Privacy Policy

Effective date: 07/07/2026

Business name: Bloomera Pty Ltd

ABN: 77 697 281 360

About this policy

Bloomera Pty Ltd (Bloomera) is committed to protecting the privacy of people who use our website, make enquiries, book appointments or receive psychological services. Bloomera handles personal information, including health information, in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and relevant professional obligations for psychologists.

This policy explains how Bloomera collects, uses, stores, discloses and otherwise manages personal information across our telehealth psychology service and related practice operations.

Information collected

Bloomera may collect the following kinds of personal information and health information:

Name, date of birth, address, email address, phone number and other contact details.
Emergency contact, next of kin and current physical location where relevant to telehealth safety planning.
Appointment, referral, billing, payment and Medicare information.
Information provided in intake forms, questionnaires, emails, SMS, phone calls and other communications.
Health information, including mental health history, symptoms, treatment goals, assessments, questionnaires, outcome measures, clinical notes and correspondence created in the course of psychological care.
Website usage information such as IP address, browser type, device information, cookies and website interaction data.

Health information is sensitive information and receives additional privacy protection under Australian law.

How information is collected

Bloomera generally collects information directly from the individual, including when that person completes a form, contacts Bloomera, books or attends an appointment, participates in telehealth, completes assessments, or communicates with our clinicians or administration team.

Bloomera may also collect information from third parties where it is unreasonable or impracticable to collect it directly, or where the person has consented. This may include a referring GP, psychiatrist, paediatrician, another treating practitioner, a parent, guardian, authorised representative, insurer or other funder.

Why information is collected

Bloomera collects, holds, uses and discloses personal information for purposes including:

Assessing suitability for Bloomera services.
Providing psychological assessment, therapy, support, psychoeducation, outcome monitoring and related services.
Arranging and managing appointments, reminders, telehealth links and communications.
Maintaining clinical records and continuity of care.
Processing payments, receipts, invoices and Medicare or third-party billing where applicable.
Communicating with referring practitioners and other treatment providers where appropriate.
Complying with legal, ethical, professional and regulatory obligations.
Managing feedback, complaints, incidents, quality assurance, supervision, training and service improvement.
Operating, maintaining and improving the website, systems and business operations.

Use and disclosure

Bloomera uses personal information for the primary purpose for which it was collected and for related purposes a person would reasonably expect. Health information may also be used or disclosed where consent has been provided, where required or authorised by law, or where necessary to prevent or lessen a serious threat to life, health or safety.

Personal information may be disclosed to:

Referring GPs and other treating health professionals.
Medicare, private health insurers, insurers or other funding and billing bodies where required.
Contractors and service providers who support Bloomera operations, including practice management, telehealth, assessment, documentation, payment, IT and secure storage providers.
Supervisors, consultants or senior clinicians for professional supervision, quality assurance and continuity of care, de-identified where practicable.
Regulators, courts, law enforcement, child protection or other parties where disclosure is required or authorised by law.

Communication preferences and optional updates

Bloomera may use email and mobile numbers for matters directly related to care and service delivery, including appointment reminders, telehealth links, intake forms, billing, Medicare/rebate information, clinical correspondence, administrative updates and important policy changes.

Optional Bloomera updates, resources, practice news, education or service information will only be sent where consent has been provided or where otherwise permitted by law. Optional communications will include Bloomera contact details and a clear way to unsubscribe or withdraw consent.

Digital systems and AI-supported tools

Bloomera uses secure digital systems including Splose for practice management, Zoom or another approved telehealth platform, NovoPsych for assessments and outcome measures, and NovoNote or another approved AI-supported documentation tool where consent has been obtained.

AI-supported tools do not replace professional judgement. Diagnosis, formulation, treatment planning, risk assessment, suitability decisions and clinical recommendations remain the responsibility of the treating psychologist.

Storage and security

Bloomera takes reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Safeguards include role-based access, password protection, multi-factor authentication where available, secure cloud systems, staff confidentiality obligations, and reasonable audit and review processes.

Bloomera uses secure cloud-based systems and communication platforms. Supplier privacy and storage arrangements may change over time. Bloomera will take reasonable steps to maintain appropriate privacy protections and to update this policy if material overseas disclosure arrangements change.

Overseas disclosure

Bloomera does not intentionally store client health information offshore. Some technology providers may process or support services using overseas infrastructure, subcontractors or support teams. Where overseas disclosure is likely, Bloomera will take reasonable steps to ensure appropriate privacy protections are in place or will seek consent where required.

Access and correction

A person may request access to the personal information Bloomera holds about them and may ask for correction if they believe information is inaccurate, out of date, incomplete, irrelevant or misleading. Bloomera may need to verify identity before responding. Access or correction may be refused in limited circumstances permitted by law, and reasons will be provided where required.

Retention and destruction

Bloomera keeps personal information only for as long as reasonably necessary for service delivery, record keeping, legal, regulatory and professional obligations. Adult clinical records are generally retained for at least seven years after the last service. Records for clients who were under 18 are generally retained at least until the client turns 25. Bloomera may retain records longer where clinically, legally or professionally appropriate.

Data breaches

If Bloomera becomes aware of a suspected data breach, it will take reasonable steps to contain, assess and respond. Where an eligible data breach is likely to result in serious harm, Bloomera will notify affected individuals and the Office of the Australian Information Commissioner where required.

Complaints

Privacy concerns may be sent to Bloomera at hello@bloomera.com.au. Bloomera will acknowledge, investigate and respond within a reasonable period. If a person is not satisfied with the outcome, they may contact the Office of the Australian Information Commissioner.

Changes to this policy

Bloomera may update this policy from time to time to reflect changes in legal requirements, professional obligations, systems or services. The current version will be published on the Bloomera website where practicable.

Bloomera Pty Ltd | Privacy Policy | Version 1.0 | 07/07/2026