Privacy policy

Welcome. This website, https://elissalowenstern.com/, is owned and operated by me, Elissa Lowenstern ABN:28 037 006 610. If you have any questions or need further information, please contact me:

Email: elissa@elissalowenstern.com

Phone: 0416072418

This document sets out my Privacy Policy. It describes how I collect and manage your personal information when you interact with this site. I am passionate and committed to protecting your privacy and personal information. If you have any questions or concerns about how your personal information is being handled, please do not hesitate to contact me.

I comply with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth) (Privacy Act).

Website design by Beau Lowenstern.

Personal Information

If you engage with me via this website, or choose to become my client, or engage other services I may offer, I may ask to collect the following kinds of personal information from you, including:

·      your name, mobile and/or fax number, address and email address

·      your occupation, position or role

·      the country that you live in

When you visit my website, I may collect information about your interests, products or services that you might be wishing to purchase from me in the future. This could be collected in the form of questionnaires, polls, surveys or forms. It helps me to service your needs. I may also collect:

·      information that allows me to tailor my content to your needs when you sign up for one of my webinars or programs, and

·      your IP address, and information about your browsing history to help me improve the usability and appeal on my website. More information about this is found in the section on Cookies below.

Collection and Use

I may collect your personal information by various means including:

·      an opt-in form for my mailing list

·      if you have been referred to me by a third party

·      when we meet on zoom or face-to-face during an intake

·      newsletter subscription

·      when you become my client or purchase from me

·      when you sign up for a workshop or program

·      when you attend an in-person seminar or event

·      when you email me

·      I may check your social media to get a feel for you and your business when you have booked a session with me

·      automatically, through the use of cookies, and

·      any other personal information requested by me and/or provided by you or a third party such as Google or my third-party payment processor.

I use this information to:

·      respond to your enquiries

·      provide you with relevant news and updates about my services

·      help visitors better understand my services

·      provide you with specific services at your request, and determine how I might best meet your needs as a potential client

·      monitor my client satisfaction so I provide services tailored to their needs

·      provide you with interesting and relevant news about updates in my area of work, and

·      improve this website and the services I provide

I will only collect your personal information:

·      with your full awareness and consent, such as when you email me, tick a checkbox or fill in a form to provide me with information

·      if I need it to provide you with information or services that you request

·      if I am legally required to collect it

·      for necessary administrative processes if you become my client or express interest in doing so, such as an introductory chat to see if we are a good fit

·      when you sign up to a webinar, workshop or similar event, or

·      if I believe that I can demonstrate a legitimate interest in using your data for marketing purposes, although I will always give you a choice to opt out.

Sensitive Information

I understand that some personal information is particularly sensitive, and that you are trusting me to keep this information confidential.

I will only collect sensitive information by methods that are reasonably secure, such as:

·      through my intake form in Acuity when you book an appointment

·      in a zoom consultation or face-to-face, or

·      when you send me information in an email. Please note that email may not be sufficiently secure – if the information is extremely sensitive, ask me about alternative ways to share it with me.

The reason why I collect this information is:

·       as a practitioner, to gain a deeper understanding of your background, and what you would like to address in sessions. This helps me to provide the services you have requested, and

·      to ensure that I am providing you with the most appropriate services.

The sensitive information I ask you to provide (or you decide to share with me), for this purpose may include:

·      your birth date

·      your medical and family history

·      racial or ethnic origin

·      criminal records

·      sexual orientation

·      philosophical, religious and political beliefs

·      your personal wellbeing, goals and dreams

·      your business information

·      your relevant financial information, and

·      information about your lifestyle and relationships.

I am committed to securely storing and handling your sensitive information.

·      Sensitive information is stored in a locked filing cabinet and on a password protected computer that only I have access to.

·      Some sensitive information may be stored securely online, or in the cloud through iCloud. You can find out more about their security provisions in the section on Security below.

All archived sensitive information is securely destroyed after 7 years.

You may choose not to provide me with your sensitive information. However, if you choose not to be completely honest with me, I may not be able to provide you with the services that you request.

As a practitioner, it is essential that you disclose any concerns about your mental health. This would include but is not limited to:

·      if you are under the care of other healthcare or mental healthcare providers

·      if you are taking medications prescribed by other healthcare professionals

·      if you have been diagnosed with any mental health conditions, and

·      if you have been an in-patient for mental health reasons.

Disclosure of Information

Reasons why I may disclose your information include:

·      to provide you with the services you have requested

·      to carry out your instructions

·      to send you products that you have purchased

I may need to be in contact with your healthcare providers if I have concerns about your mental wellbeing whilst you are my client

In order to provide you with my services, I may share some relevant information - on a strictly need to know basis - with:

·      my virtual assistant (VA)

·      third parties who might assist with: accounting or financial advice; auditing; archiving; legal advice; website team; business consultant or coach/mentor; technology services

·      any other third-party service provider for the purpose of enabling them to provide their service

·      Australia Post or courier companies, and

·      your healthcare providers.

I will also disclose your information if required by law to do so or in circumstances permitted by the Privacy Act – for example, where I have reasonable grounds to suspect that someone is engaging in unlawful activity, or misconduct of a serious nature, that relates to my functions or activities, and in response to a subpoena, discovery request or a court order.

If you have any concerns regarding the disclosure of your information in this context, please do not hesitate to get in touch with me to discuss this personally.

I will use all reasonable means to protect the confidentiality of your information while in my possession or control. I will not knowingly share any of your information with any third party other than the service providers who assist me in providing the information and/or services I am providing to you. To the extent that I do share your information with a service provider, I would only do so if that party has agreed to comply with our privacy standards or I am satisfied that the service provider has a suitably protective policy of their own. Some of my service providers may be overseas and may not be subject to Australian Privacy Laws. Please contact me if you have any concerns about the potential disclosure of your information.

Security

I take reasonable physical, technical and administrative safeguards to protect your personal and sensitive information from misuse, interference, loss, and unauthorised access, modification and disclosure.

I manage risks to your information by:

·      storing files securely

·      ensuring that only I have access to sensitive information

·      releasing information to service providers on a strictly need-to-know basis

·      conducting regular audits of my security systems

As mentioned above, your information may also be stored with a third-party provider, where it will be managed under their security policy. The following security policies may apply during our work together:

·      Acuity - https://help.acuityscheduling.com/hc/en-us/articles/219149587-Security-Privacy-Compliance

·      Dropbox - https://www.dropbox.com/security

·      Facebook ads - https://www.facebook.com/business/m/privacy-and-data

·      Google Workspace - https://workspace.google.com/intl/en_au/security/

·      Mailchimp - https://mailchimp.com/about/security/

·      Squarespace - https://www.squarespace.com/privacy

·      Zoom - https://zoom.us/docs/en-us/privacy-and-security.html

From time to time I may combine information provided by you with information gathered from:

·      Facebook

·      Instagram

·      LinkedIn

·      your website

·      personal contact

If you do not wish this to occur, please contact me.

Google Analytics

I use Google Analytics to collect information about your use of my website so that I can get strategic information about how my website is being used and improve its functionality. You can find out more about the information Google collects and how it is used here: https://support.google.com/analytics/answer/6004245.

Google also provides an add-on for your browser that you can use to opt-out and prevent your data being used by Google Analytics. You can access that add-on here: https://tools.google.com/dlpage/gaoptout

Access to Information

You can contact me to access, correct or update your personal information at any time. Unless I am subject to a confidentiality obligation or some other restriction on giving access to the information which permits me to refuse you access under the Privacy Act, and I believe there is a valid reason for doing so, I will endeavour to make your information available you within 30 days.

Complaints

If a breach of this Privacy Policy occurs, or if you wish to a request a change to your personal information, you may contact me by sending an email outlining your concerns to me at elissa@elissalowenstern.com.

If you are not satisfied with my response to your complaint, you may seek a review by contacting:

·      the Office of the Australian Information Commissioner using the information available at http://www.oaic.gov.au/privacy/privacy-complaints, or

·      https://hcc.vic.gov.au/contact, the health complaints commissioner in Victoria.

Unsubscribe

To unsubscribe from my email database or opt-out of communications (including marketing communications), please contact me at elissa@elissalowenstern.com, or opt-out using the opt-out facilities in the communication.

Notification of Change

If I decide to change my Privacy Policy, I will post a copy of the revised policy on my website.

Notification of Breach

If I have reason to suspect that a serious data breach has occurred and that this may result in harm or loss to you, I will immediately assess the situation and take appropriate remedial action. If I still believe that you are at risk, I will notify the Office of the Information Commissioner and either notify you directly, or if that is not possible, publicise a notification of the breach on this website.