Privacy Policy – Counselling Services
21 August 2025
​
This Privacy Policy explains how I collect, use, store, and protect personal information in the course of providing counselling services. I am committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 2020 (New Zealand) and the Health Information Privacy Code 2020.
​1. Information I Collect
In providing counselling, I may collect and store information such as:
​
-
Your name, contact details, and date of birth.
-
Relevant personal history and information you choose to share.
-
Counselling records, including session notes and treatment plans.
-
Appointment and billing information.
2. How I Collect Information
I collect information when:
​​
-
You provide it to me directly (e.g., during sessions, through forms, or by email).
-
I record notes to support your counselling process.
-
You make appointments or payments.
3. Why I Collect and Use Your Information
Your information is collected so I can:
​​
-
Provide safe, effective, and professional counselling services.
-
Keep accurate records of our work together.
-
Contact you about appointments or follow-ups.
-
Manage billing and administration.
-
Meet professional, legal, and ethical obligations.
4. Sharing of Information
Your information is confidential. I will not share it unless:
​​
-
You give consent for me to share it (e.g., with another health professional).
-
I am legally required to share it (e.g., by court order).
-
There is a serious risk of harm to you or others.
-
It is required for professional supervision, where identifying details are removed.
5. How Your Information is Stored and Protected
Records are stored securely in (state method, e.g., encrypted digital files and/or locked physical storage).
Access is limited to me as your counsellor. Security measures (such as passwords and encryption) are in place to protect your data.
6. How Long Records are Kept
Counselling records are kept for at least 7 years after our last session, in line with professional and legal requirements. After that, they may be securely destroyed.
7. Accessing and Correcting Your Information
You have the right to see the information I hold about you. You may request corrections if you believe it is inaccurate.Requests can be made by contacting me (see below). I will respond within 20 working days, as required by the Privacy Act.
8. Your Privacy Rights
Under the Privacy Act 2020, you have the right to:
​
-
Know why your information is collected.
-
Access and request corrections to your information.
-
Make a complaint if you believe your privacy has been breached.
​
​Complaints can be made directly to me, or to the Office of the Privacy Commissioner at [www.privacy.org.nz](https://www.privacy.org.nz).
9. Changes to This Policy
This policy may be updated from time to time. The most current version will always be available on request.
10. Contact Details
If you have any questions or concerns about this Privacy Policy, please contact:
​
Dr Mandy Lacy
Email: mandy@mandylacy.nz
Phone: 0273981744
