Privacy Policy

Website Policy

Last updated: February 2026

Prosper Health Collective respects your privacy and is committed to protecting your personal information when you interact with our website.

This Website Privacy Policy explains how we collect, use and manage personal information through our website and digital services. It should be read together with our Clinical Privacy Policy, which explains how we manage health and client records.

This policy is aligned with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.


  1. Scope

This policy applies to:

• Visitors to our website
• Individuals who submit enquiries via our website
• Individuals who subscribe to newsletters or event updates
• Individuals who register for webinars or non-clinical events

It does not replace our Clinical Privacy Policy, which governs health information collected as part of providing clinical services.


  1. Personal Information We May Collect

When you use our website, we may collect:

Information you provide directly
• Name
• Email address
• Phone number
• Enquiry details
• Event or webinar registration details

Automatically collected information
• IP address
• Browser type
• Device information
• Pages visited
• Time and date of visits
• Referring website

This information may be collected using cookies, analytics tools and similar technologies.

We generally do not collect health information through our website unless you voluntarily provide it via an enquiry form.


  1. How We Use Website Information

We may use personal information collected through our website to:

• Respond to enquiries
• Provide information about our services
• Send newsletters or event updates (with consent)
• Improve our website and user experience
• Analyse website usage and performance
• Maintain website security

We do not sell, rent or trade personal information.


  1. Cookies and Analytics

Our website uses cookies and similar technologies to improve user experience and analyse traffic.

Cookies are small text files stored on your device that help us understand how visitors use our website.

We may use third-party analytics services (such as Google Analytics) to collect and analyse website usage data. These services may transmit data to and store data on servers located outside Australia.

Analytics tools help us understand website traffic patterns and improve our content and services. Information collected through analytics is generally aggregated and does not identify individuals directly.

You can control cookie settings through your browser. Disabling cookies may affect website functionality.


  1. Marketing Communications

If you subscribe to receive updates, newsletters or event information, we may send you communications by email.

We comply with the Spam Act 2003 (Cth). You may unsubscribe at any time by using the link provided in the email or by contacting us directly.

Even if you opt out of marketing communications, we may still contact you in relation to specific enquiries or services you have requested.


  1. Disclosure of Website Information

We may disclose personal information to:

• Website hosting providers
• IT and technical service providers
• Analytics providers
• Email marketing platforms
• Professional advisers

These service providers may store or process data using infrastructure located outside Australia. We take reasonable steps to ensure that appropriate safeguards are in place to protect personal information.

We may also disclose information where required or authorised by law.


  1. Overseas Disclosure

Some of our website service providers (including analytics, cloud hosting and email platforms) may process or store data outside Australia.

Where this occurs, we take reasonable steps to ensure those providers implement appropriate security measures and comply with applicable privacy obligations.


  1. Data Security

We take reasonable technical and organisational measures to protect personal information collected through our website from misuse, loss, unauthorised access, modification or disclosure.

However, no internet transmission is completely secure. Information transmitted to us online is at your own risk.


  1. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies.


  1. Access and Correction

You may request access to or correction of personal information we hold about you that was collected via our website.

Requests should be made in writing using the contact details below. We will respond within a reasonable period.


  1. Complaints

If you have concerns about how your personal information has been handled, you may contact our Privacy Officer.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au.

12. Privacy Officer

Privacy Officer
Prosper Health Collective
150 Riseley St Booragoon WA 6154
info@prosperhealthcollective.com.au
08 6381 0071


13. Policy Updates

This Privacy Policy may be updated from time to time. The current version is available on our website and upon request.

Practice Policy

Last updated: February 2026

  1. Introduction

Prosper Health Collective is a health service provider offering psychological and allied health services. We are committed to protecting the privacy and confidentiality of personal and health information entrusted to us.

This Privacy Policy explains how we collect, hold, use and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Health information is classified as sensitive information under the Act and receives additional protection.

This policy applies to clients, parents and guardians, and referrers engaging with Prosper Health Collective.


  1. What Information We Collect

We collect personal information that is reasonably necessary to provide safe and effective health services.

Personal information may include:
• Name, date of birth and contact details
• Address and emergency contact information
• Medicare and private health fund details
• Billing and payment information

Health information may include:
• Medical, developmental and psychological history
• Assessment results
• Clinical notes and treatment plans
• Reports and professional correspondence
• Risk assessments
• Information provided by referrers or other health professionals

Where services are provided to children or adolescents, we may also collect relevant information about parents or legal guardians.


  1. How We Collect Information

We generally collect personal information directly from clients or their authorised representatives through:
• Online or paper intake forms
• Consultations (in person or via telehealth)
• Email and telephone communications

We may also collect information from third parties where appropriate, including:
• General Practitioners
• Specialists or other allied health providers
• Schools
• Legal representatives
• Funding bodies

Where information is collected from a third party, it is managed in accordance with the Australian Privacy Principles.


  1. Why We Collect and Hold Information

We collect and hold personal and health information primarily to provide health services, including:
• Assessment
• Diagnosis
• Intervention and treatment
• Monitoring and review
• Care coordination

We may also use information for secondary purposes permitted under the Privacy Act, including:
• Administrative management of our practice
• Professional supervision (de-identified wherever possible)
• Quality improvement activities
• Compliance with legal and professional obligations
• Medicare and funding claims

We do not sell, rent or trade personal information.


  1. Consequences of Not Providing Information

If relevant personal or health information is not provided, we may be unable to deliver safe and appropriate services.

While individuals may request anonymity or use a pseudonym, this is generally not practicable in the context of providing clinical health services.


  1. Disclosure of Personal Information

We may disclose personal information:

With consent, for example:
• To a referring GP, psychiatrist or other health provider
• To a school or educational provider
• To a legal representative
• For preparation of written reports

Without consent, where permitted or required by law, including:
• If subpoenaed by a court
• Where disclosure is required under mandatory reporting laws
• Where necessary to prevent or lessen a serious threat to life, health or safety
• For Medicare or funding claims

Internal disclosure may occur between authorised team members where necessary for care delivery or practice administration.

For child clients, information may be disclosed to parents or legal guardians in accordance with legal responsibilities and the child’s best interests.


  1. Overseas Disclosure and Cloud-Based Systems

Prosper Health Collective uses secure, cloud-based practice management software (Halaxy) and related technology systems to store and manage client information.

These systems may involve storage or processing of data on servers located outside Australia. We take reasonable steps to ensure that service providers implement appropriate safeguards to protect personal information and comply with applicable privacy obligations.


  1. Telehealth and Digital Services

We may provide services via secure telehealth platforms, including Halaxy and Google Meet (business version). These platforms use encrypted communications and industry-standard security measures.

As with many cloud-based services, information may be processed or stored using infrastructure located outside Australia. We take reasonable steps to ensure appropriate protections are in place.


  1. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

These measures include:
• Secure electronic practice management systems
• Role-based access controls
• Password protection and secure authentication
• Encryption where appropriate
• Physical security for any paper records
• Staff confidentiality obligations

Access to information is limited to authorised personnel who require it to perform their role.


  1. Data Breaches

We maintain a Data Breach Response Plan.

If an eligible data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme under the Privacy Act.


  1. Retention of Records

Client records are retained in accordance with professional and legal requirements.

As a general guide:
• Records for adult clients are retained for at least seven years from the date of last contact.
• Records for clients under 18 are retained until at least the age of 25.

Records may be retained for longer where clinically or legally appropriate.

When records are no longer required, they are securely destroyed or de-identified.


  1. Access to Personal Information

Clients may request access to their personal information in writing.

We will respond within 30 days. In certain circumstances permitted by law, access may be refused. If access is refused, written reasons will be provided.

A reasonable administrative fee may apply for providing copies of records.


  1. Correction of Personal Information

If personal information we hold is inaccurate, incomplete or out of date, clients may request correction in writing.

We will take reasonable steps to correct the information and respond within a reasonable timeframe.

If we refuse to correct information, written reasons will be provided.


  1. Complaints

If you have concerns about how your personal information has been handled, you may contact our Privacy Officer using the details below.

We will acknowledge your complaint and respond within a reasonable period.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au or by phone on 1300 363 992.


  1. Privacy Officer

Privacy Officer
Prosper Health Collective
150 Riseley St Booragoon WA 6154
info@prosperhealthcollective.com.au
08 6381 0071


  1. Policy Updates

This Privacy Policy may be updated from time to time. The current version is available on our website and upon request.