Enuff Pty Ltd ABN: 57058916699
trading as
Now & Next Therapy
Email: mark@nownexttherapy.au
Privacy Policy
This policy outlines the ways in which Enuff Pty Ltd trading as Now & Next Therapy handles the personal information of our clients. We take privacy seriously and are committed to complying with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Personal Information
Personal information is any information about an individual that can be used to identify them directly or indirectly, such as name, address, phone number, email address, and date of birth.
Sensitive information is a type of personal information which includes details, for example, about a person's racial or ethnic origins, political or religious beliefs, sexual orientation, health or genetic information, family court orders or criminal record. The breach of sensitive information is likely to leave people open to discrimination or embarrassment.
Why We Collect Personal Information
The sharing of personal information by a client to Now & Next Therapy assists us to assess and support the client in processing their identified concerns. Personal information is retained to enable us to provide a relevant and informed service. While we generally require proper identification for clinical and safety reasons, we understand that some clients may have specific circumstances requiring additional privacy considerations. We work with clients to find appropriate solutions that balance therapeutic needs with privacy requirements, and formal identification may be required where legally mandated or for insurance purposes.
Our Services: We provide counselling and therapeutic services to help our clients achieve their goals and address their concerns through evidence-based therapeutic approaches.
How We Collect Personal Information
We collect personal information through a variety of means, including:
the information you verbally share with us during sessions written communication received from you via email, SMS or letter our online booking system our intake form and assessment questionnaires social media interactions (if applicable) the guardian of those under 18 years of age a referral from your GP or another treating practitioner or service
Our Storage of Personal Information
To protect personal information we hold from misuse or loss, we store it with Australian-based Halaxy. Halaxy "prioritises data security in Australia by utilising 256-bit bank-grade security and encryption, ensuring patient records, notes, and payment information are protected at the same level as financial institutions. All data is encrypted and stored in a secure Australian data centre with multiple backups, and data is accessible only via TLS/SSL."
Requests made through our online booking system (your name, contact details, appointment details and consent records) are stored with Amazon Web Services in the United States under a storage-only arrangement: AWS does not access, use or disclose that information, and the Privacy Act treats this as a use by us rather than a disclosure overseas. Session notes are never stored there.
Use of AI Tools
With a client's separate written consent, we may record sessions and use AI tools to help prepare session notes for the clinical record and for professional supervision. Recording is optional and consent can be withdrawn at any time. When these tools are used:
• The session is recorded and transcribed on the practitioner's phone. The audio is not uploaded to any cloud service and is deleted within 24 hours
• The transcript is transferred to the practitioner's computer over an encrypted local connection, where an AI model running on that computer removes names, places and other identifying details
• Only the de-identified transcript is sent to a cloud AI service (Claude, provided by Anthropic and hosted outside Australia) to draft a summary. No names, contact details, dates of birth or other identifying details are sent
• The practitioner reviews, corrects and approves every AI-drafted summary before it enters the client record, and remains responsible for the record
• AI tools are used only to assist with documentation. They are never used to make decisions about a client's care
Full details, including the limitations of these tools, are in our Session Recording & AI Consent form.
We do not retain any credit card or banking details once processing the payment is finalised. We also try not to retain unnecessary information, disposing of it securely from time to time depending on the type of information it is and our legal obligations.
If we become aware of a security breach we will promptly investigate and, where appropriate, take remedial action and notify the individual affected in accordance with the Privacy Act.
Disclosure of Your Personal Information
We will not disclose personal information about you to third parties without your consent, except when the disclosure is required by law (such as mandatory reporting requirements or court orders).
We do not disclose personal information to recipients outside Australia. The only information that leaves Australia is de-identified session transcript text sent to the AI service described above, with the client's consent and after identifying details have been removed.
Accessing Your Personal Information
You may request access to personal information we hold about you. We may ask you to specify what information you require and may charge a reasonable fee where we provide access. We deal with all requests for access to personal information as required by the Privacy Act. We may refuse to provide access if the Privacy Act allows us to do so.
Integrity of Your Personal Information
We try to ensure that the personal information we collect is accurate and up to date. You may request an update or correction to personal information we hold about you and we will deal with all such requests as required by the Privacy Act.
Complaints
If you think your personal information has not been handled in line with the Privacy Act, please contact us in the first instance. We will investigate your complaint and try to promptly resolve your complaint directly with you.
If you are not satisfied with the outcome, then you may make a complaint to the Office of the Australian Information Commissioner (OAIC). For information about how to make such a complaint, please refer to the OAIC website at www.oaic.gov.au
If your concern is about the therapy service itself rather than privacy, you can raise it with us directly, with PACFA (Psychotherapy and Counselling Federation of Australia) at ethics@pacfa.org.au under its Professional Conduct Procedures, or with the Queensland Office of the Health Ombudsman on 133 OHO (133 646) or at www.oho.qld.gov.au.
Changes to This Privacy Policy
We may make changes to this privacy policy from time to time and in such cases we will notify clients by email or on our website.
If you have any questions relating to privacy matters, please contact us.
Document updated: 29 September 2026 Version 2.2