Your privacy matters
This policy explains how Velvet Psychology collects, holds, uses and discloses your personal information, in line with the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Health Records and Information Privacy Act 2002 (NSW).
What information I collect
To provide psychological care, I collect personal and health information, including your name, date of birth, address, phone number and email; your Medicare details, and private health fund details if you choose to claim; referral letters and Mental Health Treatment Plans from your GP or other referrer; information about your health, history and circumstances that you share in sessions; session notes, assessment results and correspondence; and payment details, processed securely by my practice software.
How I collect it
Mostly directly from you, through the enquiry form, intake forms, phone, email and sessions. I may also receive information from your referrer (for example, your GP), or from others with your consent.
Why I collect it
To assess your needs and provide therapy; to communicate with you about appointments; to process fees and Medicare or private health claims; to communicate with your referring practitioner; and to meet my legal and professional obligations.
Who I share it with
Your information is confidential. I only disclose it to your referring GP or other practitioner as required for Medicare-funded care (usually a brief progress report); to Medicare (Services Australia) or your health fund to process claims; to others when you have given consent; when required or authorised by law, for example a subpoena, court order or mandatory reporting; when I believe it is necessary to lessen or prevent a serious threat to someone's life, health or safety, including a child's; and in de-identified form for professional supervision.
How I store and protect it
Records are stored electronically in a secure clinical records system. Sessions are held on an encrypted video platform and are not recorded. Access to records is password-protected and limited to me. Records are kept for the period required by NSW law: at least 7 years after the last session for adults, and until a client who was a child turns 25. Records are then securely destroyed.
Overseas disclosure
I do not intentionally disclose personal information to recipients overseas. Some of my software providers may store data on servers outside Australia; where this happens, I take reasonable steps to ensure the information is protected in line with Australian privacy law.
This website and the enquiry form
The enquiry form collects your name, email, phone (optional), message and how you heard about me. I use this only to respond to your enquiry. Please don't include detailed health information in the form. This website may use basic analytics to understand how visitors use the site; this does not identify you personally.
Accessing or correcting your information
You can ask to see or correct the information I hold about you by contacting me. I will respond within 30 days. In limited circumstances allowed by law, access may be refused; if so, I will explain why.
Data breaches
If a data breach is likely to cause you serious harm, I will notify you and the Office of the Australian Information Commissioner, as required by the Notifiable Data Breaches scheme.
Questions or complaints
If you have a concern about your privacy, please contact me first: Vanessa Shevelev, vanessa@velvetpsychology.com.au, 0417 236 206. I will respond within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992) or the Information and Privacy Commission NSW (ipc.nsw.gov.au, 1800 472 679).