Privacy Policy
How we look after the information you share about your child and family.
Cornerstone Therapies · Ariston House, 245 Pakington St, Newtown VIC 3220 · Last updated October 2026
At Cornerstone Therapies, we know that the information you share with us about your child and family is personal and often sensitive. We take looking after it seriously. This policy explains, in plain English, what we collect, why, and how we keep it safe.
We follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and Victoria's Health Records Act 2001 and its Health Privacy Principles.
What we collect and why
We only collect information we need to provide safe, helpful therapy and to run the practice. This may include:
- Contact details for the child, parents or carers, and the person making a referral (names, phone numbers, email addresses, and your relationship to the child or your organisation).
- The child's details, such as their name and date of birth.
- Funding and billing details, such as Medicare number and reference number, NDIS number and plan management type, invoice email address, and claim numbers for other funders.
- Health and background information, such as the reasons for referral, concerns, development, and family or school context.
- Session notes and reports made during therapy.
- Availability so we can offer suitable appointment times.
- Feedback, including whether you are an NDIS participant, if you choose to tell us.
We use this information to assess referrals, offer and provide services, communicate with you, coordinate care, process payments and claims, and improve our service.
How we collect it
Most information comes directly from you, through:
- our website Referral form and Feedback form
- email and conversations with us
- sessions and intake paperwork.
Sometimes we receive information from other people involved in your child's care, such as GPs, paediatricians, schools or other professionals. We do this with your consent, or where the law allows.
Children's information and consent
Because we work with children and young people, we usually ask a parent or legal guardian to consent on the child's behalf. As young people grow older and are able to make their own decisions, we will involve them in choices about their information where appropriate.
Using and sharing your information
We use and share your information only for the purpose you gave it to us, or for a closely related purpose you would reasonably expect. We may share information:
- with your referrer, GP or other treating professionals, to coordinate care, with your consent
- with Medicare, the NDIS (NDIA), your plan manager or other funders, for billing and claims
- where the law requires or permits it, for example mandatory reporting obligations, or to lessen or prevent a serious threat to someone's life, health or safety.
We will never sell your information or use it for marketing.
Staying anonymous
You are welcome to ask general questions without giving your name. However, because of the nature of therapy and Medicare and NDIS requirements, we usually cannot provide services anonymously or under a different name.
Storage, security and overseas providers
We keep records securely and limit access to people who need it to provide your care. We use trusted technology providers to run the practice:
- Halaxy for client records, appointments and billing
- NovoPsych for psychological assessments and questionnaires
- Google Workspace for email and storing referral form responses
- Microsoft (Microsoft Forms) for our feedback form
- Squarespace to host our website and its forms.
These providers may store data on servers outside Australia, including in the United States. We choose reputable providers with strong security and take reasonable steps to make sure your information is protected in line with the Australian Privacy Principles.
How long we keep records
Under Victorian law, we keep health records:
- for adults, for at least 7 years after the last time we provided a service, and
- for information collected while the person was a child, until they turn 25 (or for 7 years after the last service, whichever is later).
After that, records are securely destroyed or deleted.
Accessing and correcting your information
You can ask to see the information we hold about you or your child, and ask us to correct anything that is wrong or out of date. Please email admin@cornerstonetherapies.com.au. We will respond within a reasonable time (within 45 days, as allowed under Victorian law). In rare cases the law allows us to limit access, for example if it could put someone's safety at risk. If so, we will explain why.
Our website and cookies
Our website is hosted by Squarespace, which may use cookies and basic analytics to keep the site working and help us understand how it is used (for example, which pages are visited). This information does not identify you personally. You can turn off cookies in your browser settings.
When you submit a form on our website, your answers are sent to our practice email and stored securely in our Google Workspace account.
Data breaches
If a data breach is likely to cause serious harm, we will follow the Notifiable Data Breaches scheme. This means we will let you and the Office of the Australian Information Commissioner know, and take steps to limit any harm.
Questions, concerns and complaints
If you have a question or concern about privacy, please contact us first at admin@cornerstonetherapies.com.au. We will take it seriously, look into it, and get back to you.
If you are not happy with our response, you can contact:
- Office of the Australian Information Commissioner (OAIC): oaic.gov.au · 1300 363 992
- Health Complaints Commissioner (Victoria): hcc.vic.gov.au · 1300 582 113
NDIS participants can also contact the NDIS Quality and Safeguards Commission: ndiscommission.gov.au · 1800 035 544. Making a complaint will never affect the services you receive from us.
Changes to this policy
We may update this policy from time to time. The latest version will always be available on our website.
Questions about your privacy?
We're always happy to talk it through.
Email admin@cornerstonetherapies.com.au Back to homePrivacy Policy
Cornerstone Therapies
Ariston House, 245 Pakington St, Newtown VIC 3220
admin@cornerstonetherapies.com.au · cornerstonetherapies.com.au
Last updated: October 2026
At Cornerstone Therapies, we know that the information you share with us about your child and family is personal and often sensitive. We take looking after it seriously. This policy explains, in plain English, what we collect, why, and how we keep it safe.
We follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and Victoria's Health Records Act 2001 and its Health Privacy Principles.
What we collect and why
We only collect information we need to provide safe, helpful therapy and to run the practice. This may include:
Contact details for the child, parents or carers, and the person making a referral (names, phone numbers, email addresses, and your relationship to the child or your organisation).
The child's details, such as their name and date of birth.
Funding and billing details, such as Medicare number and reference number, NDIS number and plan management type, invoice email address, and claim numbers for other funders.
Health and background information, such as the reasons for referral, concerns, development, and family or school context.
Session notes and reports made during therapy.
Availability so we can offer suitable appointment times.
Feedback, including whether you are an NDIS participant, if you choose to tell us.
We use this information to assess referrals, offer and provide services, communicate with you, coordinate care, process payments and claims, and improve our service.
How we collect it
Most information comes directly from you, through:
our website Referral form and Feedback form
email and conversations with us
sessions and intake paperwork.
Sometimes we receive information from other people involved in your child's care, such as GPs, paediatricians, schools or other professionals. We do this with your consent, or where the law allows.
Children's information and consent
Because we work with children and young people, we usually ask a parent or legal guardian to consent on the child's behalf. As young people grow older and are able to make their own decisions, we will involve them in choices about their information where appropriate.
Using and sharing your information
We use and share your information only for the purpose you gave it to us, or for a closely related purpose you would reasonably expect. We may share information:
with your referrer, GP or other treating professionals, to coordinate care, with your consent
with Medicare, the NDIS (NDIA), your plan manager or other funders, for billing and claims
where the law requires or permits it, for example mandatory reporting obligations, or to lessen or prevent a serious threat to someone's life, health or safety.
We will never sell your information or use it for marketing.
Staying anonymous
You are welcome to ask general questions without giving your name. However, because of the nature of therapy and Medicare and NDIS requirements, we usually cannot provide services anonymously or under a different name.
Storage, security and overseas providers
We keep records securely and limit access to people who need it to provide your care. We use trusted technology providers to run the practice:
Halaxy for client records, appointments and billing
NovoPsych for psychological assessments and questionnaires
Google Workspace for email and storing referral form responses
Microsoft (Microsoft Forms) for our feedback form
Squarespace to host our website and its forms.
These providers may store data on servers outside Australia, including in the United States. We choose reputable providers with strong security and take reasonable steps to make sure your information is protected in line with the Australian Privacy Principles.
How long we keep records
Under Victorian law, we keep health records:
for adults, for at least 7 years after the last time we provided a service, and
for information collected while the person was a child, until they turn 25 (or for 7 years after the last service, whichever is later).
After that, records are securely destroyed or deleted.
Accessing and correcting your information
You can ask to see the information we hold about you or your child, and ask us to correct anything that is wrong or out of date. Please email admin@cornerstonetherapies.com.au. We will respond within a reasonable time (within 45 days, as allowed under Victorian law). In rare cases the law allows us to limit access, for example if it could put someone's safety at risk. If so, we will explain why.
Our website and cookies
Our website is hosted by Squarespace, which may use cookies and basic analytics to keep the site working and help us understand how it is used (for example, which pages are visited). This information does not identify you personally. You can turn off cookies in your browser settings.
When you submit a form on our website, your answers are sent to our practice email and stored securely in our Google Workspace account.
Data breaches
If a data breach is likely to cause serious harm, we will follow the Notifiable Data Breaches scheme. This means we will let you and the Office of the Australian Information Commissioner know, and take steps to limit any harm.
Questions, concerns and complaints
If you have a question or concern about privacy, please contact us first at admin@cornerstonetherapies.com.au. We will take it seriously, look into it, and get back to you.
If you are not happy with our response, you can contact:
Office of the Australian Information Commissioner (OAIC): oaic.gov.au · 1300 363 992
Health Complaints Commissioner (Victoria): hcc.vic.gov.au · 1300 582 113
NDIS participants can also contact the NDIS Quality and Safeguards Commission: ndiscommission.gov.au · 1800 035 544. Making a complaint will never affect the services you receive from us.
Changes to this policy
We may update this policy from time to time. The latest version will always be available on our website.