Privacy Policy

I take your privacy seriously. This policy explains what personal information I collect, why I collect it, how I look after it, and what rights you have. It applies to this website, my enquiry form, and my psychotherapy practice.

I handle personal and health information in line with the Privacy Act 1988 (Cth), including the Australian Privacy Principles, and the Health Records Act 2001 (Vic).

Who I am

I'm Eamon Roy, a Gestalt psychotherapist practising in Melbourne, Victoria. If you have questions about this policy or your information, contact me at eamonroytherapy@gmail.com.

What information I collect

When you make an enquiry

Your name, email address, and any message or other details you choose to include. Enquiries made through my website form arrive in my email inbox. Please keep any message brief. You're welcome to share the details when we speak instead.

If we begin working together

Your contact details, relevant personal, health, and family history, session notes, billing and payment records, and any correspondence between us.

Why I collect it

I collect information to respond to your enquiry, schedule appointments, provide safe and appropriate therapy, keep accurate clinical records, process payments, and meet my professional and legal obligations. I don't use your information for marketing, and I don't sell it.

How I store and protect it

Your clinical records and session notes are stored electronically in Splose, an industry standard cloud-based practice management system. My accounts are protected by strong passwords and two-step verification, and access is limited to me.

Splose states that it uses industry-standard encryption in transit (TLS 1.2 or higher) and at rest (AES-256). Splose also states that it only stores data in Australia and complies with the Australian Privacy Principles.

Who I share it with

I discuss my work regularly with a clinical supervisor, using de-identified information. This is a professional requirement and part of keeping the work safe and effective.

I practise under the PACFA Code of Ethics, and what you tell me stays between us. The exceptions are narrow: your consent, a serious risk to someone's safety, and a legal requirement such as a court order.

Email and communication

I use email for scheduling and practical matters. Standard email is not a fully secure way to send sensitive information. Please avoid sending detailed personal or clinical information by email. If you'd rather I contact you by a particular method, or not leave messages, let me know.

Overseas storage

My email is provided by Google (Gmail), which may store data on servers outside Australia, including in the United States. By contacting me or becoming a client, you understand your information may be stored this way.

How long I keep records

I keep clinical records for at least seven years after our last session, as required in Victoria. If you were under 18 when the records were created, I keep them until you turn 25. After that, I securely destroy them.

If you enquire but don't become a client, I delete your enquiry details within three months.

Access and correction

You can ask to see the information I hold about you, and to correct anything that's inaccurate. Contact me and I'll respond within a reasonable time. In limited circumstances, such as where access would pose a serious risk to someone's safety, I may need to restrict access, and I'll explain why.

Complaints

If you're concerned about how I've handled your information, please contact me first so I can try to put it right. If you're not satisfied, you can contact the Health Complaints Commissioner (Victoria) or the Office of the Australian Information Commissioner (OAIC). You can also raise concerns with my professional bodies, including PACFA.

Changes to this policy

I may update this policy from time to time. The current version will always be on this page.

Last updated: August 2026