Privacy Policy

Lume Minds Psychology Pty Ltd, ABN 66 691 862 405 (“us”, “we”, or “our”) recognises the importance of your privacy and respects your right to control how your personal information is collected and used. We are an APP Entity as defined in the Privacy Act 1988 (Cth) (the “Act”). This Privacy Policy is aligned with the Australian Privacy Principles set out in the Act and describes the way that we may collect, hold and disclose personal information.

This Privacy Policy applies to our website, www.lumemindspsychology.com.au (the “Site”), which is operated by us, and to the products and services provided by us.

To provide our services to you, we may collect Personal Information such as your contact details, including your name, email address and contact phone number; your business or company name; and your payment and billing information. We use payment information to bill you for services and process your payments, and this may include credit card details.

We may also collect details of conversations we have had with you or any other information relevant to us.

Through our Site and services, we automatically collect information that is often not personally identifiable, such as the website from which visitors came to our Site, IP address, browser type and other information relating to the device through which they access the Site. We may combine this information with the Personal Information we have collected about clients.

Where you consent and the information is reasonably necessary to provide our services, we may collect Sensitive Information about you, such as medical reports, referrals, medication information, health history and other important health information.

Personal Information collected by us will generally only be used and disclosed for the purpose for which it was collected. This includes maintaining your account and contact details, providing you with our products and services, and processing payments. We may disclose your Personal Information to third parties or contractors who are integral to providing our services.

We may from time to time use Personal Information for another purpose where it would be reasonably expected by you or is permitted by the Privacy Act. This may include effectuating or enforcing a transaction, or procuring advice from legal and accounting firms, auditors and other consultants.

We may also use and share aggregate or non-personally identifying information about clients for market analysis, research, marketing or other purposes.

We will not disclose, sell, share or trade your Personal Information to any third parties unless we first receive your consent, except where disclosure is otherwise permitted or required by law.

We may provide health information to other medical service providers, such as your general practitioner or specialist medical practitioners. We will only supply this information with your consent, or in circumstances where it is required for the delivery of health services. This may include referral to another health service provider, billing and liaising with government offices regarding Medicare entitlements and payments, where it is necessary to prevent or lessen a serious threat to a patient’s life, health or safety, or for another reason permitted by law.

You can access and/or correct information we hold about you at any time by contacting us. We encourage you to contact us to keep your Personal Information up to date. We will respond to your request for Personal Information within a reasonable time.

We reserve the right to charge an administration fee to cover the costs of responding to your request, for example where Personal Information is held in storage. If required by law, or where the information may relate to existing or anticipated legal proceedings, we may deny your request for access. We will respond to your request and set out the reasons for our refusal in writing.

We will take reasonable steps to protect your Personal Information from misuse, loss, unauthorised access, modification or disclosure. We use commercially reasonable physical, technical and administrative measures to protect Personal Information that we hold, including, where appropriate, password protection, encryption and SSL to protect our Site.

Despite taking appropriate measures to protect Personal Information used and collected by us, no data security measure can guarantee 100% security all of the time. We cannot guarantee the security of information transmitted to us via the internet, and such transmission is at your risk.

If we no longer require the use of your Personal Information, we will take reasonable steps to destroy or permanently de-identify it. Personal Information may be stored electronically through third-party data centres, which may be located overseas, or in physical storage at our premises or third-party secure storage facilities.

You are solely responsible for maintaining the secrecy of any passwords and other account information relating to our platform, apps or services.

If we have reason to suspect a data breach has occurred, we will undertake an assessment in accordance with the Notifiable Data Breaches scheme. If we determine there has been an eligible data breach, we will notify you as soon as reasonably practicable.

If a breach relates to the My Health Records Act, we will handle it in accordance with that Act, including any applicable notification requirements. Section 73A of that Act authorises the Information Commissioner to disclose relevant investigation information or documents to the My Health Record System Operator where the statutory conditions are met.

An identifier is a unique number assigned to an individual to identify them. Identifiers include Medicare numbers and Tax File Numbers. We will not adopt as our own any identifier of you, or use or disclose an identifier of you that has been assigned by a government agency, unless permitted under the Act.

Employment applications and resumes collected by us are safely and securely stored and only used for the purposes for which they were collected.

When you interact with our Site, we strive to make your experience easy and meaningful. We, or our third-party service providers, may use cookies, web beacons (including clear GIFs and web bugs) and similar technologies to track site visitor activity and collect site data. We may combine this data with the Personal Information we have collected from clients.

Examples of information that we may collect include technical information such as your computer’s IP address and browser type, and information about your visit such as the products you viewed or searched for, the country you are in, what you clicked on, and what links you visited to get to or from our Site. If we identify you with this information, any use or disclosure of that information will be in accordance with this Privacy Policy.

At times, our Site may contain links to other, third-party websites. Access to and use of those linked websites is not governed by this Privacy Policy, but by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.

We may send you direct marketing emails and information about products and services that we consider may be of interest to you. These communications will only be sent via email, in accordance with applicable marketing laws such as the Spam Act 2003 (Cth), and where you consented when registering for our services.

If at any time you would like to stop receiving promotional emails, you may follow the opt-out instructions contained in the email. It may take up to 10 business days for us to process opt-out requests. If you opt out of emails or promotions, we may still send you emails about your account, services you have requested or received, or for other customer service purposes.

We do not provide your Personal Information to other organisations for the purposes of direct marketing. If you receive communications from us that you believe were sent other than in accordance with this Privacy Policy, or in breach of any law, please contact us using the details below.

We may transfer your Personal Information to organisations in other countries. Recipients may include our related entities or employees, external service providers such as administration providers, or information technology providers such as cloud storage and data processing providers.

We only transfer information where we reasonably believe that the recipient is legally or contractually bound to principles that are substantially similar to the Australian Privacy Principles.

We may change this Privacy Policy from time to time. Updated versions will be posted on our Site, and you should check periodically to review our current Privacy Policy. Your continued use of our Site and services constitutes your acceptance and understanding of the Privacy Policy in effect at the time of your use.

If we make changes that materially affect our practices regarding Personal Information we previously collected, we will endeavour to provide notice in advance by highlighting the change on the Site or, where practical, by emailing clients.

If you have any questions or complaints regarding privacy, or believe we may have wrongfully disclosed your Personal Information or breached this Privacy Policy, please contact us by phone or lodge your complaint in writing:

If you are not satisfied with our response, you are entitled to contact the Office of the Australian Information Commissioner by phoning 1300 363 992. Privacy complaints to the OAIC must be made in writing and can be lodged through its online complaint form or sent to the Office of the Australian Information Commissioner, GPO Box 5288, Sydney NSW 2001.