Your Privacy Matters

Privacy Policy

How we collect, use, and protect your personal information in accordance with the Australian Privacy Principles.

Effective Date: 9 July 2025

Last Updated: 4 July 2026

1. Introduction

INTUITIONLAB PTY LTD (ABN: 69 688 646 362) trading as TherapyList.com.au (referred to as "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, store, and manage your personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). We voluntarily comply with the APPs due to the nature of our services connecting individuals with health service providers.

This Policy applies to all users of our website, https://www.therapylist.com.au (the "Site"), including individuals who browse the Site ("Visitors") and therapists who register an account and create listings ("Therapists").

By accessing or using our Site, you agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

2. Kinds of Personal Information We Collect

We collect personal information that is reasonably necessary for our functions and activities. The types of personal information we may collect depend on how you interact with our Site:

a. For All Users (Visitors and Therapists)

Technical Data: IP address, browser type, operating system, device type, referring URLs, access times, pages viewed.
Usage Data: Information about your interactions with our Site, such as search queries, features used, and patterns of activity.
Location Data: General location data derived from your IP address. We also collect approximate distance between a Visitor's location (if provided with consent) and a Therapist's listed location.

b. For Therapists Registering an Account and Creating a Listing

Contact Information: Name, email address, phone number(s), physical business address (if chosen to be publicly displayed).
Business Information: Business name, ABN, business registration details, qualifications, professional affiliations, areas of specialisation, services offered, business hours, and other details provided for your public listing.
Payment Information: While we do not store or process your full payment card details on our servers (as this is handled by PayPal or Stripe or Stripe), we may store transaction details, subscription status, and limited payment identifiers (e.g., last four digits of a card, PayPal transaction ID) for billing and record-keeping purposes.
Account Credentials: Username and encrypted password.
Communications: Records of communications between you and us (e.g., customer support inquiries via our AI assistant, feedback, emails sent via SendGrid).
Profile Images/Photos: Any images you upload for your listing.

c. Sensitive Information

We do not generally collect "sensitive information" (such as health information about an individual, racial or ethnic origin, sexual orientation, criminal record, political opinions, or religious beliefs) directly from our users. However, by the nature of being a directory for Complementary and Natural Health Therapy services, some aspects of a therapist's specialisation (e.g., "trauma-informed therapy," "mental health support") may implicitly relate to health information. Any information you choose to include in your public listing related to your services is provided at your discretion. We do not collect or store client-specific health information for therapists.

3. How We Collect Personal Information

Directly from You: When you register an account, create or update a listing, contact us via email or phone, provide feedback, or otherwise interact directly with our Site.
Automatically as You Use the Site: Through cookies, web beacons, and similar technologies (see Section 6: Cookies and Tracking Technologies), including through Google Analytics.
From Third Parties: In limited circumstances, we may receive personal information from third parties, such as payment processors (e.g., confirmation of successful payments from PayPal or Stripe).
Publicly Available Information: About businesses for pre-listings, where we remove personal identifiable information, but use business information only.

4. Purposes for Collection, Use and Disclosure

a. Providing and Managing Our Services

To create and manage your therapist account and listing(s).
To process your subscription payments and manage renewals.
To display your public listing to Visitors searching for therapy services, including showing the approximate distance between the Visitor and the Therapist.
To facilitate direct email contact between Visitors and Therapists through the Site's functionality.
To operate, maintain, and improve the functionality of the Site.
To provide customer support and respond to your inquiries.

b. Communication

To send you service-related notifications, updates, and reminders (e.g., renewal notices, listing compliance alerts) via email (using SendGrid).
To communicate about your account, transactions, or respond to your requests (including via Google Workspace).

c. Site Improvement and Analytics

To understand how users interact with our Site and services (using Google Analytics).
Where you consent via our cookie banner, we enable Google Signals within Google Analytics. This combines your Analytics data with information from your Google Account (if you are signed into one) to enable reporting across your devices, and to share audience data with Google for use in Google's advertising products, including remarketing (showing you ads for our Site as you browse elsewhere).
To perform analytics, research, and for business development (e.g., to identify popular search terms or areas of interest).
To personalise your experience on the Site.

d. Marketing and Promotions

To send you direct marketing communications about our services, promotions, or features that may be of interest to you, where you have consented or where it is otherwise permitted by law (e.g., if you are a Therapist, about new features for your listing) via email (using SendGrid). You can opt-out of marketing communications at any time (see Section 11: Your Choices).

e. Legal and Compliance

To comply with our legal and regulatory obligations, including tax, accounting, and anti-fraud requirements.
To enforce our Terms & Conditions and protect our rights, property, or safety, and that of our users or others.
To respond to legal requests, court orders, or government investigations.

5. Disclosure of Personal Information

We may disclose your personal information to:

The Public (for Therapists): Information included in your public listing (e.g., business name, phone, services, photos, and approximate distance from a Visitor's location) will be visible to Visitors of the Site. Your email address will be used to facilitate direct contact from Visitors if you enable that feature. Full business addresses are only displayed if you choose to include them in your public listing. Your business phone number and email address will be obfuscated to prevent misuse.
Service Providers: Third-party service providers who assist us in operating the Site. Our current service providers include:
  • SendGrid (for sending emails)
  • Google Workspace (for internal communications and file management)
  • PayPal & Stripe (for payment processing)
  • Nominatim Geocoding (for geo-location services and approximate distance calculation)
  • Google Analytics, including Google Signals (for website analytics and, where you consent, remarketing/advertising audiences shared with Google Ads)
  • Vapi AI (for online chat and answering or directing phone calls)
Professional Advisers: Our lawyers, accountants, or other professional advisers.
Law Enforcement/Regulators: If required by law, court order, or government authority.
In Connection with Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our Site of any such change.

6. Cookies and Tracking Technologies

We use "cookies" and similar tracking technologies on our Site, including through Google Analytics and Google Signals. Cookies are small data files stored on your device that help us improve your experience, analyse site usage, and support our marketing efforts.

Essential Cookies

Necessary for the Site to function correctly (e.g., session cookies for login).

Analytics Cookies

Help us understand how users interact with the Site (e.g., Google Analytics).

Preference Cookies

Remember your settings and preferences.

Marketing Cookies

Used via Google Signals to deliver remarketing advertisements for our Site through Google's advertising network.

You can typically manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the Site.

You can change your analytics/advertising cookie consent for this Site at any time:

You can also opt out of Google's advertising personalisation directly via Google's Ads Settings, or opt out of Google Analytics site-wide using Google's Analytics Opt-out Browser Add-on.

7. Geo-location Data

When you use our search functionality, we use geo-location data (either inferred from your IP address or, if you consent, from your device's GPS) to provide you with relevant local therapist listings. This includes displaying the approximate distance between your location and the therapist's listed location. We use Nominatim Geocoding for this service. This precise geo-location data is used in real-time for search results and is not stored or associated with your personal profile for any other purpose unless you explicitly provide it (e.g., as your business address in your listing).

8. Direct Marketing

We may use your personal information to send you direct marketing communications about our services or features that may be of interest to you. This may include email communications sent via SendGrid.

For Therapists: We may send you marketing communications where you would reasonably expect to receive them (e.g., new features for your listing service).
For All Users: We will only send direct marketing communications with your consent or where otherwise permitted by law.

You can opt-out of receiving direct marketing communications from us at any time by following the unsubscribe link in the email or by contacting us using the details below.

9. Cross-Border Disclosure of Personal Information

While our primary hosting provider is located in Australia, some of our third-party service providers may process or store personal information on servers located outside of Australia. This means your personal information may be disclosed to recipients in other countries.

By providing your personal information to us, you consent to your personal information being transferred to, and stored in, a country other than Australia, which may not have the same privacy laws as Australia. We take reasonable steps to ensure that overseas recipients handle your personal information in accordance with the Australian Privacy Principles.

Countries Where Data May Be Processed

United States: SendGrid, Google Workspace, PayPal, Stripe, Google Analytics, Google Ads
Other countries where Google (for Workspace/Analytics) or PayPal/Stripe may operate data centres.

10. Security of Personal Information

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and from unauthorised access, modification, or disclosure. We use a range of security measures, including:

Encryption of data in transit.
Secure access controls and authentication processes.
Regular security assessments of our systems.
Secure storage of data on reputable hosting provider servers located in Australia.
Staff training on privacy and data security.
Using reputable third-party services (e.g., PayPal, Stripe, SendGrid, Google) that employ industry-standard security measures.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

11. Accessing and Correcting Your Personal Information

You have a right to:

Access: Request access to the personal information we hold about you. We will provide access within a reasonable time (usually 30 days) after receiving a request, unless an exception under the Privacy Act applies.
Correction: Request that we correct any personal information we hold about you that is inaccurate, out-of-date, incomplete, irrelevant, or misleading.

You can access and update much of your account and listing information directly through your account dashboard. For other requests, please contact us using the details below. We may require proof of identity before providing access or making corrections.

12. Anonymity and Pseudonymity

Where practicable and lawful, you have the option of dealing with us anonymously or by using a pseudonym. For example, you can browse the Site as a Visitor without providing personal information. However, due to the nature of our service (creating public listings for legitimately registered businesses and facilitating direct contact), it is not practicable for Therapists to register an account or create a listing anonymously or pseudonymously.

13. Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, to provide our services, to comply with our legal obligations (e.g., tax and accounting), and to resolve disputes. When personal information is no longer required for these purposes, we will take reasonable steps to destroy or de-identify it.

14. Making a Complaint

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you have the right to make a complaint. Please contact us in the first instance using the contact details below, outlining the nature of your complaint. We will investigate your complaint promptly and respond within a reasonable timeframe (typically 30 days).

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

Office of the Australian Information Commissioner (OAIC)

GPO Box 5218, Sydney NSW 2001

Phone: 1300 363 992

Email: enquiries@oaic.gov.au

Website: www.oaic.gov.au

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post any changes on this page and, where appropriate, notify you by email or a prominent notice on the Site. Your continued use of the Site after any changes indicates your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

INTUITIONLAB PTY LTD

PO Box 17

Byford 6122 WA

Alternatively you can contact us via our contact page.

Your Privacy, Our Commitment

We are committed to handling your personal information with care and in accordance with Australian Privacy Principles. If you have any concerns, please don't hesitate to reach out.