Tic Tac Toe Early Childhood Psychology

Policies

Privacy policy

Tic Tac Toe Early Childhood Psychology respects the privacy of children, families and people who contact our practice. This policy explains how we collect, hold, use and disclose personal and health information in accordance with the Privacy Act 1988, the Australian Privacy Principles, the Victorian Health Records Act 2001 and applicable professional obligations.

Information we collect

We collect information reasonably necessary to respond to enquiries, provide psychological services and manage our practice. This may include:

  • Names, dates of birth, contact details and parent or guardian information.
  • Relevant parenting arrangements, consent authority and court orders.
  • Medical, developmental, educational and family history.
  • Referrals, assessment information, clinical notes, reports and correspondence.
  • Medicare, NDIS, private health and other funding information.
  • Appointment, payment and account records.

How we collect information

We generally collect information directly from you through appointment requests, intake and consent forms, appointments, telephone calls, emails and other communications.

Where appropriate and permitted, we may also collect relevant information from referring practitioners, schools, kindergartens, other health professionals, support providers or authorised representatives.

We obtain consent to collect health information unless collection without consent is permitted or required by law.

You may make a general enquiry anonymously or using a pseudonym where practicable. Identifying information is usually required to provide clinical services, process rebates and maintain accurate records.

If necessary information is not provided, we may be unable to offer a service or process a claim.

How we use information

We use information to:

  • Respond to enquiries and arrange appointments.
  • Assess needs, provide psychological services and coordinate agreed care.
  • Prepare clinical records, reports and recommendations.
  • Communicate with you and relevant providers.
  • Process payments, rebates and funding claims.
  • Manage accounts, feedback and complaints.
  • Meet legal, professional and record-keeping obligations.

When information may be shared

We may disclose relevant information:

  • With appropriate consent.
  • For the purpose for which it was collected, or a directly related purpose you would reasonably expect, where permitted by law.
  • To authorised providers supporting our appointment, payment, record storage and practice administration systems.
  • To Medicare, plan managers, funding bodies or other authorised payers where necessary to process an agreed claim.
  • Where required or authorised by law, including court orders and mandatory reporting obligations.
  • Where legally permitted to respond to a serious threat to life, health or safety.

Children, parents and guardians

We consider the child or young person’s age, understanding, decision-making capacity and privacy interests when managing consent and information sharing.

Being a parent or guardian does not automatically entitle a person to unrestricted access to every part of a child’s records. Requests are assessed in accordance with applicable law, consent authority, relevant court orders and the rights and safety of the child and others.

Please notify us of changes to parenting arrangements or legal authority that may affect communication or access.

Storage, security and retention

Records may be held electronically and, where necessary, in paper form. We take reasonable steps to protect information from loss, misuse and unauthorised access, alteration or disclosure.

Safeguards include controlled access to electronic systems, appropriate security measures and secure storage of paper records.

Health records are retained for the periods required by Victorian law and applicable professional obligations. Generally, records are kept for at least seven years after the last service, and records relating to services provided before a person turns 18 are retained at least until they turn 25. Records may be retained longer where required.

When information is no longer required and may lawfully be disposed of, we take reasonable steps to destroy or permanently de-identify it.

Electronic services and overseas handling

We use electronic services to support appointments, communications, telehealth, payments and record management.

Where information is transferred outside Victoria or disclosed overseas, we take reasonable steps to meet applicable privacy requirements and assess the safeguards provided by the recipient.

Electronic communications carry privacy and security risks. Please avoid including unnecessary sensitive information in general website enquiries and contact us if you need an appropriate way to provide documents.

Website and communications

Information submitted through our website forms is used to respond to your request and manage the relevant enquiry or service arrangements.

Our website and hosting services may collect technical information, such as IP addresses, browser details and access logs, to operate and secure the website.

Appointment reminders and service-related messages are separate from promotional communications.

We seek appropriate consent before sending optional marketing, education or event updates. You may unsubscribe from these communications without affecting your access to clinical services.

Access and corrections

You may contact us to request access to personal or health information or to ask that inaccurate, incomplete or outdated information be corrected.

We may need to verify your identity and authority. Requests will be handled within applicable timeframes.

Access may be limited or refused where permitted by law. Where required, we will explain the decision in writing and provide information about complaint options.

Any lawful access or copying charge will be explained beforehand. We do not charge you simply to make a request for access or correction.

Consent and privacy preferences

You may contact us to update communication preferences, restrict information sharing or withdraw consent for future activities.

We will explain any effect this may have on services. Withdrawing consent does not remove legal record-retention obligations or prevent disclosures otherwise required or authorised by law.

Privacy concerns and complaints

Please contact the Practice Manager using the details on our Contact Us page if you have a privacy question or complaint.

We will acknowledge your concern, investigate and respond within a reasonable timeframe. Raising a complaint will not, by itself, affect your access to care.

If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner or the Victorian Health Complaints Commissioner, depending on the matter.

If a data breach occurs, we will assess it and take appropriate action, including notifying affected people and regulators where required.

Changes to this policy

We may update this policy as our services, systems or privacy obligations change. The current version will be available on our website, and significant changes affecting existing clients will be communicated where appropriate.