Privacy Policy

Privacy Policy

​Last updated: July 2026

At Cognitive Pathways, we understand that privacy matters.

People trust us with personal and, in some circumstances, highly sensitive information. We take that responsibility seriously and are committed to protecting the privacy, confidentiality and security of the information entrusted to us.

​

This Privacy Policy explains how Cognitive Pathways collects, uses, stores and discloses personal information when you visit our website, contact us, make an enquiry or engage with our services.

​

Clinical patients may also receive additional information about privacy, consent, record keeping and the handling of health information as part of the clinical intake and consent process.

​

1. Who we are
 

Cognitive Pathways provides neuropsychological assessment, cognitive rehabilitation and related clinical and educational services.

For the purposes of this Privacy Policy, “Cognitive Pathways”, “we”, “us” and “our". 
 

2. Our commitment to privacy

​

We handle personal information in accordance with applicable Australian privacy laws and professional obligations, including, where applicable, the Privacy Act 1988 and the Australian Privacy Principles.

​

As a healthcare provider, we recognise that health information is particularly sensitive and requires a high level of protection.

​

We aim to collect only the information reasonably necessary to provide our services, communicate with you and operate our practice safely and effectively.

​

3. What information we may collect

​

The information we collect will depend on how you interact with Cognitive Pathways.

This may include:

• your name, date of birth and contact details;

• information provided when you make an enquiry, request an appointment or contact us;

• details about a parent, guardian, carer or other authorised representative;

• referral information and details of referring or treating professionals;

• health, medical, psychological, developmental, educational and family information;

• information about medications, diagnoses, treatment and previous assessments;

• school, employment or functional information where relevant;

• Medicare, private health insurance or funding information where applicable;

• payment and billing information;

• correspondence and communications with us;

• information provided through forms, questionnaires or assessments;

• information necessary to provide telehealth or other remote services; and

• technical information associated with your use of our website, such as device, browser, IP address and website usage information.

• ​

We may also collect information about other people where it is relevant to the services we provide. If you provide us with another person’s personal information, you should ensure you are authorised to do so where required.

​

4. How we collect information

​

We may collect personal information:

• directly from you;

• from a parent, guardian, carer or authorised representative;

• from a referring practitioner;

• from other healthcare professionals involved in your care;

• from schools, educational institutions or other organisations, with appropriate authority or consent;

• through our website, enquiry forms and booking systems;

• during appointments, assessments and consultations;

• through telephone, email, telehealth and other communications; and

• from other sources where authorised or required by law.
   

Where practicable, we will collect personal information directly from the individual concerned or their authorised representative.

​

5. Why we collect and use personal information

​

We may collect, hold and use personal information to:

• respond to enquiries;

• arrange and manage appointments;

• assess whether our services may be appropriate;

• provide neuropsychological assessment, rehabilitation and other clinical services;

• communicate with patients, families, carers, referrers and other professionals;

• coordinate care where appropriate;

• prepare reports, recommendations and other clinical documentation;

• manage referrals;

• process payments and administer accounts;

• meet professional, clinical, legal and regulatory obligations;

• maintain accurate clinical and business records;

• improve our services and patient experience;

• manage our website and digital services;

• protect the safety, security and integrity of our systems and services; and

• send educational information or communications where you have requested or consented to receive them.
   

We will not use sensitive or health information for unrelated marketing purposes without appropriate consent or another lawful basis.

​

6. Health information and children’s information
 

Much of our work may involve children, adolescents and families.

We recognise the particular importance of protecting information relating to children and young people. Depending on the person’s age, circumstances and capacity, consent may be obtained from a parent, legal guardian or the young person themselves. We will manage consent, confidentiality and access to information in accordance with applicable law, professional obligations and the individual circumstances of the person receiving care.
 

Where appropriate, we aim to explain privacy and consent in language that children and young people can understand.
 

7. Sharing personal information
 

We do not sell personal information.

We may disclose personal information where reasonably necessary to provide our services or operate our practice, including to:

• referring practitioners;

• treating healthcare professionals;

• allied health professionals;

• schools or educational professionals where authorised and clinically appropriate;

• parents, guardians, carers or authorised representatives;

• service providers supporting our practice, such as secure clinical software, IT, booking, payment, accounting or communications providers;

• insurers, funding bodies or government agencies where authorised or required;

• professional advisers; and

• regulatory, legal or law enforcement bodies where required or permitted by law.
   

Where possible and appropriate, we will seek consent before sharing health information with other professionals or organisations involved in a person’s care.

There may be circumstances in which we are legally or professionally required to disclose information without consent, including where there is a serious threat to health or safety or where disclosure is required or authorised by law.
 

8. Service providers and overseas disclosure
 

Cognitive Pathways may use third-party technology and service providers to support areas such as:

• website hosting;

• appointment booking;

• practice management;

• telehealth;

• email and communications;

• secure data storage;

• payment processing;

• website analytics; and

• business administration.
   

Some service providers may store or process information outside Australia.

Where personal information may be disclosed or stored overseas, we will take reasonable steps to understand and manage the privacy implications and comply with applicable legal requirements.
 

9. Website analytics and cookies
 

Our website may use cookies and similar technologies to understand how visitors use the site, improve website performance and support relevant communications or advertising.
 

Information collected may include:

• pages visited;

• time spent on the website;

• general location information;

• device and browser information;

• referral source; and

• interactions with website content.
   

Depending on the tools used, this information may be collected by third-party providers.
 

You may be able to control or disable cookies through your browser settings. Disabling some cookies may affect the way certain website features operate.

​

10. Marketing and educational communications

​

From time to time, Cognitive Pathways may share educational resources, practice updates, events or other information with people who have chosen to receive these communications.

​

You may unsubscribe from marketing communications at any time by using the unsubscribe option provided or contacting us directly.

​

Clinical and administrative communications relating to appointments, care or services are not considered marketing communications.

​

11. How we protect personal information

​

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

​

Depending on the nature of the information, these measures may include:

• secure clinical and practice management systems;

• access controls and authentication;

• secure storage and transmission practices;

• staff confidentiality requirements;

• appropriate technology and cybersecurity measures;

• restricted access to information based on role and need; and

• secure disposal or de-identification of information when appropriate.
   

No method of electronic transmission or storage can be guaranteed to be completely secure. If we become aware of a data breach, we will assess and respond to it in accordance with applicable legal requirements.
 

12. How long we keep information

​

We retain personal and health information for as long as required to provide our services and meet applicable legal, professional and record-keeping obligations.

​

Retention periods may vary depending on factors including the nature of the information, the age of the patient and applicable professional or legal requirements.

​

When information is no longer required to be retained, we will take reasonable steps to securely destroy or de-identify it.

​

13. Accessing or correcting your information

​

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.

​

In some circumstances, access may be limited or refused where permitted or required by law. If this occurs, we will explain the reason where appropriate.

​

14. Privacy enquiries and complaints

​

If you have a question, concern or complaint about how Cognitive Pathways has handled your personal information, please contact us first so we can investigate and respond.

​

We will aim to acknowledge your complaint promptly and respond within a reasonable timeframe. If you are not satisfied with our response, you may have the right to contact the relevant Australian privacy regulator.

​

15. Third-party websites

​

Our website may contain links to external websites or resources.
 

Cognitive Pathways is not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of external services before providing personal information.

​

16. Changes to this Privacy Policy

​

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal obligations or business practices.

​

The current version will be published on our website with the date it was last updated.

​

17. Contact us

​

If you have any questions about this Privacy Policy or the way Cognitive Pathways handles personal information, please contact:

Cognitive Pathways
Suite 9/6 Nuban St, Currumbin Waters QLD 4223
0411 594 161