Lerni Pty Ltd (ABN 13 691 386 777) provides professional supervision to organisations and individuals across Australia. This policy explains how we collect, use, store and disclose personal information, including health information, and how you can access or correct the information we hold about you.
Because our supervisors are psychologists and therapists providing a health service, we are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and by state and territory health records laws where they apply.
The information we collect
We only collect the personal information we need to provide our services and run our business. Depending on how you deal with us, this may include:
Health and sensitive information
Session notes can include health information, information about your wellbeing, and information about other people you discuss in supervision. This is sensitive information under the Privacy Act. We only collect it with your consent, and only where it is reasonably necessary to provide supervision to you.
Session notes focus on your professional practice. Your supervisor records what is needed to provide continuity from one session to the next, and nothing more.
AI note-taking
Some of our supervisors use Heidi, an AI note-taking tool, to help prepare session notes. We will ask for your consent before it is used in a session. You can decline, or withdraw your consent at any time, and this will not affect your supervision in any way. Your supervisor reviews every note before it is saved to your record.
How we collect information
We collect personal information directly from you where we can: through the enquiry forms and chat on our website, by email or phone, and during supervision sessions. When an organisation arranges supervision for its staff, the organisation may give us your name, contact details and role so we can contact you and schedule your sessions.
How we use information
We use personal information to:
What organisations receive
When an organisation funds supervision for its staff, it receives confirmation that sessions took place and, if agreed in advance, de-identified themes across its workforce. It never receives the content of an individual session.
The only exceptions are where we are required or permitted by law to disclose information, including where there is a serious threat to someone's life, health or safety, or where a mandatory reporting obligation applies, such as a child protection concern. Where it is safe and lawful to do so, your supervisor will talk to you first.
Who we share information with
We do not sell personal information. We share it only where needed to provide our services, with:
Information stored outside Australia
Our supervisors and staff are based in Australia. Some of the service providers we use, including Pipedrive, Google, Reddit and Meta, may store or process information on servers outside Australia. We take reasonable steps to make sure these providers handle personal information in a way that is consistent with the Australian Privacy Principles.
Marketing
We may send you updates about our services and articles we publish. Every marketing email includes a way to unsubscribe, and you can also ask us to stop at any time. We never use anything discussed in supervision for marketing.
Our website
Our website uses Google Analytics, which places cookies in your browser to measure how the site is used. The information is collected in aggregate and is not used to identify you. We also use the Reddit Pixel, which helps us measure how our Reddit advertising performs and show our ads to people who have visited our website. We use the Meta Pixel in the same way for our Facebook and Instagram advertising. You can block cookies in your browser settings or install the Google Analytics opt-out browser add-on. You can turn off personalised ads in your Reddit account privacy settings, and manage how Meta uses this information in the Ad Preferences section of your Facebook or Instagram account.
The enquiry forms and chat on our website are provided by Pipedrive. Information you enter is sent directly to Pipedrive and handled under this policy and Pipedrive's own privacy terms.
How we store and protect information
We store personal information electronically in secure systems that require a login, and we limit access to the people who need it to do their work. We take reasonable steps to protect information from misuse, interference, loss, and unauthorised access, change or disclosure.
We keep health records for the period required by law. This is generally at least seven years after the last session, or until the person turns 25 if they were under 18 when the information was collected. After that, we securely destroy or de-identify it.
Dealing with us anonymously
You can make a general enquiry without giving us your name. To provide supervision, we need to know who you are.
Accessing and correcting your information
You can ask for a copy of the personal information we hold about you, or ask us to correct it, by contacting us using the details below. We will respond within 30 days. There is no charge for making a request. If we cannot give you access, for example because it would unreasonably affect someone else's privacy, we will tell you why in writing.
Data breaches
If a data breach is likely to cause serious harm to anyone whose information is involved, we will notify the people affected and the Office of the Australian Information Commissioner, as required by the Notifiable Data Breaches scheme.
Complaints
If you have a concern about how we have handled your personal information, please contact us first. We will look into it and respond within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.
Changes to this policy
We may update this policy from time to time. The current version is always published on this page.
Contact us
Privacy Officer, Lerni Pty Ltd
Email: privacy@lerni.com.au
Phone: 0439 309 865