What we collect when you enquire.
Your first name and (optionally) last name, email address, and (optionally) phone number.
How you'd like us to contact you (email or phone).
The kind of counselling you're asking about (individual, couples, family or not sure).
The website page you sent the enquiry from.
That you agreed to our service consent, with the time we recorded it and the version of this notice you were shown.
When you submitted the form.
That the enquiry is for our counselling service.
A marketing-consent value, which is always "no".
The form does not ask for, and cannot send, any information about your health, history or circumstances.
The safety question. When you contact us about counselling, we first ask whether your enquiry involves an immediate safety concern, crisis, or domestic or family violence.
Your answer only changes what the page shows you, such as urgent support services and options for safe contact. It is never sent to us or stored.
Your answer to this question does not prevent you from asking Shifting Lives to contact you. If you later tell us that no contact method is safe, we will not send a contact request. If you answer "Yes / I'm not sure" or "Prefer not to say", or you ask for discreet contact, you can send a restricted contact request instead of the standard enquiry (see "Discreet or restricted contact requests" below).
Why we collect it. To respond to your enquiry, follow it up using the contact method you chose, and help you book.
Booking. You can book a session directly on HotDoc, an external online booking service, either straight away or after you send an enquiry. HotDoc passes your booking to our clinical record and appointment system, Cliniko. HotDoc may also send you its own booking confirmations and reminders, and HotDoc's own privacy policy applies to the information you give HotDoc. If you need discreet contact, please use our Contact page and ask for discreet contact instead.
Discreet or restricted contact requests. If you ask for discreet contact, or the page offers you a restricted contact request, we collect only what we need to contact you safely:
a name we can use;
the email address and/or phone number you want us to use;
your preferred contact method (email, phone call or SMS);
an optional time and the time zone it refers to;
whether we may leave a voicemail or use the word "counselling" in messages;
an optional short note about how to contact you safely.
Please don't tell us about your health, a crisis or a family-violence situation in that note.
How we handle a restricted request:
It is sent to our staff as an email to our business mailbox, support@shiftinglives.com.au. That email, and any messages we exchange with you about it, stay in that mailbox only. They are not forwarded to anyone's personal email.
It is not added to our customer-relationship, booking or mailing tools.
It is never used for marketing or advertising.
We don't send you any automatic email or text message. We contact you only by the method and at the time you choose.
When we've finished following up, we close the request. After we close the request, we keep the messages only while they are reasonably needed for follow-up. We review them for deletion no later than 90 days after closure, and may delete them sooner when they are no longer needed. We may retain them for longer if required by law, or where reasonably necessary to deal with a complaint, dispute, consent question or another documented operational or legal matter.
We also keep a short record that the request was received and closed. It holds no name or contact details.
Service messages (not marketing). We send you service messages only about your own enquiry or booking. They all come from support@shiftinglives.com.au:
an automatic acknowledgement that we received your enquiry;
a personal follow-up from our staff, by the contact method you chose;
if you book an online session, an email from our staff with your session time and joining link.
Staff create each online session by hand and send the link themselves. The link is not kept in our enquiry or contact systems.
Our staff may also get an internal reminder to follow up. That reminder contains a reference number only, not your name or contact details, and nothing is sent to you because of it.
Marketing. We do not send marketing to counselling enquirers. Making an enquiry never adds you to a mailing list, and our records show your counselling marketing consent as "no".
Stopping contact and withdrawing consent.
You can withdraw your consent for us to contact you about your enquiry at any time by emailing support@shiftinglives.com.au. We will then stop following it up.
If you already have a booking, we may still need to contact you about that booking until it is cancelled.
Withdrawing consent does not delete records we must keep.
Access, correction and deletion.
To ask for a copy of the personal information we hold about you, to ask us to correct it, or to ask us to delete your enquiry record, email support@shiftinglives.com.au.
We may need to confirm who you are before we act.
We will respond within a reasonable time, and usually within 30 days. There is no charge for making a request.
Clinical records held in Cliniko are subject to separate professional record-keeping obligations and may not be deletable on request.
Health and sensitive information.
The fact that someone asks about counselling, and the kind of counselling they ask about, may itself be sensitive. We treat enquiry records accordingly: staff access only, and no copies into marketing tools.
Our standard enquiry form has no free-text box. A restricted contact request has one optional short note (up to 200 characters), for instructions on how to contact you safely only.
Details about your health, your circumstances and your sessions are held only in our clinical record system, Cliniko. They are never entered into our enquiry or contact systems.
Our internal staff dashboard shows enquiry references, enquiry status, the kind of counselling asked about, and appointment times, types and set-up status. It shows no names, contact details or clinical information.
Online sessions. Online sessions are arranged by our staff by hand. A staff member creates the session and emails you the joining link from support@shiftinglives.com.au. The calendar entry used to run the session has a neutral title and does not include your name.
Who handles your information.
Framer: Hosts our website and the enquiry form. The form sends your enquiry straight to n8n; Framer does not store it. Where your information is stored: United States (Amazon Web Services), with additional hosting infrastructure in Europe and Asia-Pacific and a worldwide content-delivery network
n8n: Our form service: checks each enquiry, records it in ActiveCampaign and sends our service emails. A restricted contact request is not recorded in ActiveCampaign: n8n emails it to our staff and keeps only a status record without your name or contact details. Holds appointment times and types (no names) for our staff task list. Where your information is stored: European Union (Germany), on Microsoft Azure
ActiveCampaign: Our contact system for enquiries (service only; no counselling marketing). Where your information is stored: United States
Google Workspace (Gmail): Our email (support@shiftinglives.com.au) and staff sign-in; the calendar our staff use to run online sessions. Where your information is stored: Google data centres in more than one country, which may include the United States. Our Google plan does not let us choose a storage region
HotDoc: Online booking. Where your information is stored: Australia. HotDoc says some of its own service providers are in the United States and the United Kingdom
Cliniko: Our clinical record and appointment system. Where your information is stored: Australia. Cliniko says some of its own service providers are located overseas, mainly in the United States
Overseas disclosure. Some of your information is stored or processed outside Australia: in the United States (ActiveCampaign, Framer, and possibly Google), in Germany (n8n), and by overseas service providers that HotDoc and Cliniko use (United States and United Kingdom).
Security.
Our enquiry form sends only a fixed list of fields and rejects anything else.
Our staff dashboard requires a verified staff Google sign-in, and does not show client names, email addresses or phone numbers.
How long we keep it.
Pre-booking enquiry records are reviewed for deletion 90 days after your enquiry is closed. An enquiry is closed when you book, when you tell us you are not going ahead, or when we close it because we have not heard back from you.
Restricted contact requests are kept and reviewed as described under "Discreet or restricted contact requests" above.
Deletion is subject to any legal, consent-evidence, dispute or legitimate operational reason to keep a record. Two examples: to respect an unsubscribe request, or because you also use another Shifting Lives service.
Records are not deleted automatically. A staff member reviews each one before anything is deleted.
Where we keep a contact record, we keep the record of the consent you gave and the notice you were shown.
This applies only to enquiry records. Clinical records, notes and appointments in Cliniko are kept separately, under health record-keeping obligations.
Questions and complaints. Email support@shiftinglives.com.au. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC).
Urgent support. Our enquiry form and email are not monitored for emergencies. Call 000, or Lifeline on 13 11 14. See our urgent-support page.