Privacy and your records
Your records are kept for 7 years on Australian servers, never sold, and handled under the Privacy Act 1988. Access requests are answered within 30 days.
Last reviewed 8 August 2026
Your personal and health information is held securely on Australian servers, is never sold, and is not transferred overseas without your extra written consent. Norwest Wellbeing (operated by Damas Group Pty Ltd, ABN 58 162 956 274) complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and with the NSW Health Records and Information Privacy Act 2002.
What we collect and why
We collect the information needed to deliver clinical care: your contact details, intake form answers, session notes and, where you consent, therapeutic recordings. Recordings have their own consent rules. See session recording consent.
How long records are kept
Clinical records are retained for 7 years from your last appointment. For clients under 18, records are kept for 7 years from when they turn 18 if that period is longer. This retention is a legal requirement for health records, not a choice we make per client.
Accessing your records
You can request access to your records at any time. Access requests are answered within 30 days. Contact our Privacy Officer, Paul Smith, at privacy@norwestwellbeing.com.au or (02) 8069 9777.
What happens if something goes wrong
If you believe your privacy has been mishandled, raise it with the Privacy Officer. Complaints are acknowledged within 7 days and investigated within 30 days, and you have external options too: the full process, including OAIC and NSW Privacy Commissioner contacts, is in complaints and feedback.
Who to contact
Privacy Officer: Paul Smith. Privacy@norwestwellbeing.com.au. (02) 8069 9777. The full privacy policy is at /privacy. What we can and can't disclose about your therapy is covered separately in confidentiality.
