Privacy Policy
Your privacy matters
Therapy involves personal and sometimes very sensitive information. The Embodiment Practice aims to collect only what is reasonably needed, explain how it is used and protect it from misuse, loss and unauthorised access.
What information may be collected
your name, contact details, date of birth and emergency contact
health, mental health, medication and relevant personal history
referrals, funding approvals and Medicare details where applicable
clinical notes, assessments, goals, safety plans and correspondence
billing, appointment and payment information
feedback, complaints and website enquiries.
Why information is used
Information may be used to assess and provide care, keep clinical records, manage appointments and payments, communicate with you, meet funding and reporting requirements, coordinate care with consent, maintain safety, improve the service and meet legal, ethical and insurance obligations.
Who may receive information
Information is not shared simply because another person asks for it. It may be disclosed with your consent to a GP, therapist, support person, funder or other service. Limited information may also be shared with contractors that provide secure practice systems, clinical supervision, professional advisers or where disclosure is required or authorised by law.
Where possible and lawful, only the minimum information needed will be shared, and Ali will discuss it with you first.
Who may receive information
Confidentiality may need to be limited when there is a serious threat to life, health or safety; a child or young person may be at risk of significant harm; a court, regulator or law requires information; or another legal exception applies. These situations are considered carefully, not automatically.
Heidi AI-assisted notes
With your explicit consent, Ali may use Heidi to help create a draft clinical note from the session. Ali reviews and edits the draft and remains responsible for the final record and all clinical decisions.
You can decline or withdraw consent without losing access to therapy. Manual note-taking will be used instead. Heidi states that it aligns with the Australian Privacy Principles, offers Australian data localisation and does not store session recordings. Ask Ali to explain the current setup, what is processed and how consent is recorded before deciding.
Security and service providers
The practice uses administrative and technical safeguards such as access controls, passwords, secure practice systems and appropriate device security. No system can be guaranteed to be completely risk-free. Some providers may process information on the practice’s behalf, and the full policy should explain likely storage locations and overseas disclosures.