Privacy Policy | Sarah Buckle Psychotherapy

01.Who this policy covers

This policy applies to Sarah Buckle Psychotherapy (ABN 52 517 184 411) (“I”, “me”, “my”), a private psychotherapy practice based in Brisbane, Australia, offering services online worldwide and in person in Brisbane on request.

I comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

02.What I collect

Depending on how you engage with the practice, I may collect:

Contact details – your name, email address, phone number and time zone.
Consultation information – what you share in your private consultation, and in the Client Assessment Form (a brief checklist) you complete before it.
Health information – information about your symptoms, history and goals.
Consult call transcripts – with your permission, I use a transcription service during our consult call so I don’t have to take notes. The service records the call to create the transcript. If you’d prefer I don’t, just let me know at the start of our call and I’ll take notes by hand.
Session records – notes and records of your sessions and your Bespoke Therapy Program.
Emails between sessions – anything you choose to share by email.
Payment information – processed securely by my payment provider. I do not store your full card details.
Website analytics – general information about how visitors use this website.

Health information is “sensitive information” under the Privacy Act. I only collect it with your consent, and only where it is needed to provide your treatment.

03.How I collect it

I collect information directly from you – through your consultation, forms, phone and video calls, sessions and email.

04.Why I collect it

I use your information to assess whether I can help, to design and deliver your Bespoke Therapy Program, to communicate with you about your sessions, to keep accurate records, to respond to your questions, and to meet my legal and professional obligations.

Appointment reminders may be sent by email and text message.

05.Confidentiality and its limits

What you share with me is confidential. There are limited exceptions – such as where disclosure is required by law, or where I hold a serious concern for your safety or the safety of someone else.

06.Who I share it with

I only share personal information with the service providers I rely on to run the practice, and only to the extent needed to do so:

HighLevel (LeadConnector): Client management, consult booking, consult call transcription, the Client Assessment Form, program agreements, invoicing, and appointment emails and text messages.
Stripe: Secure payment processing.
Microsoft 365: Email hosting.
Google Workspace: Secure document storage.
Google Meet: Online consultations and sessions.
Google Analytics, Google Tag Manager and Google Ads: Website analytics.
Claude (Anthropic) and ChatGPT (OpenAI): Help drafting your written Bespoke Therapy Program and practice documents. I share only your first name and my notes and the transcript of our consult call, with your surname and contact details removed – never your surname, contact details or anything else that identifies you.
Professional advisers: Such as legal or insurance advisers, where needed to meet my obligations.

Some of these providers store information on servers outside Australia, including in the United States. I take reasonable steps to choose providers with strong security and privacy practices.

07.How I keep it safe

Your information is stored in password-protected, encrypted systems accessible only to me.

Records are kept securely for at least seven years after your last session, then securely destroyed or de-identified.

08.Access and correction

You can ask to see the personal information I hold about you, or ask me to correct it, at any time. Email privacy@sarahbuckle.com.au and I’ll respond within a reasonable time, usually within 30 days.

09.Cookies and analytics

Like most websites, this one uses cookies and a few Google tools (Analytics, Tag Manager and Ads) to see how people find and use the site, so I can keep making it better. They never see what you type into a form, and they don’t identify you personally. You can turn cookies off in your browser settings any time.