Privacy Policy - MHM Psychology.

Last updated: May 2026

1. Introduction MHM Psychology is committed to protecting your privacy and handling all personal and health information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Health information is classified as sensitive information and receives additional protections.

This Privacy Policy explains how we collect, hold, use, and disclose personal and health information obtained through this website, enquiry forms, appointments, and in the operation of our psychology practice.

For privacy enquiries, please contact: admin@mhmpsychology.com.au

2. What personal and health information we collect We may collect:

• Name, contact details (email, phone), date of birth
• Information submitted through website enquiry forms
• Psychological and medical history, session notes, assessment results, and other health information provided during consultations
• Billing and payment information
• Referrer details (e.g. from GPs or other health professionals)

This website is not intended for the collection of detailed clinical information. Sensitive health information is collected during intake and sessions.

3. How we collect personal and health information We collect information when you:

• Submit an enquiry through our website (Jotform)
• Contact us via phone or email
• Attend appointments or complete intake forms (via Zanda)
• Interact with our website

By contacting us or submitting an enquiry, you consent to the collection and handling of your information in accordance with this Privacy Policy.

4. Why we collect, use and disclose it We collect and use information to:

• Respond to enquiries and arrange appointments
• Provide psychological assessment, therapy, and related services (including for anxiety, depression, trauma, and other concerns)
• Communicate with you and your referrers (with consent)
• Manage billing and practice administration
• Maintain accurate clinical records
• Improve our services and meet legal obligations

5. How we store and protect personal and health information We take reasonable steps to protect your personal and health information from misuse, loss, unauthorised access, modification or disclosure.

Your information is stored securely using a combination of our practice management systems, cloud storage, and other secure digital tools. This includes:

• Practice management and appointment scheduling software
• Secure cloud storage and encrypted backup services
• Online enquiry and form systems
• Note-taking and clinical record tools
• Device backup and data storage services
• Website hosting providers

Some of these third-party service providers may store or process information on secure servers located outside Australia (for example, in Canada or the United States). We take reasonable steps, including through contracts where appropriate, to ensure that any overseas providers handle your information in a way that is consistent with the Australian Privacy Principles.

Access to your information is restricted to the psychologist and authorised administrative staff only.

6. Overseas storage and disclosure Some providers (e.g. Sync.com, Jotform, iCloud) may store data outside Australia. We take reasonable steps, including contracts, to ensure they meet standards consistent with the APPs.

7. Disclosure of personal and health information We may disclose information to:

• Your referring doctor or other treating professionals (with your consent)
• Administrative support staff and service providers
• Courts or authorities where required or authorised by law
• In emergencies where there is a serious threat to life, health, or safety

We do not sell or rent your information.

8. Access and correction You may request access to or correction of your information by contacting us. We will respond within a reasonable time (usually 30 days). Fees may apply for access in some cases.

9. Privacy complaints Contact us in writing first. If unsatisfied, you may complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au

10. Retention of records We retain records in accordance with legal and professional requirements (generally 7 years after last contact for adults; longer for children).

11. Website analytics and cookies This website uses analytics tools (such as Google Analytics and Google Search Console) to collect non-identifiable website usage data.

You can disable cookies through your browser settings.

12. Updates to this policy We may update this policy. The current version is always available on our website.