Privacy Policy

InsightWorks Psychology ("we," "us," or "our") is committed to protecting the privacy and confidentiality of our clients' personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or communicate with us.

1. Information We Collect

We may collect the following types of information:

• Personal Information: When you register for an account or use our contact forms, we collect information such as your name, email address, and phone number.
• Sensitive Information: As a psychology practice, we collect sensitive health information relevant to providing you with psychological services. This includes information you voluntarily provide in the Gratitude Diary feature, session notes, and your medical or mental health history. This information is subject to the strictest confidentiality requirements.
• Technical Data: When you visit our website, we automatically collect technical information, such as your IP address and browser type, through services like Firebase Analytics.

2. How We Use Your Information

Your information is used for the following purposes:

• To provide, manage, and administer our psychological services, including the Gratitude Diary feature.
• To create and manage your user account for our client portal.
• To communicate with you about appointments, services, and inquiries.
• To comply with our legal and ethical obligations as healthcare providers.
• To process payments and rebates (e.g., Medicare).
• To improve our website and services through analysis of anonymized data.

3. Confidentiality and Disclosure

Your privacy is paramount. All information you share with our psychologists, including your Gratitude Diary entries, is confidential. We will not disclose your personal or sensitive information without your explicit consent, except in the following limited circumstances:

• Risk of Harm: If we believe there is a serious and imminent risk of harm to yourself or others.
• Legal Requirements: If we are required by law, such as by a court subpoena.
• Supervision: Psychologists may discuss cases with supervisors for professional development, in which case your identity is protected.

4. Data Security and Storage

We take robust steps to protect your information from misuse, loss, or unauthorized access. We use secure technologies provided by Google Cloud and Firebase, including authentication, database security rules, and encryption. To comply with Australian privacy laws, our cloud infrastructure is provisioned in the `australia-southeast1` (Sydney) data center, ensuring sensitive client data is stored on servers within Australia.

5. Data Retention

We retain client records as required by law and professional ethical standards, generally for a minimum of 7 years after the last client contact (or until a minor client turns 25). After this period, your information is securely destroyed.

6. Your Rights

You have the right to request access to the personal information we hold about you, request corrections to inaccurate data, and inquire about how your information is handled. To exercise these rights, please contact us directly.

7. Third-Party Services

We use third-party services to operate our website and business. These include:

• Google Cloud & Firebase: For website hosting, secure user authentication, database management, and AI model hosting. All data is processed and stored in accordance with our data residency policy.
• Resend: For sending email notifications from our contact form.

These services have their own privacy policies, which we encourage you to review.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

9. Contact Us

If you have any questions or concerns, please contact us at:

InsightWorks Psychology
Email: hello@insightworks.com.au
Phone: (07) 5551 0388
Address: 123 Wellness Ave, Suite 200, Peaceful City, PC 12345