Privacy Policy
Last Updated: September 2026
Who We Are
Believe In U Psychology ("Believe In U", "we", "our", "us") is committed to protecting your privacy and handling your personal, health and clinical information with the highest degree of confidentiality. We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and other applicable Australian and Queensland privacy and health-records laws. We also seek to comply with the applicable professional and ethical obligations of the Australian Psychological Society (APS) and the Psychology Board of Australia.
This Privacy Policy explains how we collect, use, store, disclose, and protect your information across our website, online enquiries, intake processes, and clinical operations
1. INFORMATION WE COLLECT
To provide high-quality psychological assessment, treatment, and administrative services, we collect both personal and health information. This includes:
Administrative & Contact Data: Your name, date of birth, email address, phone number, physical address, and emergency contact/next of kin details.
Financial & Funding Data: Medicare details, private health insurance information, or third-party funder details (e.g., WorkCover, Compulsory Third Party (CTP) insurance, Department of Veterans' Affairs (DVA), or Victims Assist Queensland).
Clinical & Health Data: Referral letters (e.g., Mental Health Treatment Plans), medical history, clinical notes, psychological assessments, psychometric test results, family history, and any sensitive information you share during consultations.
Digital & Website Data: IP address, browser type, device information, and website usage data collected through cookies or analytics tools when you visit our website (https://www.believeinu.com.au). Providing online information is voluntary, but withholding it may prevent us from responding to your enquiry
2. HOW WE COLLECT INFORMATION
We collect information directly from you via our website contact forms, online booking tools, paper or digital intake forms, and during your psychological consultations. Where appropriate, with your consent or where permitted or required by law, we may also collect information from third parties, such as your referring General Practitioner (GP), psychiatrist, medical specialists, insurers, legal representatives, or family members.
3. USE AND DISCLOSURE OF YOUR INFORMATION
We use and disclose your personal and health information strictly for the purposes of managing your care, administrative operations, and fulfilling legal mandates. We never sell your personal information to third parties.
Your information may be shared with:
Your Care & Referral Network: Your referring doctor, GP or other treating professionals where this is authorised or permitted by law, including where information sharing is required as part of a relevant Medicare or other healthcare arrangement.
Third-Party Funders & Insurers: Medicare, your private health fund, or statutory schemes (WorkCover, CTP, DVA, or Victims Assist Queensland) to process rebates, billing, and required operational reporting.
Administrative & IT Service Providers: Our cloud-based practice management system, Zanda, payment gateways, and IT support services. These providers are strictly bound by confidentiality agreements.
Professional Supervisors: Our psychologists may discuss clinical cases with professional supervisors for quality and ethical compliance. In these instances, your identity is fully de-identified or masked wherever practical.
Legal Obligations: Where disclosure is mandated by law, such as under a court subpoena, child protection legislation, or when there is an immediate and serious risk of harm to yourself or someone else
4. DATA STORAGE AND DIGITAL SECURITY
We take reasonable steps to protect the personal and health information we hold against misuse, interference, loss, unauthorised access, modification or disclosure.
Our clinical records are securely stored in our practice management system, Zanda. For Australian accounts, Zanda states that customer data is hosted in AWS data centres in Australia and is encrypted at rest and in transit. Zanda also uses backups and security controls designed to protect the availability and integrity of stored information.
Some technical support, integrations or other services associated with Zanda or our other technology providers may involve access to or processing of information outside Australia. Where this occurs, we take reasonable steps to ensure that applicable privacy requirements are addressed.
For general website traffic, we use reasonable security measures. However, no method of transmitting information over the internet is completely secure. We ask that you avoid sending detailed clinical information or medical documents through general website contact forms unless specifically requested by us.
5. DATA RETENTION
We retain clinical and other personal information for as long as reasonably necessary to fulfil the purposes for which it was collected and to comply with applicable legal, professional, insurance and record-keeping requirements. Different retention periods may apply to different types of records, including records relating to children and young people.
6. OVERSEAS DATA DISCLOSURES
We prioritise the use of Australian-based data storage for clinical information where practicable.
Our Zanda account is hosted in the Australian region. Zanda states that Australian customer data is hosted in AWS data centres in Australia. However, some technical support, integrations and other services may involve access to or processing of information outside Australia.
Our website and other business systems may also use third-party service providers that process information in Australia or overseas. Depending on the services we use, these providers may be located in countries including the United States, the United Kingdom, countries within the European Union, or other jurisdictions.
Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure that the recipient handles the information consistently with applicable Australian privacy requirements.
7. ELECTRONIC COMMUNICATION
We may communicate with you by telephone, SMS, email, telehealth platforms and other electronic means. While we take reasonable steps to protect information communicated electronically, no electronic communication method is completely secure. You should avoid including detailed clinical information in ordinary email or SMS unless you have been advised that the communication method is appropriate
8. NOTIFIABLE DATA BREACHES
If we become aware of an eligible data breach that is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches scheme, including notifying affected individuals and the OAIC as soon as practicable where required.
9. YOUR RIGHTS: ACCESS AND CORRECTION
You have a right to request access to, or correction of, the personal and health information we hold about you. All requests must be submitted in writing to admin@believeinu.com.au.
We will generally respond to requests for access or correction within 30 days, where practicable. Please note that under Australian privacy legislation, some limited exemptions apply where we may deny access (for example, if providing access would pose a serious threat to the life, health, or safety of any individual, or unreasonably impact the privacy of others).
10. COOKIES, WEBSITE ANALYTICS AND ONLINE MARKETING
Our website may use cookies and similar technologies to help the website function, remember preferences, understand website traffic and improve your online experience.
Cookies are small files that may be stored on your device when you visit a website. Depending on the services used on our website, cookies and similar technologies may collect information such as your IP address, browser type, device information, pages visited, approximate location and information about how you interact with our website.
We may use essential cookies that are necessary for the website to operate, as well as analytics and performance technologies to understand website traffic and improve our website.
We may use third-party services, including Google Ads, to measure the effectiveness of our advertising and website activity. These services may use cookies or similar tracking technologies.
Because Believe In U provides psychological and mental health services, we recognise that information about a person's interaction with a health-related website may, in some circumstances, reveal or allow inferences to be made about that person's health. We therefore take particular care when using analytics, advertising and tracking technologies.
We do not intentionally provide advertising platforms with the content of your psychological consultations, clinical notes, assessment results or other clinical records. We also do not intentionally use your clinical information to create advertising audiences.
Where non-essential cookies or tracking technologies are used in circumstances where consent is required, we will seek the appropriate consent before using those technologies.
Some third-party providers may process information in Australia or overseas. Further information about overseas disclosures is provided in Section 6 of this Privacy Policy.
You can control or disable cookies through your browser settings. Depending on the technologies we use, you may also be provided with options to manage non-essential cookies or tracking technologies.
We regularly review the tracking technologies used on our website to ensure they remain appropriate and are managed in accordance with applicable privacy requirements.
11. COMPLAINTS AND ESCALATION
If you have any questions, concerns, or wish to file a formal complaint regarding how your personal or clinical information has been handled, please contact our privacy representative directly:
Believe In U Psychology
4/11 Karp Court, Bundall QLD 4217
Phone: (07) 5211 1677
Email: admin@believeinu.com.au
Website: www.believeinu.com.au
We take all privacy concerns seriously and will investigate and respond to your complaint thoroughly. If you remain unsatisfied with our response, you have the right to escalate your complaint directly to the external regulatory authority:
Office of the Australian Information Commissioner (OAIC)
GPO Box 5288, Sydney NSW 2001
Phone: 1300 363 992
Website: www.oaic.gov.au