Privacy Policy
About this policy
This policy explains how Lisa Irving, Clinical Psychologist, and Monolith Building Pty Ltd as trustee for the Irving Family Trust, trading as Revive Health and Happiness ("we", "us"), collects, uses, stores and shares your personal information.
It applies to:
- clients receiving psychological services
- people and organisations we deal with about a client's care, such as GPs, insurers and employers
- visitors to lisairving.au, and people who use our online courses, resources or free tools
As a health service provider, we are bound by the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs), whatever our size. We also follow the Psychology Board of Australia's Code of conduct for psychologists, which sets strict standards for confidentiality.
If you'd like this policy in another format, just ask.
What information we collect
We only collect what we need to provide our services. Health information is "sensitive information" under the Privacy Act, so we only collect it with your consent or where the law allows.
| Who you are | What we may collect |
|---|---|
| Client | Name, date of birth, contact details, emergency contact, GP details; health and mental health history, session notes, assessment and questionnaire results, reports and letters; Medicare details; workers compensation or motor vehicle claim details (insurer, claims officer, claim number, date of incident, employer); payment records |
| Referrer, funder or other professional | Name, role, organisation, contact details, and correspondence about a client's care |
| Website, course or tool user | Name, email, course enrolment and progress, payment records, and information you enter into our free tools |
We don't collect information about you that isn't relevant to your care or the service you've asked for.
How we collect and use your information
How we collect it. Mostly directly from you: through intake and consent forms, the client portal, telehealth sessions, questionnaires, emails and phone calls. With your consent, we may also receive information from your GP, other treating practitioners, your insurer, your employer, or anyone else involved in a claim.
How we use it. To:
- assess, treat and support you
- write reports, letters and treatment plans
- communicate with people involved in your care, with your consent
- book appointments, send forms and questionnaires, and send reminders
- process payments and claims, including Medicare rebates
- meet our legal, professional and insurance obligations
- run and improve our website, courses and tools
We will only use your information for another purpose if you agree, or if the law requires or allows it. We never sell your personal information.
Who we share it with
With your consent. We share information with the people you name in your consent form, such as your GP, insurer, claims officer or employer. We share only what is needed for that purpose.
Without your consent, only where the law requires or allows it. For example, where there is a serious risk to someone's life, health or safety, where a child or vulnerable person may be at risk, or where a court, tribunal or other legal authority requires it.
Service providers. We use trusted providers to run the practice. They may store or process your information on our behalf, and are bound by contracts and privacy obligations.
| Provider | What it does | Where data is held |
|---|---|---|
| Zanda Health | Practice management and clinical records (current) | Sydney, Australia (AWS data centres) |
| Virtuosa AI | Clinical records, report writing and session notes; moving to become our main practice system | Sydney, Australia |
| Anthropic or Amazon Web Services (AWS) | Language model behind Virtuosa AI, under a business agreement that does not allow your information to be kept or reused | Sydney, Australia |
| Stripe | Card payments | Overseas, including the United States |
| Google Workspace | May be overseas, including the United States | |
| Jotform | Online forms, including the Workers Compensation Calculator | United States |
| lisairving.au | Our website and online courses, built and managed by our own team | Sydney, Australia (AWS Lightsail, ap-southeast-2) |
Overseas disclosure. Your clinical records are stored in Australia. Some limited information may be processed overseas, including in the United States: your name, email and card details when you pay through Stripe, emails sent through Google Workspace, appointment emails sent from Zanda Health, and anything entered into our Jotform forms. Zanda support staff may occasionally access an account from overseas to fix a problem, under Privacy Act safeguards. Where information goes overseas, we take reasonable steps to make sure it is protected to a standard consistent with the APPs.
AI and automated decisions
With your consent, we use Virtuosa AI to help draft reports and letters and, with your approval in each session, to take session notes. Lisa reviews, edits and approves everything it produces. Your information is not used to train Virtuosa AI or any other AI model. You can decline or withdraw consent at any time without it affecting your care.
We may also use general AI tools for thinking support, using only details that cannot identify you.
No automated decisions. No computer program makes, or substantially and directly informs, any decision about you that could significantly affect your rights or interests. Every decision about your diagnosis, risk, treatment, reports and fees is made by Lisa.
Full details of how AI is used in your care are in our informed consent form.
Storage, security and retention
Your records are stored electronically in secure, access-controlled systems. Clinical information in Virtuosa AI is encrypted in transit and at rest. Only Lisa and authorised administrative staff can access client records, and only as needed for their role. We do not keep paper records: all records are digital.
How long we keep it. Clinical records are kept for at least 7 years after your last contact, or until you turn 25 if you were under 18 when seen, whichever is later. Financial records are kept as required by tax law. After that, records are securely destroyed or de-identified.
Course and website information is kept while your account is active, then deleted or de-identified when no longer needed.
Your rights
Access. You can ask to see or get a copy of the information we hold about you. We'll respond within 30 days. In rare cases the law allows us to limit access, for example where it could pose a serious risk to someone's health or safety. If so, we'll explain why in writing and look at other options, such as giving the information to your GP.
Correction. If something is wrong, out of date or incomplete, ask us to correct it. If we disagree, you can ask us to attach a note with your view.
Anonymity. You can contact us without giving your name for general enquiries. For psychological services, Medicare claims and insurance claims, we need to know who you are.
Marketing. We only send newsletters or course updates if you've signed up. You can unsubscribe at any time using the link in any email. We never use clinical information for marketing.
There is generally no charge to request access. We may charge a reasonable fee for copying large records, and will tell you first.
Website, cookies and online courses
Cookies. lisairving.au only uses the cookies needed for the site to work, such as keeping you logged in to a course. We don't use analytics or advertising tracking. If that changes, we'll update this policy first.
Online courses. If you enrol in a course, we keep your name, email, payment record and course progress so you can access your learning and receive certificates.
Free tools. Our Workers Compensation Calculator is an online form run through Jotform. What you enter is sent only to Lisa Irving and stored by Jotform. It is used to give you a result and to respond to you, and nothing else.
Links. Our site may link to other websites. We aren't responsible for their privacy practices, so please check their policies.
Data breaches, complaints and contact
Data breaches. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner (OAIC), as the Notifiable Data Breaches scheme requires. We'll explain what happened and what you can do.
Complaints. If you're concerned about how we've handled your information, please contact us first. We'll acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you're not satisfied, you can contact:
- Office of the Australian Information Commissioner: 1300 363 992, oaic.gov.au
- Health and Disability Services Complaints Office (HaDSCO), WA: 1800 813 583, hadsco.wa.gov.au
Changes to this policy
We review this policy regularly and post the current version at lisairving.au/privacy. This version applies from 17 October 2026.
Contact us
Lisa Irving, Clinical Psychologist
Monolith Building Pty Ltd as trustee for the Irving Family Trust, trading as Revive Health and Happiness
Email: lisa@lisairving.au
Phone: 0409 110 611