Privacy Policy
Last updated 24 August 2026
I’m Kiran Narang. I run Wild Ground Therapy, a solo practice on the Gold Coast. This page explains what information I collect through this website, what I do with it, and how you can get it back or ask me to delete it.
I’ve written it in plain English on purpose. If anything here isn’t clear, email me at kiran@wildgroundtherapy.com.au and I’ll explain it properly.
I’m bound by the Privacy Act 1988 and the Australian Privacy Principles. Health providers don’t get the small business exemption, so these rules apply to me whatever the size of my practice.
What I collect through this website
When you just visit. My website records the usual technical information: your IP address, the type of device and browser you’re using, which pages you looked at, how long you stayed, and which site or ad sent you here. I use Google Analytics and Google Ads for this. It’s aggregate information about traffic, and I’m not sitting here matching it to you personally.
When you fill in a form. If you download the ADHD coaching funding guide or sign up for anything else, I collect your first name and email address. That’s it. I don’t ask for anything I don’t need.
When you contact me. If you email me, ring me, or send a message through the site, I have whatever you chose to tell me. Sometimes people share quite a lot about what’s going on for them in that first message. I treat it as confidential from the moment it arrives.
When you book. Bookings go through Halaxy, my practice management system. What you enter there is covered in the client section further down.
Why I collect it
- To send you the thing you asked for, like the funding guide
- To reply to you
- To send you occasional emails about ADHD, funding and my practice, if you’ve signed up for them
- To see which pages and ads are working, so I’m not wasting money on ones that aren’t
- To run the practice: appointments, notes, invoicing and rebates
I don’t sell your information. I don’t trade it, rent it, or hand it to anyone for their marketing. That isn’t a legal formality, it’s just not something I’d do.
Emails from me
You’ll only get marketing emails from me if you asked for them, either by filling in a form or by sending me your email address and asking for something. Every one of them has an unsubscribe link at the bottom, and it works immediately. You can also just reply and tell me to take you off, and I will.
My email list runs on MailerLite. When you subscribe, your name and email address are stored on their systems.
Cookies and tracking
This site uses cookies. Some are needed to make the site work at all. Others are analytics and advertising cookies from Google, which tell me things like how many people read a page and whether someone who clicked an ad went on to book.
If you’d rather not be tracked, you can block or delete cookies in your browser settings, and you can opt out of Google’s advertising cookies at adssettings.google.com. Blocking them won’t stop you using the site.
If you’re a client
Once you book a session, I’m holding health information, which the law treats as more sensitive than ordinary personal information. Here’s how that works.
What I hold. Your contact details, date of birth, Medicare or NDIS or insurer details where they apply, your referral and mental health treatment plan if you have one, session notes, correspondence with your GP or referrer, and invoices.
Where it lives. In Halaxy, which stores Australian practice data in Australia. Telehealth sessions run over Zoom or Halaxy’s built-in video.
Card details. Most people enter their card details on the intake form, which goes straight into Halaxy’s payment system. Occasionally someone gives me their card details in session and I type them into Halaxy to process the payment. Either way the card number sits in Halaxy’s payment system and not with me. I don’t write card numbers down, save them in my phone or email, or keep them anywhere outside Halaxy.
Notes and AI. I use AI assistance for some clinical note-taking. I ask for your consent to this separately at intake, and you can say no without it affecting your care in any way. If you’ve already said yes and want to change your mind, tell me at any point.
Who I share it with. Only where you’ve agreed, or where the law requires it. In practice that means your GP or referrer if you’ve consented, Services Australia for Medicare claiming, and the NDIS, WorkCover Queensland, DVA, Victim Assist Queensland or your private health fund where they’re funding your sessions.
The limits of confidentiality. There are three situations where I may have to share something without your consent: if I believe you or someone else is at serious risk of harm, if I believe a child or young person is at risk, or if a court subpoenas your records. If I ever have to do any of these, I’ll tell you unless doing so would make things less safe.
Who else handles your information
I’m one person, so I rely on a small number of services to run the practice:
- Halaxy for bookings, records and invoicing
- MailerLite for the email list
- Google for website analytics and advertising
- Zoom for some telehealth sessions
- My website host and email provider
Each of them can only use your information to provide their service to me.
Information sent overseas
Some of those services are based outside Australia, so some of your information is stored or processed overseas. The main ones are the United States (Google, Zoom, and MailerLite’s parent company) and the European Union (MailerLite’s data centres). Halaxy stores Australian practice data in Australia, though some of its own suppliers are in the United States.
Your clinical records are not sent overseas for storage.
How I keep it safe
Your records sit in Halaxy, behind a password and two-factor authentication, which means a password alone isn’t enough to get in. My email account is protected the same way. The website runs over an encrypted connection. The systems I use are the ones built for health practices, with their own security certifications, rather than a spreadsheet on my laptop.
No system is perfect. If there’s ever a data breach that’s likely to cause you serious harm, I’m required to tell you and the Office of the Australian Information Commissioner, and I will.
How long I keep it
Client records: at least seven years after our last session. If you were under 18 when we worked together, until you turn 25. This is the standard benchmark for allied health.
Email subscribers: until you unsubscribe, or until you ask me to delete you.
Enquiries that don’t become bookings: about two years, then deleted.
Seeing your information, or fixing it
You can ask me for a copy of what I hold about you, and you can ask me to correct anything that’s wrong. Email kiran@wildgroundtherapy.com.au and I’ll come back to you within 30 days. There’s no charge for this.
Very occasionally I might not be able to hand over everything, for instance if releasing something would put someone at risk. If that happens I’ll explain why in writing, and we can usually find another way through, like a summary instead of the raw notes.
You can also ask me to delete your information. If you’ve been a client I have to keep your clinical records for the retention period above, but I can remove you from everything else straight away.
If you’re not happy
Tell me first. Email kiran@wildgroundtherapy.com.au or ring 0432 138 066. I’ll acknowledge it within a few days and give you a proper answer within 30 days. Most things are a misunderstanding and get sorted quickly.
If you’re not satisfied with how I’ve handled it, you can take it to the Office of the Australian Information Commissioner:
- oaic.gov.au
- 1300 363 992
- GPO Box 5288, Sydney NSW 2001
If your concern is about my professional conduct rather than your privacy, you can contact the Australian Association of Social Workers, who I’m accredited with (AASW 677542).
Changes to this page
If I change how I handle information, I’ll update this page and change the date at the top. If it’s a significant change and you’re on my email list, I’ll tell you.
Getting in touch
Kiran Narang
Wild Ground Therapy
Gold Coast, Queensland
kiran@wildgroundtherapy.com.au
0432 138 066
Accredited Mental Health Social Worker · AASW 677542 · Medicare Provider 1974371H · ABN 31 347 220 634