Privacy Policy

Last updated: 18 August, 2026

Version 1.0

InBloom Therapy is a counselling and psychotherapy practice operated by Sally Estepho, a PACFA registered Counsellor and Psychotherapist, PACFA registration number 29787.

We take your privacy seriously. This policy explains what information we collect, why we collect it, who we share it with and how you can control it.

Because we provide a health service, we are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles regardless of the size of our business. We are also bound by the Health Records Act 2001 (Vic) and the Health Privacy Principles.

Visiting this website may say something about you

This is a counselling website. If you visit it, read our service pages or make an enquiry, that activity could suggest that you or someone close to you is looking for mental health support. Australian privacy law treats information of that kind as sensitive health information, which means it gets a higher level of protection than ordinary website data.

We have built this website so that nothing about your visit is shared with any advertising company unless you actively choose to allow it. Advertising and tracking are switched off by default. They stay off until you turn them on, and you can turn them back off at any time using the "Privacy and cookie settings" link at the bottom of every page.

What we collect

Information you give us

When you complete an enquiry form, book an appointment, email us or call us, we collect your name, your email address, your phone number, your suburb or postcode, the service you are asking about, whether you would prefer online or in person sessions, and anything you choose to write in the message field.

You do not need to tell us anything clinical to make an enquiry. Please share only what feels comfortable. Detailed clinical information is not required at this stage and we ask you not to include diagnoses, medical information, crisis details or a child's full name in a website form or in a social media message.

Clinical information

If you become a client, we collect and hold health information as part of providing your care. That is handled under our clinical records obligations and is kept separate from anything on this website. It is never used for marketing and it is never shared with any advertising platform.

Information collected automatically

When you visit the website, our website provider records standard technical information such as your device type, browser, approximate location and the pages you viewed. This is used to keep the site working and secure.

Advertising and measurement information, only if you consent

If you choose to allow advertising cookies, a Meta Pixel may record that you visited this website so that we can show you information about InBloom Therapy on Facebook and Instagram later. If you do not choose it, nothing is sent to Meta at all.

Who we share information with

We name our providers rather than describing them vaguely.

Squarespace

Squarespace hosts this website and processes standard technical information about your visit.

Google

Google provides search advertising and website measurement. We use it to understand how people find us. We never send Google your name, email address, phone number, the message you wrote, the service you selected or anything clinical.

Meta Platforms

Meta Platforms, being Facebook and Instagram, provides advertising and measurement. The Meta Pixel is blocked until you actively give advertising consent. If you consent, it records only a basic page view. We do not send Meta your name, email address, phone number, postcode, the service you selected, anything you wrote, any diagnosis, any NDIS information or any information about a child. We do not upload customer lists to Meta. We do not build audiences based on a health condition, a diagnosis, a therapy topic or the specific page you looked at.

Professional advisers and legal requirements

We may also share information with our professional advisers, or where we are required or permitted to do so by law, including where there is a serious and imminent risk to someone's life, health or safety.

Overseas disclosure

Squarespace, Google and Meta store and process information on servers outside Australia, including in the United States and other countries where they operate. If you consent to advertising cookies, some information about your visit will be handled overseas.

Cookies, pixels and how to control them

Necessary cookies

Necessary cookies keep the site working and cannot be switched off.

Advertising and measurement cookies

Advertising and measurement cookies are off by default. You choose them or decline them the first time you visit, both options are equally easy, and nothing is pre-ticked.

Changing your cookie preferences

You can change your mind at any time using the "Privacy and cookie settings" link in the footer of every page. If you withdraw consent, we stop the pixel firing from that point on. Information already collected by Meta before you withdrew is held by Meta under its own terms, and you can manage it through the Facebook and Instagram settings on your own account.

Browser settings

You can also block or delete cookies through your browser settings.

How long we keep information

Enquiries that do not become appointments

Enquiries that do not become appointments are kept for up to 12 months and then deleted.

Health records for clients

Health records for clients are kept for the period required by Australian law and professional practice standards, which is at least 7 years from the last occasion of service, and for a child, until they turn 25.

How we keep information safe

Information is held in password protected systems with multi factor authentication enabled where the system supports it. Access is limited to people who need it to provide the service or to support the website. We never ask you to send us a full credit card number, a card security code or a password by email, SMS or social media message, and you should not send them to us.

Accessing or correcting your information

You can ask us for a copy of the personal information we hold about you, and you can ask us to correct it if it is wrong. Email bookings@inbloomtherapy.com.au and we will respond within 30 days. We may need to confirm your identity first.

Complaints

If you are unhappy with how we have handled your information, please tell us first. Email bookings@inbloomtherapy.com.au and we will respond within 30 days.

If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

For matters concerning health information in Victoria you can contact the Health Complaints Commissioner at hcc.vic.gov.au or on 1300 582 113.

This website uses Google Analytics to count page views. Until you choose, it sets no cookies and sends nothing that identifies you.

Changes to this policy

We will update this page when our practices change and we will update the version number and date at the top.

Contact us

InBloom Therapy
Email:
bookings@inbloomtherapy.com.au
Phone:
0405 839 661
Postal Address: Melbourne, VIC, Australia