Privacy Policy

Reframe Practices Pty Ltd T/A Perth OCD Clinic

Version: May 2026

1. About Perth OCD Clinic

Perth OCD Clinic is a dedicated OCD training and research venue operated by Reframe Practices Pty Ltd in West Perth, Western Australia. The clinic provides consulting rooms to a group of independently practising clinical psychologists who have each completed the POCDC training program and continue to participate in ongoing advanced professional development offered through Perth OCD Clinic.

Perth OCD Clinic also conducts and facilitates research in the assessment and treatment of OCD and related conditions, and offers professional development and training programs for clinical psychologists in Australia, New Zealand, and the Asia-Pacific region.

We are committed to protecting the privacy of all individuals whose personal information we handle, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Scope of This Policy

2.1 What this Policy covers

This Policy covers personal information collected and held by Reframe Practices Pty Ltd T/A Perth OCD Clinic in connection with:

• Use of the Perth OCD Clinic website and online booking calendar (Acuity Scheduling);
• Enquiries made to Perth OCD Clinic by clients, referring practitioners, or members of the public;
• Research activities conducted or facilitated by Perth OCD Clinic;
• Training and professional development programs offered through Perth OCD Clinic;
• Administrative and operational functions of the venue.

2.2 What this Policy does not cover

This Policy does not cover personal information held by individual independent practitioners working from POCDC rooms in the course of their own private practices. Each practitioner maintains their own Privacy Policy governing client information associated with their practice. Clients should request a copy of their treating practitioner's Privacy Policy directly from that practitioner.

3. Personal Information We Collect

3.1 Clients and prospective clients

When a client or prospective client makes an enquiry through the POCDC website or online booking calendar, we may collect:

• Name and contact details (email address, phone number);
• Appointment booking information (date, time, practitioner selected);
• Brief information about the reason for the enquiry, if provided voluntarily;
• Referring practitioner details, where provided.

Perth OCD Clinic does not collect detailed clinical or health information about clients. Clinical records relating to a client's treatment are held by the individual practitioner, not by Perth OCD Clinic.

3.2 Research participants

Where an individual participates in a research study conducted or facilitated by Perth OCD Clinic, we collect personal information in accordance with the specific consent process for that study. This may include:

• Identifying information (name, contact details);
• Demographic information;
• Clinical assessment data and symptom measures;
• Session recordings or transcripts, where consent has been obtained;
• Outcome data.

The collection, use, and storage of research participant data is governed by the applicable ethics approval and the participant information and consent form for each study. Research participants will be provided with a separate participant information statement setting out their rights and how their information will be used.

3.3 Training and professional development participants

When a clinician registers for a POCDC training program or professional development activity, we collect:

• Name and contact details;
• Professional registration details (AHPRA registration number, profession);
• Payment information (processed through a third-party payment platform – see section 7);
• Attendance and completion records.

3.4 Referring practitioners and GPs

When a referring practitioner contacts Perth OCD Clinic, we may collect their name, practice name, contact details, and details of the referral. This information is used to acknowledge the referral and communicate with the referrer as appropriate.

3.5 Website visitors

When you visit the POCDC website, we may collect non-identifying technical information such as browser type, pages visited, and time of visit, through standard web analytics tools. This information is used in aggregate to improve the website and is not linked to individual identities.

4. How We Collect Personal Information

We collect personal information in the following ways:

• Directly from you when you make an enquiry, complete a booking, register for training, or participate in research;
• Through the Acuity Scheduling online booking platform when you book an appointment (see section 7);
• From referring practitioners who provide your details when making a referral;
• Through the POCDC website and associated analytics tools;
• In the course of research activities, in accordance with ethics approval and your consent.

5. How We Use Personal Information

5.1 Clients and prospective clients

We use client and prospective client information to:

• Respond to enquiries and facilitate appointment bookings through the online calendar;
• Communicate with referring practitioners to acknowledge referrals;
• Maintain records of referral sources for administrative purposes;
• Comply with legal and regulatory obligations.

Perth OCD Clinic does not use client information for marketing purposes without your consent.

5.2 Research participants

We use research participant information to conduct and report on research in accordance with the applicable ethics approval, the participant information and consent form, and applicable privacy legislation.

5.3 Training participants

We use training participant information to:

• Process enrolments and payments;
• Communicate about the training program;
• Issue certificates of completion and maintain attendance records;
• Comply with CPD recording requirements where applicable.

6. Disclosure of Personal Information

Perth OCD Clinic does not sell, rent, or trade personal information to third parties.

We may disclose personal information in the following limited circumstances:

• To individual practitioners at POCDC for the purpose of facilitating a booking or referral – for example, forwarding a GP's referral to the relevant practitioner;
• To third-party service providers who assist us in operating the website, booking system, or training platform (see section 7), to the extent necessary for those services;
• Where required or authorised by law, including in response to a court order, subpoena, or regulatory requirement;
• In connection with a research study, in accordance with the applicable ethics approval and participant consent – in this case, data will generally be de-identified before any publication or wider disclosure.

Where personal information is disclosed to overseas recipients (for example, through use of US-based cloud platforms), we take reasonable steps to ensure those recipients handle the information in a manner consistent with the Australian Privacy Principles.

7. Third-Party Digital Platforms

Acuity Scheduling (Online Booking Calendar): Perth OCD Clinic uses Acuity Scheduling, a third-party platform operated by Squarespace Inc. (USA), to manage the public-facing online booking calendar. When you make a booking through the POCDC calendar, your information is collected and processed by Acuity Scheduling in accordance with its own privacy policy and terms of service. We encourage you to review Acuity Scheduling's privacy policy, available at acuityscheduling.com.

Cybersecurity Disclaimer: While Perth OCD Clinic takes reasonable steps to use reputable third-party platforms and configure them appropriately, no digital system is entirely secure. To the extent permitted by law, we are not liable for cybersecurity events affecting third-party platforms outside our reasonable control. Nothing in this Policy limits any non-excludable rights you have under the Privacy Act 1988 (Cth) or other applicable law. We encourage users to exercise caution when submitting personal information online and to use secure internet connections.

Training Platform (Thinkific): POCDC training programs are delivered through Thinkific, a third-party online learning platform. When you enrol in a POCDC training program, your enrolment information is collected and processed by Thinkific in accordance with its own privacy policy. We encourage you to review Thinkific's privacy policy at thinkific.com.

Payment Processing: Payment for training programs is processed through third-party payment platforms. Perth OCD Clinic does not store credit card or banking information. Payment processing is subject to the terms and privacy policy of the relevant payment provider.

Email: POCDC uses email for administrative communications. Email communication is not a fully secure medium. We recommend that you do not include sensitive clinical information in emails to Perth OCD Clinic.

8. Health Information and Sensitive Information

Perth OCD Clinic does not routinely collect health or clinical information about clients. Clinical records are held by individual practitioners, not by POCDC.

Where such information is provided through the booking form, it is forwarded to the relevant practitioner and is not retained or used by POCDC for any purpose other than facilitating that booking.

Where health or sensitive information is collected in connection with a research study, it is handled with the additional protections required under APP 3 and APP 6, in accordance with the applicable ethics approval, and will not be used or disclosed for purposes other than those specified in the participant consent process.

9. Independent Practitioners – Separate Privacy Obligations

Practitioners working from POCDC rooms are independent clinicians operating their own private practices. They are not employees or agents of Reframe Practices Pty Ltd. Client information collected by a practitioner in the course of providing clinical services is held by that practitioner in their own right and is subject to that practitioner's Privacy Policy.

Each practitioner is individually responsible for:

• Maintaining a current, APP-compliant Privacy Policy for their practice;
• Secure handling and storage of client records;
• Compliance with mandatory data breach notification obligations under the Privacy Act 1988 (Cth);
• Their own obligations as a registered health practitioner under AHPRA guidelines.

If you have a privacy concern relating to your clinical care, you should contact your treating practitioner directly. If you are uncertain who holds your information or how to contact your practitioner, you may contact us at the details in section 12 and we will endeavour to assist.

10. Storage and Security of Personal Information

Perth OCD Clinic takes reasonable steps to protect the personal information we hold from misuse, interference, loss, unauthorised access, modification, or disclosure. This includes:

• Use of reputable, established third-party platforms for booking, training delivery, and email;
• Limiting access to personal information to authorised persons;
• Using secure passwords and access controls for digital systems.

Personal information held by Perth OCD Clinic is stored electronically and may be held on servers located in Australia or overseas (including the United States) through third-party platform providers.

Despite reasonable precautions, no digital system is entirely secure. In the event of a data breach that is likely to result in serious harm, Perth OCD Clinic will comply with the notifiable data breach requirements under Part IIIC of the Privacy Act 1988 (Cth), including notifying affected individuals and the Office of the Australian Information Commissioner as required.

11. Access to and Correction of Personal Information

You have the right to request access to personal information that Perth OCD Clinic holds about you, and to request correction of information that is inaccurate, out of date, incomplete, or misleading.

To make an access or correction request, please contact us using the details in section 12. We will respond to your request within a reasonable time and in accordance with our obligations under the Privacy Act 1988 (Cth).

We may decline a request for access in limited circumstances permitted by the APPs, such as where providing access would be unlawful or would unreasonably impact the privacy of another individual. If we decline a request, we will provide written reasons.

Note: Requests for access to clinical records held by an individual practitioner should be made directly to that practitioner. Perth OCD Clinic does not hold clinical records on behalf of practitioners.

12. Privacy Complaints

If you have a concern or complaint about how Perth OCD Clinic has handled your personal information, we encourage you to contact us in the first instance so that we can address your concern.

Organisation	Reframe Practices Pty Ltd T/A Perth OCD Clinic
Address	24 Colin Street, West Perth 6005
Website	perthocdclinic.com.au
Phone	0413 570 222
Email	info@perthocdclinic.com.au
Privacy Officer	Dr Gayle Maloney, Founder and Director of Training and Research

We will acknowledge your complaint within five (5) business days and aim to resolve it within thirty (30) days. If we are unable to resolve your complaint to your satisfaction, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

13. Updates to This Policy

Perth OCD Clinic may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legislation. The current version of this Policy is published on the POCDC website and is dated at the foot of each page. We encourage you to review the Policy periodically.

Material changes to this Policy will be notified on the POCDC website.

14. Additional Information

Perth OCD Clinic is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. For further information about your privacy rights under Australian law, visit oaic.gov.au.

This Policy should be read in conjunction with any specific consent form, participant information statement, or terms of service applicable to the particular service you are using.

Last updated: May 2026