Privacy Policy
Website, enquiries and psychotherapy services
Effective date: 28 July 2026
Applies to: moniqueaspiteri.com and services provided by Moniquea Spiteri trading as Somatic Synergy®
Moniquea Spiteri trading as Somatic Synergy® (“Somatic Synergy”, “we”, “us” or “our”) respects your privacy and understands that information shared in connection with psychotherapy may be deeply personal. This policy explains how we collect, hold, use, disclose and protect personal information and health information when you visit our website, contact us, complete a form, book or pay for a service, subscribe to updates, or receive psychotherapy or related professional services.
We handle information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Health Records Act 2001 (Vic) and its Health Privacy Principles (HPPs), and other laws that apply to our work. As a private health service provider that holds health information, we are covered by the Privacy Act even if a small-business exemption might otherwise apply.
1. Scope of this policy
This policy applies to personal information and health information relating to:
current, former and prospective psychotherapy clients;
people who make an enquiry, book a discovery call, complete an intake or contact form, join a waitlist, register for an event or subscribe to communications;
referrers, support coordinators, plan managers, family members, carers and other authorised contacts;
website visitors and people who interact with our online content, podcast pages or social media links; and
professional contacts, contractors and service providers where we hold personal information about them.
This website policy sits alongside any client service agreement, informed consent document, telehealth agreement, intake notice or specific collection notice provided to you. If a more specific notice applies to a particular form or service, that notice should be read with this policy.
2. The information we may collect
Personal and contact information
your name, pronouns, date of birth, address, email address and telephone number;
emergency contact, nominated representative, guardian, carer or support-person details;
identity and eligibility information where needed to provide, fund or invoice for services;
appointment, communication, consent, referral, payment and account information; and
information contained in enquiries, correspondence, feedback, complaints or forms.
Health and other sensitive information
Where you seek or receive psychotherapy or related support, we may collect health information and other sensitive information that is reasonably necessary to provide safe, appropriate and continuous care. This may include:
mental and physical health history, trauma history, presenting concerns, symptoms, diagnoses, medications and relevant treatment history;
session notes, assessments, therapeutic goals, treatment plans, risk and safety information, progress, outcomes and referrals;
disability, NDIS, funding, support and care-team information;
information about family, relationships, culture, identity, sexuality, religious or philosophical beliefs, criminal or justice history where relevant to your care; and
documents or information provided by you or, with authority or as permitted by law, by a health practitioner, support person, agency or other third party.
We collect sensitive information only where you consent, where it is reasonably necessary for our functions and permitted by law, or where another lawful basis applies.
Website and technical information
IP address, browser and device type, approximate location, access times, pages viewed, links selected and referring website;
cookie identifiers, form activity and information about how the website is used;
newsletter delivery, opening and link-interaction information, where enabled; and
information generated when you interact with embedded media, reviews, booking tools, podcast services or social platforms.
We do not intentionally use website analytics to create a clinical profile of you. However, information you place in an enquiry, intake or booking form may itself reveal health or other sensitive information.
3. How we collect information
We generally collect information directly from you, including:
during enquiries, consultations, discovery calls, appointments and therapy sessions;
through website forms, intake documents, consent forms, email, telephone, SMS or video conferencing;
through booking, payment and invoicing systems;
when you subscribe, register, download a resource, provide feedback or interact with our content; and
through cookies and similar technologies used by our website and service providers.
Where reasonable and practicable, we will collect health information directly from you. We may also receive information from a referrer, GP, allied health practitioner, hospital, insurer, NDIS participant representative, plan manager, support coordinator, family member, guardian, legal representative, government agency or other person. We will only do so with your consent, where you would reasonably expect it, where it is necessary for safe care, or where required or authorised by law. We will take reasonable steps to make you aware of relevant third-party collection.
4. Why we collect, use and disclose information
We collect, use and disclose information only for purposes connected with our work, including to:
respond to enquiries and assess whether our services may be suitable;
provide psychotherapy, consultation, referral, care coordination, telehealth and related services;
manage appointments, reminders, cancellations, records, payments, invoices, rebates, funding and administration;
communicate with you, your authorised representatives and relevant members of your care or support team;
identify and respond to safety, risk, professional, legal or ethical concerns;
maintain service quality, professional supervision, insurance, accreditation and clinical governance;
operate, secure, troubleshoot and improve the website and business systems;
send resources, newsletters or service updates where you have consented or where permitted by law; and
meet legal, regulatory, taxation, insurance, funding, complaints-handling and record-keeping obligations.
We will not use identifiable therapy information for testimonials, publicity, teaching, research or marketing without specific and informed consent. Choosing not to provide information may mean we cannot respond fully to an enquiry, determine suitability, safely provide a service, process funding or meet our professional obligations.
5. Confidentiality and when information may be shared
Psychotherapy information is treated as confidential. We do not sell or rent personal information. We may disclose the minimum information reasonably necessary:
to a person or organisation you have authorised, such as a GP, health practitioner, family member, support coordinator, plan
manager, insurer, lawyer or other care-team member;
to contractors and service providers who support our website, forms, customer relationship management, communications, telehealth, records, booking, payments, accounting, IT, security or document storage, subject to appropriate privacy and confidentiality arrangements;
for professional supervision, consultation, quality assurance or professional advice, ordinarily without identifying you unless identification is necessary and lawful;
where reasonably necessary to lessen or prevent a serious threat to life, health or safety, or to respond to an emergency;
where required or authorised by law, including a valid subpoena, court order, warrant, statutory notice, mandatory reporting obligation or other legal process;
to investigate or respond to a complaint, legal claim, professional indemnity matter, data breach, fraud or security incident; or
in connection with a lawful business transition, provided confidentiality and privacy protections continue to apply.
Where practicable and lawful, we will discuss a proposed disclosure with you first and limit it to what is necessary. Confidentiality is not absolute. Any limits specific to your therapy will also be explained through informed consent and the therapeutic agreement.
6. Children, young people and authorised representatives
Where services involve a child or young person, we consider their age, maturity, capacity, safety, legal rights and the role of a parent or guardian. We explain, as clearly as possible, who may access information and the limits of confidentiality. A parent, guardian, nominee, attorney or other representative may act for a person only where they have appropriate authority. We may request evidence of that authority and will still respect the individual’s privacy, preferences and legal rights.
7. Website forms and communicating online
Website, email, SMS and online forms are convenient but no internet transmission can be guaranteed to be completely secure. Please avoid including detailed trauma histories, extensive clinical records or urgent safety information in a general website contact form. Use the form for initial contact and we can arrange a more appropriate way to share sensitive material where needed.
Our website is not an emergency or crisis service. Form submissions, emails and social media messages may not be monitored outside business hours. If there is an immediate risk to life or safety, call 000 or attend the nearest emergency department.
8. Cookies, analytics and embedded services
Our website and its providers may use essential cookies and similar technologies to operate forms, remember preferences, protect against misuse, understand website performance and support communications. Third-party content, such as embedded audio, video, reviews, maps, social media or podcast players, may allow those providers to collect technical information under their own privacy terms.
You can usually block or delete cookies through your browser. Doing so may affect how parts of the website or forms work. Where legally required, non-essential cookies should not be activated until you have made a choice through the website’s cookie controls.
9. Service providers and overseas disclosure
We use trusted third-party systems to operate the website and practice. These may include HighLevel/LeadConnector for website hosting, forms and customer relationship management; Square for bookings, invoicing and payments; and providers of email, telecommunications, telehealth, cloud storage, accounting, security and professional services.
Some providers may store, process or support information outside Australia, including in the United States, or in other countries where they or their subcontractors operate. Overseas privacy laws may differ from Australian law. We take reasonable steps when selecting and using providers, limit the information shared to what is needed, and seek contractual or technical safeguards where reasonably available. Provider locations and subprocessors can change, so their current privacy terms may provide further detail.
Payment card information is generally processed by the payment provider. We do not ordinarily receive or retain complete card details.
10. Direct marketing
Clinical communications and marketing communications are managed separately as far as practicable. We may send you newsletters, resources, event information or service updates where you have consented or where otherwise permitted by law. We do not use sensitive health information to target marketing without express consent.
You may unsubscribe at any time by using the unsubscribe link or contacting us. We may still send non-marketing messages that are reasonably necessary for appointments, safety, service delivery, invoicing, legal obligations or an existing professional relationship.
11. Data quality, security and access controls
We take reasonable steps to keep information accurate, complete, current, relevant and protected from misuse, interference, loss, unauthorised access, modification and disclosure. Measures may include:
role-based or need-to-know access and confidentiality obligations;
passwords, multi-factor authentication, encryption and secure system settings where available;
secure devices, backups, updates, malware protection and physical safeguards;
careful verification before releasing information and secure disposal practices; and
review of service providers and response procedures for privacy or security incidents.
No system is completely risk-free. If we suspect a data breach, we will act to contain and assess it, reduce possible harm, and notify affected individuals and the Office of the Australian Information Commissioner where required under the Notifiable Data Breaches scheme.
12. Retention and disposal
We retain clinical records for the period required by law and professional obligations. In Victoria, this will generally be:
for an adult, at least seven years from the date the last health service was provided; and
for information collected while a person was under 18, at least until the person turns 25.
Some information may need to be kept longer because of legal proceedings, funding, insurance, taxation, complaint handling, safeguarding, professional requirements or another lawful reason. Website enquiries and administrative records are kept only for as long as reasonably necessary for their purpose and applicable obligations. When information is no longer required, we take reasonable steps to securely destroy or permanently de-identify it, subject to lawful backup and archival cycles.
13. Accessing or correcting your information
You may ask to access personal or health information we hold about you or request a correction. Please contact us in writing and describe the information requested. We may ask for proof of identity and authority before responding.
Access may be provided in an appropriate form, such as inspection, a copy, an explanation or a summary. In limited circumstances, the law allows or requires us to refuse or restrict access, for example where release would unreasonably affect another person’s privacy, pose a serious threat, reveal confidential evaluative material, or prejudice legal proceedings. If access or correction is refused, we will generally give written reasons and explain available complaint options, unless the law prevents us from doing so.
We do not charge for making a request. A reasonable fee may apply for the time and cost involved in providing access where permitted by law. We will discuss any proposed fee before proceeding.
14. Anonymity and pseudonyms
You may make a general website enquiry anonymously or using a pseudonym where practicable. We may need your identity and accurate details to provide psychotherapy safely, verify authority, process payments or funding, maintain health records, or comply with law.
15. Privacy complaints
If you have a privacy concern or complaint, please contact us first so we can try to resolve it promptly and respectfully.
Privacy contact: Moniquea Spiteri
Business: Somatic Synergy®
Email: [email protected]
Location: Mount Martha, Victoria, Australia
Please include enough information for us to understand the concern and how you would like it addressed. We will acknowledge and assess the complaint within a reasonable period and keep you informed. If you are not satisfied, you may contact:
Office of the Australian Information Commissioner (OAIC): oaic.gov.au
Health Complaints Commissioner Victoria: hcc.vic.gov.au
Depending on the issue, another health complaints, professional, funding or regulatory body may also have jurisdiction.
16. External links
Our website may link to third-party websites or services. We are not responsible for their content, security or privacy practices. Please review their privacy information before providing personal information.
17. Changes to this policy
We may update this policy when our services, systems, legal obligations or privacy practices change. The current version will be published on our website with its effective date. Material changes may also be communicated through an appropriate channel.
Legal framework and further information
Document note: This policy is tailored to the information-handling activities described above. It should be checked against the final website configuration, active forms, cookie settings, service-provider contracts and actual practice procedures before publication. It is prudent to obtain Australian legal review, particularly if services are offered to clients outside Victoria or Australia.
“Trauma, when met with depth, becomes integration.”
Moniquea Spiteri is a Somatic Psychotherapist, educator, and founder whose work sits at the forefront of a growing global movement in trauma integration, bringing together advanced body based psychotherapies, nervous system science, and professional reform.
