Privacy Policy

This Privacy Policy applies to people who:

• visit this website;
• submit a general enquiry;
• submit a forensic psychology enquiry;
• contact Dr Norris by email, phone, or website form;
• enquire about telehealth psychological services;
• enquire about forensic psychological assessments or reports;
• act on behalf of another person, client, patient, defendant, or legal matter;
• are solicitors, barristers, referring professionals, family members, support people, or prospective clients.

Dr Norris handles information in accordance with applicable Australian and New South Wales privacy and health information requirements.

Relevant obligations may include:

• the Privacy Act 1988 (Cth);
• the Australian Privacy Principles (APPs);
• the Health Records and Information Privacy Act 2002 (NSW);
• the NSW Health Privacy Principles (HPPs);
• applicable professional and ethical obligations for psychologists;
• requirements of the Psychology Board of Australia;
• relevant Ahpra obligations for registered health practitioners.

The OAIC explains that Australian privacy law has strict rules about how health service providers collect, use, and disclose health information. The Psychology Board of Australia also sets standards of behaviour and practice expected of registered psychologists in Australia.

Where professional obligations require a higher standard than this policy, those professional obligations prevail.

Depending on how you use the website or contact the practice, Dr Norris may collect:

General contact information

• name;
• email address;
• phone number;
• preferred contact method;
• suburb or location;
• information included in a general enquiry.

Health and clinical enquiry information

• general reason for enquiry;
• broad mental health concerns;
• referral status;
• treating practitioner details, where provided;
• telehealth suitability information;
• appointment-related information.

Forensic psychology enquiry information

Where you submit a forensic psychology enquiry, the information collected may include:

• your name and contact details;
• the name and role of the person making the enquiry;
• solicitor, barrister, law firm, or referring professional details;
• matter type;
• court context;
• general description of the forensic assessment or report required;
• whether the matter relates to a Section 14 application, sentencing, mitigation, diversion, or another legal issue;
• general background information relevant to determining whether the enquiry is appropriate;
• information about the person who may be assessed, where provided.

Sensitive information

Some information submitted through this website may be considered sensitive information, including:

• health information;
• mental health information;
• psychological history;
• disability or cognitive impairment information;
• criminal law matter information;
• legal matter information;
• information about alleged conduct;
• family, social, developmental, or psychosocial background information.

Please do not submit unnecessary sensitive information through website forms unless it is required for the enquiry.

When you visit the website, some technical information may be collected automatically by the website platform, hosting provider, analytics tools, security tools, or form systems.

This may include:

• IP address;
• browser type;
• device type;
• pages visited;
• approximate location;
• time and date of visit;
• referring website;
• website interaction data;
• cookies or similar technologies.

This information is generally used to maintain website security, understand website performance, improve usability, prevent misuse, and support basic analytics.

Information may be collected when you:

• submit the general enquiry form;
• submit the forensic psychology enquiry form;
• send an email;
• call the practice;
• leave a voicemail;
• provide information during intake or appointment booking;
• provide documents or background material after an initial enquiry;
• communicate through a third-party form, website, CRM, email, or telehealth platform;
• browse the website.

Where reasonable and practicable, health information should be collected directly from the individual concerned. The OAIC states that health providers should collect health information directly from the patient where reasonable and practicable.

Dr Norris may collect and use information for purposes including:

• responding to general enquiries;
• responding to forensic psychology enquiries;
• determining whether a service may be appropriate;
• arranging or managing appointments;
• communicating with you or your representative;
• assessing telehealth suitability;
• obtaining instructions or clarification for forensic matters;
• preparing for clinical or forensic services where formally agreed;
• managing practice administration;
• maintaining professional records;
• complying with legal, ethical, insurance, regulatory, and professional obligations;
• protecting the safety of clients, third parties, or the public where required or authorised by law;
• improving website functionality and security.

The general enquiry form is intended for general questions about Dr Norris's services.

By using the general enquiry form, you acknowledge that:

• the form is for enquiry purposes only;
• submitting the form does not create a psychologist-client relationship;
• the form should not be used for emergencies;
• you should avoid including unnecessary sensitive information;
• further information may be required before any service can be offered.

The forensic psychology enquiry form is intended for preliminary enquiries about forensic psychological assessments and reports.

By using the forensic enquiry form, you acknowledge that:

• the form is for preliminary enquiry purposes only;
• submitting the form does not engage Dr Norris to prepare a report;
• submitting the form does not create a therapeutic relationship;
• no forensic opinion is provided through the form;
• Dr Norris may require further instructions, documents, consent, identity details, or clarification before accepting a matter;
• Dr Norris may decline a matter where appropriate;
• detailed legal, medical, or forensic documents should not be uploaded or submitted unless specifically requested through an appropriate channel.

Forensic enquiries may contain sensitive legal and health-related information. Please only provide what is reasonably necessary for Dr Norris to understand the nature of the enquiry.

Dr Norris provides consultations by telehealth, including phone or video, unless otherwise stated and agreed.

Information collected for telehealth purposes may include:

• contact details;
• appointment details;
• location at the time of appointment, where relevant for safety and professional reasons;
• consent information;
• information required to determine whether telehealth is suitable.

Telehealth may not be suitable for every person or circumstance. If telehealth is not appropriate, Dr Norris may discuss alternative options or recommend another service.

Information may be used to:

• respond to your enquiry;
• contact you about services;
• assess whether Dr Norris can assist;
• coordinate appointment arrangements;
• communicate with legal representatives or referring professionals where authorised;
• manage telehealth appointments;
• prepare or maintain professional records where services are provided;
• meet legal and regulatory requirements;
• improve website reliability and safety;
• protect against misuse, spam, security threats, or unlawful activity.

Information will not be used for unrelated marketing without consent.

Dr Norris may disclose information where:

• you have consented;
• disclosure is required or authorised by law;
• disclosure is necessary to respond to risk of serious harm;
• disclosure is required for professional, ethical, insurance, regulatory, or legal obligations;
• disclosure is necessary to obtain advice from professional advisers, insurers, or legal representatives;
• disclosure is required for forensic reporting, where instructions and consent allow;
• disclosure is necessary to operate the website, forms, email, telehealth systems, or practice administration.

For forensic matters, information may be disclosed to legal practitioners, courts, referring parties, or other authorised recipients as required by the scope of the assessment or report.

This website and practice may use third-party providers to support:

• website hosting;
• website security;
• website development and maintenance;
• form submissions;
• email communication;
• CRM or enquiry management;
• appointment coordination;
• analytics;
• telehealth platforms;
• document management;
• technical support.

These providers may process or store information as necessary to operate the website and related services.

Reasonable steps should be taken to use reputable providers and limit access to what is necessary. However, no online system can be guaranteed to be completely secure.

The website may be developed, maintained, or technically supported by an external website provider, such as Viveonix Web Systems or another authorised provider.

The website provider may access limited technical information or form-routing systems where necessary to maintain the website, troubleshoot issues, support form delivery, improve security, or provide technical assistance.

The website provider is not responsible for clinical decisions, psychological services, forensic opinions, legal outcomes, or professional services provided by Dr Norris.

This website may use cookies or similar technologies to:

• remember basic preferences;
• improve website performance;
• understand how visitors use the website;
• protect against spam or security risks;
• support analytics and troubleshooting.

You may disable cookies in your browser settings, although some website features may not function correctly.

If analytics tools are used, they should be configured in a privacy-conscious way where practicable.

Reasonable steps are taken to protect personal information, sensitive information, and health information from misuse, interference, loss, unauthorised access, modification, or disclosure.

Security measures may include:

• secure website hosting;
• access controls;
• password protection;
• secure email or document handling where appropriate;
• limiting access to authorised persons;
• using reputable service providers;
• maintaining professional recordkeeping practices.

However, electronic communication and online forms carry inherent risks. You should avoid submitting unnecessary sensitive information through the website.

Information may be retained for as long as required for:

• responding to enquiries;
• appointment administration;
• clinical or forensic recordkeeping;
• professional obligations;
• insurance requirements;
• legal or regulatory obligations;
• dispute management;
• business administration.

Different retention periods may apply depending on whether the information relates to a general enquiry, clinical services, forensic assessment, report preparation, or legal matter.

Where information is no longer required, reasonable steps will be taken to securely destroy or de-identify it, subject to applicable legal and professional obligations.

You may request access to personal information held about you, or request correction if you believe it is inaccurate, incomplete, out of date, or misleading.

Requests should be made in writing using the contact details below.

Access may be refused or limited in certain circumstances, including where refusal is required or authorised by law, where access would affect another person's privacy, where the information relates to legal proceedings, or where professional obligations apply.

Some third-party service providers used by the website or practice may store or process information outside Australia.

Where this occurs, reasonable steps should be taken to ensure information is handled appropriately. However, by using the website or submitting forms, you acknowledge that some technical systems may involve overseas processing or storage.

This website may contain information about services relevant to adults and, where applicable, adolescents. However, enquiries involving children or young people may require additional consent, guardian involvement, referral information, or suitability assessment.

If you are under 18, please involve a parent, guardian, or appropriate support person unless it is not safe or appropriate to do so.

Dr Norris is bound by professional confidentiality obligations. However, confidentiality is not absolute.

Information may need to be disclosed where:

• required or authorised by law;
• there is a serious risk to the safety of the person or another person;
• child protection or mandatory reporting obligations apply;
• disclosure is required by court order, subpoena, or legal process;
• disclosure is necessary for professional supervision, legal advice, insurance, or regulatory obligations;
• disclosure is part of an agreed forensic assessment or report process.

The Psychology Board's Code of Conduct for psychologists includes standards relating to privacy and confidentiality.

Confidentiality in forensic psychological assessments differs from confidentiality in therapy.

In forensic matters, information may be collected, analysed, and reported for a legal purpose. The final report may be provided to the instructing party, legal representatives, court, or other authorised recipients depending on the terms of the referral and legal context.

Before a forensic assessment proceeds, the limits of confidentiality and the purpose of the assessment should be explained.

If a data breach occurs that is likely to result in serious harm, appropriate steps will be taken in accordance with applicable privacy laws, including assessment, containment, notification where required, and remedial action.

The OAIC provides guidance for health service providers about data breach action planning and privacy obligations.

This website does not publish clinical testimonials or patient outcome claims about regulated health services.

Ahpra states that the National Law does not allow testimonials or purported testimonials to advertise regulated health services or businesses providing regulated health services.

Information submitted through website forms will not be used to publish testimonials or promote services without proper authority and compliance with applicable health advertising rules.

This website may link to third-party websites, professional resources, government websites, legal information, crisis support services, or external platforms.

Dr Norris is not responsible for the privacy practices, content, accuracy, or security of external websites.

You should review the privacy policies of any external websites you visit.

If you have concerns about how your personal information or health information has been handled, please contact the practice in the first instance using the details below. For further detail on website use, see our Terms of Service.

You may also be able to contact relevant privacy regulators, including:

• the Office of the Australian Information Commissioner (OAIC);
• the Information and Privacy Commission NSW (IPC NSW).

The OAIC states that individuals can lodge a complaint if they believe their health information has been mishandled.

This Privacy Policy may be updated from time to time.

The updated version will be published on this website with a revised "Last updated" date.

Your continued use of the website after changes are published indicates acceptance of the updated Privacy Policy.

For privacy questions, access or correction requests, or complaints, please contact: