
Privacy Policy
Please read our privacy policy. It is organised into sections for easier reading
About us
Take Action 4U helps individuals achieve their goals through personal change. This involves replacing negative thoughts, habits, and behaviours with positive alternatives to enhance well-being. Services include BrainWorking Recursive Therapy (BWRT) and hypnotherapy.
Privacy policy
Throughout this privacy policy, the use of ‘we,’ ‘us,’ or ‘our’ pertains to the business Take Action 4U. When we use ‘you’ or ‘your,’ we mean you, whether you are a visitor to our website or a user of our services, BWRT and hypnotherapy.
This policy explains how Take Action 4U complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Our Privacy Code of Practice sets out our roles and responsibilities under the APPs in more detail. Under Australian Privacy Principle 1 (APP1), we must have a clearly expressed and up-to-date privacy policy that sets out how we manage personal information. You can find out more about the Privacy Act 1988 (Cth) and how it applies to you on the Office of the Australian Information Commissioner’s website – www.oaic.gov.au.

Scope
This policy applies to the Take Action 4U business entity. The scope is limited to our obligations under the Privacy Act 1988 (Cth) (referred to in this document as the Privacy Act) and any other legislation relevant to the protection of personal and sensitive information.
PRINCIPLES
What is personal information?
In the Privacy Act, personal information is defined as ‘information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether it is recorded in a material form or not.’
The term ‘personal information’ covers a broad range of information including:
General information – your identity (name, age, date of birth, sex, marital status), contact details (residential / mailing address, email, telephone number, next of kin).
Sensitive information – includes information or an opinion about an individual’s racial or ethnic origin, political opinion, religious beliefs, sexual orientation, or criminal record, provided that the information or opinion otherwise meets the definition of personal opinion.
Health information – any personal information about your health or disability, such as medications and medical history (this may include sensitive information).
Information can be in any form, including traditional written and digital formats.
What is de-identified information?
De-identified information is personal information that has been processed to remove or alter it so individuals can no longer be identified. Generally, de-identification involves two steps:
-
removing personal identifiers, such as an individual’s name, address, date of birth or other identifying information, and
-
removing or altering other information that may allow an individual to be identified, for example because of a rare characteristic of the individual, or a combination of unique or remarkable characteristics that enable identification.
At Take Action 4U, we de-identify information when professional supervisory advice is required. Your identity will remain anonymous.
Can I be anonymous or use a pseudonym?
The Privacy Act allows individuals to ask to remain anonymous or use a pseudonym (fake name) instead of providing personal information. Because of the nature of the services we provide, you can be anonymous or use a pseudonym only in limited situations, such as when we need advice from a professional supervisor or when you contact us with a general enquiry.
However, if you have a specific need to remain anonymous or use a pseudonym—for example, if you’re concerned about safety in relation to domestic violence—we regret that we cannot provide our services. Even a small change in your behaviour or demeanour may be noticed by your partner and put you at risk. For this reason, we can provide our services only when you are in a safe environment.
What about consent?
Under the Privacy Act, we must collect personal information lawfully and fairly, including asking for consent where practicable. You can withdraw your consent to us collecting your personal information at any time; however, this might make it difficult for us to provide our services to you.
There are also situations permitted under the Privacy Act in which we are required to disclose personal information, including sensitive and health information, without your consent.
These include a serious threat to your life, health, or safety; a risk of harm to yourself or others; suspected serious unlawful activity or misconduct; or when we are legally required to disclose it. These include:
-
Where required or authorised by law (court subpoena)
-
Emergency services (ambulance service, police, etc.
If you are concerned about what information has been collected and disclosed without your consent, please contact us.
For more information about your rights under the Privacy Act in relation to health services, please see the Office of the Australian Information Commissioner (OAIC) website – www.oaic.gov.au.
What information do we collect and why?
We collect personal information—such as your name, home and email addresses, phone number, and payment details—to provide and operate our services. Visiting www.takeaction4u.com.au means you consent to this collection.

How do we gather your personal information, and for what reasons?
We collect personal information through various means:
-
Submit your contact details to receive the Client Intake Form.
-
When you book appointments, confirmed through email.
-
When you provide payment details via Stripe or bank transfer.
-
Zoom links for online appointments.

Third Party Services
Third-party services like those listed above enable us to provide our services and enable you to access them. They require both your information and ours to facilitate this process.We cannot control or guarantee the security or accuracy of website links, apps, cookies (small information files that an end user’s web browser places on their computer when a website is visited), or the policies of authorised third-party providers.
What about the internet?
Whilst we endeavour to provide a secure online environment, there are inherent risks associated with the transmission of information via the internet, and no data transmission over the internet can be guaranteed to be completely secure. We therefore cannot guarantee the security of information you send us over the internet, and you do so at your own risk. We encourage you to take an active role in protecting your personal information. You are responsible for selecting the online messaging method when corresponding with us and for what you disclose. We accept no liability for any damage, loss, or expense arising from any such disclosure. When the personal information we collect is no longer required, we securely de-identify, destroy, and delete it.
What other personal information do we collect and why?
Personal information gathered from the Client Intake Form and during appointment sessions consists of the following:
-
Personal information about your presenting issues.
-
Health information to ensure service suitability.
-
GP details: professional obligation to notify them.
-
Emergency contact details: name and phone number.
-
Occupation.
-
Lifestyle factors.
Sharing any personal information you’re comfortable with can offer insight, help address your concerns, and support your goals. The focus is on what you want to change and how you want to be. You don’t have to share anything that makes you feel uncomfortable or embarrassed, or that’s work-related and strictly confidential, etc., and still make meaningful changes.

What is unsolicited personal information?
Unsolicited personal information is personal information that we have not asked for. If we receive any unsolicited information that is not reasonably necessary or directly related to one or more of our business activities, then we will delete/destroy it as soon as practicable. If you receive information from us that is not meant for you, please delete it immediately and contact us to let us know.
Personal information formats
We keep your personal information mainly in digital format, with paper copies available for reference during appointment sessions.
What about security measures?
We will take practical measures to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These measures include implementing security controls within our information and communications technology systems.
We use multifactor authentication to reduce the risk of unauthorised access and monitor our systems for security threats. We also require strong passwords to access our electronic IT systems, store paper files in locked cabinets, and restrict physical access. Access to this information is limited to authorised personnel.
If there is unauthorised access or disclosure of personal information which is likely to result in serious harm to you, and we have been unable to prevent this, we will notify you and report the breach to the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breach Scheme. You can find out more about the Scheme on the OAIC website – www.oaic.gov.au.
Security measures to the extent possible
Personal information records are mandatory; we keep them on an external device that’s securely stored and retained for at least seven years, after which we securely de-identify, destroy, and delete them in accordance with the Australian Privacy Principles (APP) guidelines. We do not store personal information in the cloud or on a device hard drive.
As mentioned above, we use third-party providers to collect, process, and hold information, depending on our business activities. In these instances, we take reasonable steps towards ensuring protection of personal information.
However, no service provider can guarantee absolute security; with that said, we are committed to implementing measures that enable us to operate to the highest standards within our capabilities.
Accessing and correcting your personal information
If you wish to access, correct, amend, or delete any personal information we hold about you, please contact us at info@takeaction4u.com.au. You will be required to verify your identity beforehand.
How do I make a complaint?
If you believe that we have breached your privacy in our handling of your personal information, you may lodge a complaint with us. Our complaints, feedback and compliments forms are available on our website.If you are unhappy with the resolution of your complaint, or the way we have handled your complaint, you may refer your complaint in writing to the Office of the Australian Information Commissioner (OAIC) by email to enquiries@oaic.gov.au or see their website for more contact details – www.oaic.gov.au.

Commitment to privacy
Our aim is to protect your privacy as much as practically possible. While we store your personal information securely, it’s equally essential that it’s correct and contains only what’s needed to enable us to do our work and protect your privacy.
Therefore, please note the following: We document only the details relevant to your issue—not your entire backstory—to protect your privacy and avoid including overly personal or irrelevant information.
Contact us
If you are concerned about your privacy and would like further information, please contact us. Please make a general enquiry before providing any personal information, sensitive or health information, as we may not need it to answer your query or handle your request. Email: info@takeaction4u.com.au