1. Our privacy obligations
The Diamond Practice Pty Ltd (ABN 34 700 613 841), trading as The Diamond Practice (the Practice, we, us), is a private psychology practice. We handle personal and health information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, the Health Records and Information Privacy Act 2002 (NSW) and applicable professional and record-keeping obligations.
This policy applies to information handled through our website, enquiries, referrals, appointments and the provision of psychology and neuropsychology services. Clinical consent and service information may also be provided separately before an appointment or assessment.
2. Information we may collect
Depending on the nature of an enquiry or service, we may collect:
- name, date of birth, contact details and emergency-contact information;
- Medicare, health-fund, insurer, SIRA or other funding information;
- medical, psychological, family, social, education and employment history;
- referrals, reports, test results, clinical notes and correspondence;
- appointment, billing and payment information; and
- other information reasonably required to provide an appropriate service.
Health information is sensitive information. We collect it with consent where required and only where it is reasonably necessary for our functions or activities, or where collection is otherwise authorised or required by law.
3. How information is collected
Information may be collected directly from you, from a parent, guardian or authorised representative, or from a referring or treating practitioner. With consent, or where permitted by law, information may also be obtained from hospitals, health services, government agencies, insurers, funding bodies or other relevant third parties.
If you provide information about another person, you should have authority to do so and, where practicable, make them aware of this policy.
4. Why we collect and use information
We may use personal and health information to:
- respond to enquiries and determine whether a requested service is appropriate;
- arrange and provide psychological or neuropsychological services;
- prepare reports, provide feedback and communicate with authorised referrers or treating professionals;
- process accounts, Medicare claims and authorised insurer or funding arrangements;
- manage the Practice, maintain clinical records and improve service administration; and
- meet legal, professional, regulatory and insurance obligations.
We do not sell personal or health information.
5. Disclosure of information
Information may be disclosed with consent, for the purpose for which it was collected, or where authorised or required by law. This may include disclosure to treating practitioners, referrers, authorised representatives, Medicare, SIRA, insurers or other funding bodies, and professional or technology service providers who support the Practice.
Information may also be disclosed where reasonably necessary to lessen or prevent a serious threat to life, health or safety, to comply with a court or legal process, or to meet mandatory reporting or notification obligations.
6. Website, email and external services
Our website and hosting providers may collect standard technical information such as IP address, browser type, device information and pages visited for security, operation and performance purposes. The embedded Google Map may also communicate technical information to Google in accordance with the Google Privacy Policy.
We use Google Ads conversion measurement to understand whether advertising results in a general telephone or email enquiry. The website may send Google a conversion event when a visitor selects one of these contact links. We do not send the contents of an enquiry, clinical information, diagnoses or form-field information to Google, and advertising-personalisation signals are disabled.
Email is convenient but may not always be secure and is not monitored continuously. Please do not use email for emergencies or include highly sensitive clinical information unless requested. Contacting the Practice through the website or by email does not establish a psychologist-client relationship.
7. Overseas processing
Some technology providers used for website hosting, email, communications or administration may process or store information outside Australia, including in the United States and other locations used by their global operations. Where required, we take reasonable steps to ensure overseas handling is consistent with applicable Australian privacy requirements.
8. Security and retention
We take reasonable administrative, technical and physical steps to protect information from misuse, interference, loss and unauthorised access, modification or disclosure. No internet or email transmission can be guaranteed to be completely secure.
Clinical and administrative records are retained for the periods required by applicable law and professional obligations. Information that is no longer required is securely destroyed or de-identified where lawful and appropriate.
9. Access and correction
You may request access to personal or health information held about you, or ask for it to be corrected if it is inaccurate, incomplete or out of date. Some lawful exceptions may apply. If access is refused or limited, we will explain the reason where required.
Requests should be made using the contact details below. We may ask you to verify your identity before responding.
10. Privacy questions and complaints
Please contact us first if you have a privacy question or concern. We will review the matter and respond within a reasonable period.
If a privacy complaint is not resolved, you may contact the Office of the Australian Information Commissioner or the Information and Privacy Commission NSW. Concerns about a health service may also be directed to the NSW Health Care Complaints Commission.
11. Changes to this policy
We may update this policy to reflect changes to our services, systems or legal obligations. The current version and its effective date will be published on this page.