Privacy Policy

Date of Last Update: 29 July 2026

This is the Privacy Policy of Anneliis Way ABN 11 074 346 879 (we, us or our).

1. We respect your privacy

1.1 We respect your right to privacy and are committed to safeguarding the privacy of our customers and website visitors. This policy sets out how we collect and treat your Personal Information and Sensitive Health information.

1.2 By using our Website, engaging our Services, or purchasing Digital Products, you acknowledge that you have read and understood this Policy and consent to the collection, use and disclosure of your Personal Information and Sensitive Health Information in accordance with this Policy. If you do not agree with this Policy, please do not use our website or engage our Services.

1.3 We adhere to the Australian Privacy Principles contained in the Privacy Act 1998 (Cth).

1.4 “Personal Information” is information we hold which is identifiable as being about you. This includes information such as your name, email address, payment information (including credit card numbers, and other payment details), or any other type of information that can reasonably identify an individual, either directly or indirectly.

1.5 “Sensitive Health Information” means information that relates to your relevant health and medical history, current medications and other health-related information you provide during the intake and assessment process and in accessing the Services.

1.6 “Payment Information” means information collected regarding payment methods, transaction records and billing details you provide when purchasing our Services or Digital Products, including the name, billing address and payment method used, but excludes your full credit or debit card number, which is collected and stored solely by our third-party payment provider (currently Stripe) and is not held or stored by us.

1.7 You may contact us in writing at hello@anneliisway.com for further information about this Privacy Policy.

2. What Information is collected

2.1 We will, from time to time, receive and store Personal Information you provide to us by way of submission to our website using the ‘Contact Us’ webform and ‘Bookings’ function.

2.2 You may provide information such as your name, address, email, telephone number, and city to enable us to respond to your query.

2.3 Additionally, we may also collect Sensitive Health Information you provide while interacting with us and while we provide the Services.

2.4 Generally, we do not collect Sensitive Information about you unless required by law or where it is required in order for us to provide you with the services. “Sensitive information” includes information relating to race, political or religious beliefs, sexual orientation and sexual life, criminal convictions, membership of professional or trade associations or unions, biometric information or information about your affiliation with certain organisations such as professional associations.

3. How we collect your Information

3.1 We collect Personal Information from you in a variety of ways, including when you contact us with a question or enquiry, subscribe to our mailing list, download a free resource, book an appointment with us, purchase Digital Products through our website, engage with our Services or when you access our website.  We may use ‘cookies’ on our website. Cookies are an industry standard and most major websites use them. A cookie is a small text file that our website may place on your computer as a tool to remember your preferences. You may refuse the use of cookies by selecting the appropriate settings in your browser.

3.2 We collect your Sensitive Health Information directly from you when you complete a booking form, client intake form or enquiry form, whether online or in person or otherwise engage our Services.

3.3 By providing us with Personal Information and Sensitive Health Information, you consent to the supply of that information subject to the terms of this Privacy Policy.

3.4 With your express prior consent, we may make an audio recording of your sessions when accessing the Services (specifically hypnotherapy services). Recordings are made for the purpose of assisting continuity of care and providing them to you for your benefit. Recordings will be stored securely as part of your client record and handled in accordance with our Privacy Policy.

(a) Access to recordings will be limited to authorised personnel. Recordings will not be used for supervision, training, research, AI transcription, marketing, or disclosure to any third party unless you give separate written consent, or unless disclosure is required or authorised by law;

(b) You may decline recording at any time. If you decline, your Services will continue without recording. You may also ask for recording to stop at any point during a session;

(c) Where any other person participates in a session, that person must also consent before recording occurs;

(d) For sessions conducted by telephone or videoconference, recording will only occur after all participants have expressly confirmed their consent at the commencement of the session;

(e) We may transmit session recordings and session notes to you electronically, including by email. Session recordings and session notes are sensitive health information. Electronic transmission, including by email, carries inherent security risks including misdirected messages and access by third-party providers. Where you have requested or agreed to communication by email, you acknowledge those risks. We will take reasonable steps to minimise risk, including verifying your email address before transmitting sensitive records and deleting it within four (4) weeks of transmitting it to you. Electronic transmission of your personal information is otherwise governed by our Privacy Policy.

4. How we use your Personal Information

4.1 We will use Personal Information only for the purposes that you consent to. This may include to:

(a) Provide and manage our Services;

(b) Assess your suitability for and deliver our Services;

(c) Process payments for the Services and Digital Products;

(d) Communicate with you about bookings, sessions, enquiries and administrative matters regarding you engaging our Services;

(e) Deliver Digital Products you have purchased;

(f) Send you marketing communications, where you have consented, or where we are otherwise permitted to do so under law;

(g) Improve our Website and Services;

(h) Comply with our legal and regulatory obligations; 

(i) Investigate any complaints; and 

(j) For any other purpose disclosed to you at the time of collection or to which you subsequently consent to.

4.2 If you withhold your Personal Information, it may not be possible for us to provide you with our Digital Products and Services or for you to fully access our website.

4.3 We may disclose your Personal Information to comply with a legal requirement, such as a law, regulation, court order, subpoena, warrant, legal proceedings or in response to a law enforcement agency request. 

4.4 If there is a change of control in our business or a sale or transfer of business assets, we reserve the right to transfer to the extent permissible at law our user databases, together with any Personal Information, Sensitive Health Information and non-personal information contained in those databases.

5. Sensitive Health Information

5.1 We collect Sensitive Health Information because it is necessary to deliver our Services safely and effectively.

5.2 We will only collect Sensitive Health Information with your consent and only to the extent necessary to deliver our Services.

5.3 Your Sensitive Health Information will be:

(a) Used solely for the purpose of assessing your suitability for and delivering our Services;

(b) Handled with the care and confidentiality;

(c) Not disclosed to any third party without your consent, except where required or permitted by law or where we are under a duty of care that requires us to do so (for example, where there is a serious risk of harm to you or others).

5.4 To support the quality, safety, and ethical delivery of our services, client matters may be discussed with a professional supervisor or in peer consultation, clinical consultation, or ethical consultation. This is a standard and necessary part of responsible therapeutic practice. Wherever practicable, any information discussed for these purposes will be deidentified before it is shared, so that the client is not reasonably identifiable. De-identification involves removing or modifying details that could identify a client, including name, contact details, date of birth, location, and any other information that could, alone or in combination with other information, identify the individual. Where it is necessary to disclose identifiable Sensitive Health Information to an external supervisor or consultant, this will only occur with the client's prior consent, or where otherwise permitted or required by law. Any such disclosure will be limited to the minimum information reasonably necessary for the supervision or consultation purpose. All external supervisors and consultants engaged by us are required to maintain strict confidentiality and to use any information disclosed to them solely for the purpose for which it was provided.

5.5 If you withhold your Sensitive Health Information, it may not be possible for us to provide you with our Digital Products and Services or for you to fully access our website.

5.6 You have the right to withdraw your consent to the collection and use of your Sensitive Health Information at any time, however please note that withdrawing your consent may affect our ability to provide the Services to you.

6. Disclosure of your Information

6.1 We may disclose your Personal Information and Sensitive Health Information to any of our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this Privacy Policy.

6.2 If we do disclose your Personal Information or Sensitive Health Information to a third party, we will protect it in accordance with this Privacy Policy.

7. Electronic Communications and Transmission of Health Information

7.1 We may communicate with you and transmit Personal Information and Sensitive Health Information electronically in the course of providing the Services. This may include providing you with session notes and recordings.

7.2 We take reasonable steps to protect this information from misuse, interference, loss and unauthorised access and will protect this information in accordance with this Privacy Policy.

8. Hosting and International Data Transfers

8.1 Information that we collect may from time to time be stored, processed in or transferred between parties or sites located in countries outside of Australia. 

8.2 Our office is located in Australia. However, in the event that we open offices or facilities outside of Australia, any transfers to each of these countries will be protected by appropriate safeguards.

8.3 You acknowledge that Personal Information and Sensitive Health Information that you submit for publication through our website or Services may be available, via the internet, around the world.  We cannot prevent the use (or misuse) of such personal data by others.

9. Security of your Information

9.1 We are committed to ensuring that the Personal Information and Sensitive Health Information you provide to us is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure. 

9.2 The transmission and exchange of information is carried out at your own risk. We cannot guarantee the security of any information that you transmit to us, or receive from us.  Although we take measures to safeguard against unauthorised disclosures of information, we cannot assure your that Personal Information and Sensitive Health Information that we collect will not be disclosed in a manner that is inconsistent with this Privacy Policy.

9.3 In the event of a data breach that is likely to result in serious harm to individuals whose information is involved, we will comply with our obligations under the Notifiable Data Breaches (“NDB”) scheme under Part IIIC of the Privacy Act 1988 (Cth). This includes notifying affected individuals and the Office of the Australian Information Commissioner (“OAIC”) as required

10. Access to your Information

10.1 You may request details of Personal Information and Sensitive Health Information that we hold about you in accordance with the provisions of the Privacy Act 1988 (Cth). If you would like a copy of the information which we hold about you or believe that any information we hold on you is inaccurate, out of date, incomplete, irrelevant or misleading, please email us at hello@anneliisway.com

10.2 We reserve the right to refuse to provide you with information that we hold about you, in certain circumstances set out in the Privacy Act 1988 (Cth) or any other applicable law. 

10.3 You may request that we delete your Personal Information or Sensitive Health Information. We will comply with such requests to the extent permitted by law.

11. How long will we keep your Information?

11.1 We will only retain your Personal Information and Sensitive Health Information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting obligations.

11.2 We will retain health records (including Sensitive Health Information collected in connection with the delivery of our Services) for a minimum period of 7 years from the date of your last appointment or service. Where a client was a minor at the time of the last service, records will be retained until they reach the age of 25 years, or for 7 years from the date of the last service, whichever is the longer period.

11.3 When Personal Information or Sensitive Health Information is no longer required to be retained, we will take reasonable steps to destroy or de-identify it securely.

12. Complaints about privacy 

12.1 If you have any complaints about our privacy practices, please feel free to send in details of your complaints to hello@anneliisway.com. We take complaints very seriously and will respond as soon as practicable after receiving written notice of your complaint and within 30 days at the latest. 

13. Changes to Privacy Policy

13.1 Please be aware that we may change this Privacy Policy in the future. We may modify this Privacy Policy at any time, in our sole discretion and all modifications will be effective immediately upon our posting of the modifications on our website. Please check back from time to time to review our Privacy Policy.