information contained in referrals and correspondence;

  • information about your mental health, psychological wellbeing and relevant history;

  • relevant physical health information and medication information;

  • information about your family, relationships, employment, education and social circumstances where relevant to psychological care;

  • appointment, billing and payment information;

  • clinical notes, assessments and other records relating to psychological services; and

  • information you voluntarily provide when contacting the Practice through the website, email, telephone, SMS, online forms or other communication methods.

3. How do I collect information?

Where practicable, information is collected directly from you.

This may occur when you:

  • contact the Practice;

  • make an appointment;

  • complete a client information or intake form;

  • attend a psychological appointment;

  • communicate with the Practice by telephone, email or SMS;

  • participate in a telehealth appointment;

  • provide information during psychological assessment or treatment; or

  • otherwise provide information to the Practice.

Information may also be received from a GP, psychiatrist, other treating professional or referrer where this is authorised or otherwise permitted by law.

The Practice generally collects health information with your consent and only where it is reasonably necessary for providing psychological services or related activities.

4. Why do I collect your information?

Personal and health information may be collected, used and held for purposes including:

  • providing psychological assessment and treatment;

  • understanding your circumstances and psychological needs;

  • developing and reviewing treatment;

  • maintaining appropriate clinical records;

  • managing appointments and communicating with you;

  • processing payments and Medicare claims where applicable;

  • communicating with other treating professionals where appropriately authorised;

  • complying with legal, professional and regulatory obligations;

  • managing privacy or other complaints;

  • responding appropriately to emergencies or serious risks to life, health or safety; and

  • managing the administration, security and operation of the Practice.

If information is not provided when it is reasonably necessary for these purposes, it may affect my ability to provide psychological services or administer your care.

5. How is your information used and disclosed?

Your information will generally only be used or disclosed for the purposes for which it was collected, for a related purpose that you would reasonably expect, with your consent, or where otherwise permitted or required by law.

Depending on the circumstances, information may be disclosed to:

  • your GP, psychiatrist or other treating health professional;

  • a referrer;

  • Medicare or relevant government agencies where required for claiming or administration;

  • professional indemnity insurers or legal advisers where necessary;

  • relevant authorities where disclosure is required or authorised by law; and

  • service providers who assist with the operation and administration of the Practice.

Where information is disclosed to another treating professional, I will generally seek your consent and limit the information disclosed to what is reasonably necessary for the relevant purpose.

Health information may also be disclosed without consent in limited circumstances permitted by law, including where disclosure is necessary to address a serious threat to a person's life, health or safety or where disclosure is otherwise required or authorised by law.

6. Confidentiality

Information disclosed during psychological services is treated as confidential.

Confidentiality is subject to certain legal and professional exceptions. These may include circumstances where disclosure is required or authorised by law or where disclosure is permitted or required to address a serious risk to the life, health or safety of a person.

The limits of confidentiality will be discussed with clients as part of the psychological service and informed-consent process.

7. How is your information stored and protected?

I take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

The Practice uses secure electronic systems to manage personal, administrative and clinical information, including:

Halaxy
Halaxy is used for clinical management, client records, appointments, forms, SMS and other practice administration.

Gmail / Google
Gmail is used for Practice email communication.

Coviu
Coviu is used for telehealth appointments where applicable.

Squarespace
Squarespace is used to host and operate the Practice website.

Novopsych
NovoPsych is used for psychological assessment and outcome-measure administration, including the collection and management of assessment and outcome-measure information.

Access to personal information is restricted to what is reasonably necessary for legitimate professional or administrative purposes.

No electronic system or method of transmitting information can be guaranteed to be completely secure.

8. Third-party service providers and overseas disclosure

The Practice uses third-party technology and service providers to assist with the delivery and administration of psychological services.

Some third-party providers may store or process information outside Australia. Where this occurs, I take reasonable steps to ensure that personal information is handled in accordance with applicable Australian privacy requirements, including the requirements relating to overseas disclosures under the Australian Privacy Principles.

The Practice does not sell personal or health information.

9. Website information and cookies

When you visit the Practice website, certain technical information may be collected by the website provider, including information such as your IP address, browser type, device information and information about how you interact with the website.

The website may use cookies or similar technologies for website functionality, security and analytics.

The Practice does not intentionally collect sensitive health information through ordinary website browsing.

If you choose to contact the Practice through a website form, the information you provide will be handled in accordance with this Privacy Policy.

10. Email, SMS and electronic communication

The Practice may contact you by telephone, SMS or email for purposes relating to appointments, psychological care and practice administration.

Electronic communication may carry privacy and security risks. You may request an alternative method of communication where appropriate.

Please avoid sending highly sensitive clinical information by ordinary email or SMS unless specifically requested or agreed.

11. Telehealth

Where psychological services are provided by video telehealth, the Practice uses Coviu.

Telehealth involves communication over the internet and therefore carries some inherent privacy and security risks.

Clients are encouraged to participate in telehealth appointments from a private location and, where possible, use a private and secure internet connection.

Telehealth sessions are not recorded unless this is specifically discussed with you and separate informed consent is obtained.

12. Accessing your information

You generally have a right to request access to personal information that I hold about you.

You may request access by contacting me using the details below.

I will respond to requests for access within a reasonable period. In some circumstances, access may be refused where permitted or required by law. If access is refused, I will provide an explanation where appropriate and advise you of any available avenues of review or complaint.

13. Correcting your information

I take reasonable steps to ensure that personal information I hold is accurate, complete and up to date.

If you believe information I hold about you is inaccurate, incomplete, out of date or misleading, you may request that it be corrected.

Please contact me if you would like to request a correction.

14. Retention of clinical records

Clinical records are retained in accordance with applicable legal, professional and regulatory requirements.

Records will be securely retained for the required period before being securely destroyed or otherwise disposed of in accordance with applicable requirements.

15. Privacy complaints

If you have concerns about the way your personal information has been collected, used, stored or disclosed, I encourage you to contact me first so that I can investigate and attempt to resolve your concern.

Privacy enquiries and complaints:

Courtney Griffiths, Psychologist
Email: courtneygpsych@gmail.com
Phone: [INSERT PRACTICE PHONE]

I will acknowledge and investigate privacy complaints and aim to resolve them fairly and promptly.

If you are not satisfied with the response, or you would prefer to make a complaint directly to the privacy regulator, you may contact the Office of the Australian Information Commissioner (OAIC).

Office of the Australian Information Commissioner
Website: www.oaic.gov.au
Telephone: 1300 363 992

The OAIC provides information about privacy rights and complaints on its website.

16. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to the Practice, technology, applicable legislation or privacy requirements.

The current version will be published on this website.

Last updated: 30 September 2026