Legal

Privacy Policy

Effective date: 1 January 2026

Your privacy matters to us

Stepping Stones Therapy is committed to protecting your personal and health information. This policy outlines your rights and how we handle your data in accordance with Australian privacy law.

1. Introduction

Stepping Stones Therapy ("we", "us", "our") is committed to protecting your privacy and handling your personal information in an open and transparent way. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By accessing our website or engaging our services, you agree to the terms of this Privacy Policy.

2. What Information We Collect

We may collect the following types of personal information:

•Contact information — your name, email address, phone number, and postal address.

•Health information — details you share about your mental health, medical history, or presenting concerns, which are considered sensitive information under the Privacy Act.

•Session information — notes and records relating to your counselling sessions.

•Website usage data — information about how you use our website, including IP address, browser type, and pages visited (collected via cookies and analytics tools).

•Payment information — billing details processed securely through our payment provider. We do not store full card details.

3. How We Collect Your Information

We collect personal information in the following ways:

•Directly from you when you complete a contact form, book an appointment, or communicate with us by phone or email.

•During counselling sessions, including intake forms and session notes.

•Automatically through our website via cookies and analytics tools.

•From third parties where you have consented, such as referrals from GPs or other health professionals.

4. How We Use Your Information

We use your personal information to:

•Provide counselling and therapeutic services to you.

•Communicate with you about appointments, services, and enquiries.

•Maintain accurate clinical records as required by professional and legal obligations.

•Process payments for services rendered.

•Improve our website and services.

•Comply with legal, regulatory, and professional obligations, including mandatory reporting requirements.

We will not use your information for any purpose other than those described above without your consent, unless required by law.

5. Disclosure of Your Information

We treat your personal information with strict confidentiality. We will not disclose your information to third parties except in the following circumstances:

•With your consent — for example, when coordinating care with your GP or another health professional.

•Legal obligations — where we are required by law to disclose information, such as mandatory reporting of child abuse or risk of serious harm to yourself or others.

•Service providers — trusted third-party providers who assist us in operating our website and practice (e.g. booking software, email providers), who are bound by confidentiality obligations.

•Professional supervision — clinical supervision is a professional requirement. Information shared in supervision is de-identified wherever possible.

We do not sell, rent, or trade your personal information to any third party.

6. Storage and Security

Your personal information is stored securely using industry-standard measures. Clinical records are stored in accordance with the requirements of the Privacy Act 1988 (Cth) and relevant professional guidelines.

We take reasonable steps to protect your information from misuse, interference, loss, unauthorised access, modification, or disclosure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Clinical records are retained for a minimum of 7 years from the date of last service (or until a minor client turns 25), in accordance with professional and legal requirements.

7. Cookies and Website Analytics

Our website may use cookies — small text files stored on your device — to improve your browsing experience and analyse website traffic. You can disable cookies through your browser settings, though this may affect the functionality of our website.

We may use analytics tools (such as Google Analytics) to understand how visitors use our site. This data is aggregated and does not personally identify you.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

•Access your personal information held by us.

•Correct any inaccurate or out-of-date information.

•Request deletion of your information, subject to our legal and professional obligations to retain records.

•Withdraw consent to the use of your information for specific purposes.

•Make a complaint if you believe we have breached your privacy.

To exercise any of these rights, please contact us using the details below.

9. Complaints

If you have a concern about how we have handled your personal information, please contact us in the first instance. We will respond to your complaint within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

•Website: www.oaic.gov.au

•Phone: 1300 363 992

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on our website with the revised effective date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

Stepping Stones Therapy

Victoria Hyne-Jones — PACFA Registered Clinical Counsellor

The Lotus Centre, 13 Dale Street, Brookvale NSW 2100

Phone: 0435 403 885

Email: info@steppingstonestherapy.au

Have a question about your privacy?

We're happy to explain how we handle your information. Get in touch anytime.