Petrova Psychology Privacy Policy

​Petrova Psychology is committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
This Privacy Policy explains how Petrova Psychology collects, holds, uses and discloses personal information, how you may access or correct your personal information, and how you may make a privacy complaint.
This policy applies to personal information collected in the course of providing psychological services, through this website, and through related administrative, communication and business systems used by Petrova Psychology.
A consent form for the provision of psychological services and use of digital tools is provided to all clients of the practice. This form sets out key information about psychological services, confidentiality, collection and storage of information, use of digital tools, and related practice policies.  

1. Who we are
Petrova Psychology is a private psychology practice operated by Irina Petrova, Clinical Psychologist.
Contact details:
Petrova Psychology
Suite 13, Level 6, 122 Arthur St
North Sydney NSW 2060
Email: [email protected] 

2. What personal information we collect
Petrova Psychology collects personal information that is reasonably necessary to provide psychological services and to operate the practice.
The personal information collected may include your name, date of birth, contact details, emergency contact details, referral information, Medicare or private health fund details, payment information, health information, medical history, assessment information, session notes, reports, correspondence, appointment information, and other information relevant to assessment and treatment.
If you contact the practice through the website, personal information may also be collected through the contact form, including your name, email address, phone number, and the contents of your message.
If you purchase a product through the website store, personal information relevant to your order may be collected, such as your name, contact details, delivery details, and payment-related information. 

3. How we collect personal information
Petrova Psychology generally collects personal information directly from you.
This may occur when you make an enquiry, complete intake or consent documents, attend appointments, communicate by email, phone or SMS, use online booking, participate in telehealth, complete assessment measures, or purchase a product through the website store.
Personal information may also be collected from other people or organisations where this is reasonably necessary for your care or otherwise permitted by law. This may include your referring doctor, another treating practitioner, a parent or guardian, or another third party where you have provided consent or where collection is otherwise authorised.
Website-related information may also be collected automatically through standard website technologies such as server logs, cookies, analytics tools, and embedded third-party content.

4. Why we collect, hold, use and disclose personal information
Petrova Psychology collects, holds, uses and discloses personal information for purposes including:

providing psychological services;
maintaining clinical records;
communicating with you;
managing appointments;
processing payments;
sending invoices and reminders;
arranging referrals;
preparing reports where authorised;
complying with legal, ethical and professional obligations;
operating the website and online store;
improving practice administration; and
protecting the security of practice systems and information.

Health information is collected and used for the purpose of providing psychological assessment and treatment and associated practice administration.
The practice may also use secure digital tools to support administrative and clinical documentation functions, including AI-assisted documentation tools, primarily NovoNote.

5. How we hold and protect personal information
Petrova Psychology takes reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification and disclosure.
Clinical information is stored electronically using Halaxy.
The practice also uses Google Workspace for business email and calendar, Zoom for telehealth, HICAPS for payment and claiming functions, mVoice for electronic fax services, Weebly for website and online store hosting, Stripe for website payment processing, and Google Analytics for website analytics.
Reasonable security steps may include password protection, multi-factor authentication, encryption where available, secure business systems, restricted access, vendor security controls, and incident response procedures.
Petrova Psychology also maintains a cyber incident response plan and business continuity plan to respond to cyber incidents and suspected data breaches.

6. Disclosure of personal information
Petrova Psychology may disclose personal information where reasonably necessary for the purposes described in this policy, including to service providers and contractors who support the operation of the practice, such as practice management, communications, payment, website, telehealth, analytics, secure documentation, and e-fax providers.
Personal information may also be disclosed where you have consented, where disclosure is reasonably expected as part of your care, where disclosure is required or authorised by law, or where necessary to lessen or prevent a serious threat to life, health or safety.
Examples may include disclosure to your GP or another treating practitioner, to a third party for a report you have authorised, in response to a subpoena or court order, or where otherwise required or authorised by law.

7. Overseas disclosure
Petrova Psychology stores clinical information in Australia through Halaxy.
However, some personal information handled through business, communication, website and payment service providers may be processed, stored or disclosed outside Australia.
This may include personal information handled through Google Workspace, Stripe, and website or e-commerce providers used by the practice.
 
8. Website, cookies and analytics
This website may use cookies, analytics tools and similar technologies to help the website function, understand website traffic, and improve user experience.
Petrova Psychology may use Google Analytics to collect website usage information such as pages viewed, approximate location, browser type, device information, referral source, and time spent on the website. This information is generally collected in aggregated form and is used to understand website performance and visitor behaviour.
The website may also include embedded third-party content or services, such as YouTube videos, Google Maps, online booking links, and online store functionality. These third-party services may collect technical or usage information directly from website users when they are loaded or interacted with.
If you submit an enquiry through the website contact form or make a purchase through the online store, the information you provide may be processed through the relevant website platform and payment provider.

9. Direct marketing
Petrova Psychology does not use personal information for direct marketing.
If this changes, any direct marketing will be handled in accordance with applicable privacy law, and you will be given a way to opt out where required.

10. Access and correction
You may request access to personal information held about you, and you may request correction of inaccurate, incomplete or out-of-date personal information.
Requests for access or correction should be made by email to [email protected].
Simple copies of information provided electronically will generally not incur a charge. If printing or postage is requested, a reasonable charge may apply for those costs.
Access may be refused in some circumstances permitted by law. If that occurs, Petrova Psychology will provide written reasons where required.

11. Retention and destruction
Petrova Psychology retains clinical records in accordance with applicable legal, professional and insurance requirements.
When personal information is no longer required to be retained, Petrova Psychology will take reasonable steps to securely destroy or de-identify it.
Where information is removed from Halaxy or another practice system, a destruction record log will be kept.
 
12. Data breaches and cyber incidents
If Petrova Psychology becomes aware of unauthorised access to, disclosure of, or loss of personal information, the practice will respond in accordance with its cyber incident response plan and business continuity plan.
Reasonable steps will be taken to contain the incident, assess affected information, preserve evidence, obtain technical or legal support where needed, and reduce the risk of harm.
Where required by law, affected individuals will be notified.

13. Privacy complaints
If you have a concern or complaint about how your personal information has been handled, you may contact Petrova Psychology by email at [email protected].
Please provide enough detail to identify the issue and the outcome you are seeking. Petrova Psychology will consider your complaint and respond within a reasonable timeframe.
​
14. Changes to this policy
This Privacy Policy may be updated from time to time to reflect changes in legal requirements, technology, service providers, or practice procedures.
The current version will be published on the practice website.
 
 
Last updated: May 2026