Privacy Policy

Privacy Policy

Last updated: 26 July 2026

ADHD & Her is operated by Shelley L'Green, AHPRA-registered Occupational Therapist. We take privacy seriously, particularly because occupational therapy involves health information about you and your child, which the law treats as sensitive information. We handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and our professional obligations as a registered health practitioner. This policy explains what we collect, why, where it lives, and your rights.

1. What we collect

For occupational therapy services: your name and contact details; your child's name, date of birth and pronouns; the information you provide in intake and consent forms, questionnaires and sessions; clinical notes, reports and correspondence; and appointment history. As a registered health practitioner, Shelley is required to create and keep clinical records of the services provided.

For purchases and courses: your name, email, purchase history and course progress. Payments are processed by Stripe; we never see or store your full card number.

For business mentoring: your name, contact details and the business information you choose to share. Mentoring records are business records, not health records.

From the website: standard analytics information (pages visited, device type, general location) collected via cookies, and your email address if you join our list. You can decline non-essential cookies in your browser and unsubscribe from emails at any time using the link in every email.

The High School Readiness Screener runs entirely on your own device. Your answers are processed in your browser and are never transmitted to or stored by ADHD & Her. If you retake it on the same device, previous results are remembered only in that browser, and clearing your browser data removes them.

2. Why we collect it

To provide and improve our services; to create and maintain the clinical records the law requires; to process payments and manage bookings, cancellations and card-on-file arrangements you have authorised; to communicate with you about your appointments, purchases and, with your consent, our news and resources; and to meet legal and professional obligations, including record-keeping, mandatory reporting and responding to lawful requests.

3. Where your information lives

We use carefully chosen service providers to run the practice and store information securely:

• Splose — practice management: bookings, intake forms, clinical records and communication.
• Stripe — payment processing and secure card storage.
• Kajabi — website, courses and email list.
• Standardised assessment platforms (for example PARiConnect and Q-global) — used only where you have agreed to formal screening questionnaires, to administer and score them.

Some of these providers store data on servers located overseas, including in the United States. Where information is stored or processed overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, including using reputable providers with strong security and contractual protections.

4. Who we share it with

We never sell personal information, and we never share your child's health information for marketing. We disclose information only: with your consent (for example, when you ask us to write to your child's school, GP, paediatrician or another treating professional); to the service providers listed above, to the extent needed to run the practice; and where the law requires or permits it, including mandatory reporting obligations and circumstances involving a serious threat to someone's life, health or safety.

5. How long we keep it

Clinical records must be kept for the periods required by Australian health-records law: in general, at least seven years from the last entry, and for children, until the child turns 25. After the required period, records are securely destroyed. Marketing information is kept only while you remain subscribed.

6. Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, including encrypted platforms, access controls and secure devices. No online system is perfectly secure, and if a data breach occurs that is likely to result in serious harm, we will notify affected people and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

7. Your rights

You can request access to the personal information we hold about you or your child, and ask us to correct anything inaccurate, by emailing support@adhdandher.com.au. We respond within a reasonable time, and where access is declined (which the law permits in limited circumstances, particularly for some health information) we will explain why. You can unsubscribe from marketing at any time without affecting your clinical care.

8. Complaints

If you are concerned about how we have handled your information, please contact us first at support@adhdandher.com.au — we take it seriously and will respond promptly. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

9. Updates

We may update this policy as the practice and the law evolve; the current version always lives on this page.