PRIVACY POLICY - WEBSITE

This Privacy Policy sets out the commitment of Andrea Schwede trading as Andrea Schwede (ABN 88 493 125 051) (“Andrea Schwede”, “Andrea”, “we”, “us”, “our”) to protect the privacy of personal information we collect about you, including through this website, andreaschwede.health (“Website”), as well as through our other business operations or directly from you. Please read this Privacy Policy carefully and contact us using the details set out below if you have any questions.

By providing us with personal information, you indicate that you have had sufficient opportunity to access this Privacy Policy and that you have read and accepted it and consent to the collection, use, holding and disclosure of your personal information as outlined. If you don’t want to provide personal information to us, then you don’t have to, however this may affect your use of this website and the services mentioned within the website.

1. Types of personal information we collect

The types of personal information we collect may include:

• identity data (including your name and username or similar identifier);
• contact data (including your contact details such as your billing and delivery address, email address and telephone number);
• health data (including psychiatric history, medical history, current health status, current medications, your current GP, other health professionals involved in your care, information from referring medical professionals, information from past service providers)
• Medicare identification data (including Medicare Card number, reference and expiry date, Rebate eligibility data)
• social data (including personal history, family composition, relationships past and present, interests and hobbies)
• education data (including education facilities attended, academic performance)
• employment data (including past and present employment roles and job functions)
• emergency contact data (including two people in your locality that can support you in an emergency situation)
• transaction data (including details about payments to and from you and other details of services you have purchased from us);
• technical data (including your internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website);
• profile data (including your username and password, appointments made by you, your interests, preferences, feedback and survey responses);
• usage data (including information about how you use our website, products and services); and
• marketing and communications data (including your preferences in receiving marketing from us and our third parties and your communication preferences).

Unless otherwise required by law, if you’re a client and would like to browse the website anonymously or use a pseudonym, feel free to do so.

However, If you decide to book a Psychology or Supervision appointment with us please be aware that it may be impractical to offer you anonymous or pseudonymous service as we may need to confirm your identity for reasons including, but not limited to, our business need to:

• Process a Credit or Debit Card payment.
• Prevent fraud
• Comply with a taxation audit or other Tax compliance reasons
• Determine your Eligibility for Medicare Rebates
• Submit a Medicare Rebate application on your behalf

2. How we collect personal information

We collect this information from you when you browse our website, make an enquiry with us (for example, by telephone or email), sign up for a service or appointment via our website or submit a contact enquiry on our website, give authority for a medical professional to provide information to us, complete psychology intake forms, complete surveys or questionnaires, give us information during a telehealth psychology session.

We are committed to using lawful and fair means to collect personal information and collecting it from others only when it is unreasonable or impracticable to obtain certain information from you directly. We collect personal information about you from:

• You
• Your referring medical professional
• People you authorise us to communicate with
• Medicare
• Searches and enquiries
• Your use of our website

Third parties may also use cookies, web beacons and similar technology to collect or receive information from our website or from you and from elsewhere on the internet and use that information to provide measurement services and targeted advertising (such as the Facebook pixel, Google Analytics and AdWords). If we receive your personal information from third parties, we will protect it as set out in this Privacy Policy.

We will destroy or de-identify information where we form the opinion that the information has been provided to us unlawfully or unfairly.

3. Why we collect, hold, use and disclose personal information

We collect, hold, use and disclose your personal information as is reasonably necessary for us to perform our core functions and activities, including for the following purposes:

• to contact and communicate with you
• to provide services to you
• to maintain a database of customers, subscribers or similar
• to market to you and others, including remarketing (this may involve the use of a Facebook pixel or similar technology to allow us to display our advertising to you elsewhere on the internet, for example, on Google or Facebook)
• for internal record keeping
• for statistical purposes
• as required by law

Where we disclose your personal information to third parties for these purposes, we will do our best to ensure that their privacy policy adheres to similar standards of privacy protection and/or request that the third party follow this Privacy Policy regarding handling of your personal information. We will also be diligent in ensuring that the personal information we disclose is accurate, up-to-date, complete and relevant.

We will not use or disclose personal information for the purpose of direct marketing unless you have consented to the use or disclosure of the information for that purpose.

Your personal information may be disclosed to international recipients in Europe, North America or United Kingdom as part of our ordinary business functions.

Please note that we will not disclose your personal information for any purpose other than the purpose for which it was collected without your consent, unless we are required to do so by law.

4. Use of cookies

As you probably know, a cookie is a small text file that’s placed on your computer to help us remember your preferences, like your login information or location. Cookies are used for a variety of reasons. We use cookies to make it easier and faster for you to use our website. We also use cookies for security purposes to protect you online. We and our third-party vendors may also use cookies to assist in making an appointment, providing forms to you, providing a telehealth session to you or display advertisements to you elsewhere on the internet.

5. Links to other sites

To help you find more information, we sometimes include links to other helpful websites from our website. Please note that this Privacy Policy only applies to information that we collect on our website (not any other site). As we aren’t responsible for data collection on those other sites, our Privacy Policy won’t apply. We can’t guarantee any of the privacy practices of other websites, so please be safe and make sure you read their privacy policy before giving them your personal information.

6. How you can access and correct your personal information

Access: You can request details of personal information that we hold about you. We will respond to any request to access information within a reasonable time. As a security measure we will need to confirm and verify your identity.

Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us using the details set out below. We rely in part on you advising us when your personal information changes. We will endeavour to promptly correct any information found to be inaccurate, incomplete or out of date and to notify you of the correction, unless it is impracticable or unlawful to do so.

Deletion: Unless otherwise required by law or professional codes of conduct, if you want us to delete personal information we hold about you or to not collect information from you for a specific purpose, such as targeted advertising, please contact us using the details set out below. Please note that if we agree to delete your information, because of backups and records of deletions, it may be impossible to completely delete your information without retaining some residual information. We will functionally delete the information and we will not sell, transfer, or use personal information relating to you in any way moving forward.

We will respond to any request to access, correct or delete information within a reasonable time.

7. How we maintain the security of your information

We are committed to ensuring that the personal information we hold is secure and protected from misuse, interference, loss and unauthorised access, modification or disclosure. We undertake the following precautions to protect personal information we hold:

• our website contains pages encrypted using either TLS (Transport Layer Security) or SSL (Secure Sockets Layer) to ensure the safety of any data that is submitted through use of this website
• we limit access to personal information to a “need-to-know” basis
• we protect devices we use to collect, hold, use and disclose personal information with industry-standard anti-virus software
• our devices are protected by password and are stored in secure premises
• data is securely stored on cloud servers
• our email data is encrypted
• all hard copies of personal information are kept in secure storage with access by authorised personnel only
• all conversations involving the discussion of personal information take place in private, where conversations are unable to be overheard by unauthorised personnel
• if we no longer need personal information, we take reasonable steps to delete or de-identify the information

While we take commercially reasonable measures to maintain a secure website and business, electronic communications and databases are subject to errors, tampering and break-ins, and we cannot guarantee or warrant that such events will not take place and we will not be liable to you for any such occurrences. If a data breach occurs involving your personal information and the breach is likely to cause harm to you, we will notify you as soon as possible after the occurrence in accordance with our obligations under the Privacy Act and related legislation.

8. How you can make a complaint about privacy breach

If you believe that we have breached this Privacy Policy and want to make a complaint about that breach, please contact us using the details set out below. If you are unsatisfied with our response, the Office of the Australian Information Commissioner may be able to assist you with a review of our decision. Contact the OAIC for more information.

9. How you can unsubscribe or opt out

We like to keep our customers and website visitors up to date, so from time to time we’ll send you newsletters, invitations and updates. Not to worry: our emails will always come with an "Unsubscribe" button, so you can opt out at any time. To unsubscribe from our email database, or opt out of communications, use the “Unsubscribe” button in our communication or contact us using the details set out below.

You can block the use of cookies by selecting the appropriate settings on your browser. You can opt out of third party vendor cookies by visiting your Google’s Ad settings or http://www.networkadvertising.org/managing/opt_out.asp. Please note that the website may not work as well for you if you disable cookies.

You can also opt out of information collecting for advertising targeting by visiting www.aboutads.info/choices.

10. Changes to this policy

If we decide to change our Privacy Policy, we'll let you know by posting such changes on our website.

11. Contact details

For any questions or notice, please contact us using these details:

Andrea Schwede – email: privacy@andreaschwede.health

This Privacy Policy was last updated: 19/05/2022