Donella Storey

Emotional Healing, Self-Discovery & Aligned Living

Book Now

Privacy Policy

Last updated: September 2026

Your privacy matters to me.

When you work with me, you may share personal and sensitive information about yourself, your wellbeing, experiences and personal circumstances. I understand the importance of treating this information with care, respect and confidentiality.
This Privacy Policy explains how I collect, use, store and protect your personal information when you visit my website, enquire about my services, book an appointment, participate in a session, purchase a service or otherwise communicate with me.

I aim to handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, where they apply to my business.

Who I am

This website and the services described on it are operated by Donella Storey.
In this Privacy Policy, “I”, “me” and “my” refer to Donella and my business.
If you have any questions about your personal information or this Privacy Policy, you can contact me at:
Email: donella@donellastorey.com.au
Business name: Donella Storey
ABN: 56342652729

Personal information I collect

The type of personal information I collect depends on how you interact with me.
This may include:

  • your name
  • email address
  • telephone number
  • address, where required
  • date of birth or age, where relevant
  • appointment and booking information
  • information provided through consultation, intake, consent or client forms
  • information you provide during sessions
  • client notes and session records
  • correspondence and communications between you and me
  • payment and transaction information
  • information relating to your use of my website
  • information relating to your preferences and interactions with my communications
  • information you voluntarily provide when contacting me.

Sensitive information

Some of the information I collect may be considered sensitive information under Australian privacy law.
This may include health information and information about your wellbeing, emotional experiences, personal circumstances or other matters you choose to discuss with me as part of my services.
I collect sensitive information only where it is reasonably necessary for providing my services, managing your client relationship or for another purpose permitted by law.
Where required, I will obtain your consent before collecting sensitive information.
You may choose not to provide information that is not reasonably necessary for the service you are seeking. However, if you do not provide information that I reasonably require to provide a service, this may affect my ability to provide that service appropriately.

How I collect your information

I generally collect personal information directly from you.
This may occur when you:

  • visit my website
  • complete an online enquiry form
  • make or manage a booking
  • complete a consultation, intake or consent form
  • participate in a session
  • communicate with me by email, telephone or text message
  • subscribe to my newsletter
  • purchase a service, package or digital product
  • communicate with me through social media
  • voluntarily provide information to me in another way.

I may also receive limited information through the third-party services I use to operate my business, including my booking, payment, website and email platforms.

Booking information

I use Trafft to manage appointments and bookings.
When you make a booking, information necessary to manage your appointment may be collected and processed through Trafft.
This may include your name, contact details, appointment information and other information you provide as part of the booking process.
Trafft is a third-party service provider and has its own privacy practices and terms. You can review its privacy information before providing information through its platform.

Payment information

I use Square to process payments.
When you make a payment, Square may collect and process information necessary to complete and manage the transaction.
I generally do not have access to your complete payment card details.
I may retain information such as the amount paid, date of payment, payment status and transaction reference for accounting, business administration and record-keeping purposes.
Square is a third-party payment provider and handles information in accordance with its own privacy practices and terms.

Client notes and records

When you receive services from me, I may maintain records relating to your sessions.
These records may include:

  • information you provide during consultations
  • information discussed during sessions
  • relevant session observations
  • information necessary to support continuity of care and service
  • appointment and administrative information.

Client records are stored in two forms:
Hard-copy records:
Physical client notes are stored securely in my clinic room and are not left publicly accessible.
Electronic records:
Electronic client information and notes are stored using Microsoft OneDrive with appropriate account security and access controls.
I take reasonable steps to restrict access to client information and protect it from loss, misuse or unauthorised access.
Client information will not be used in testimonials, case studies, social media content, promotional material or other public communications without your appropriate consent, unless disclosure is otherwise permitted or required by law.

Website hosting

My website is hosted by Hostinger.
When you visit my website, Hostinger and other technical service providers may collect certain technical information necessary to operate, maintain and secure the website.
This may include information such as:

  • IP address
  • browser and device information
  • pages visited
  • date and time of visits
  • referring website
  • technical and diagnostic information.

Hostinger is a third-party service provider and handles information in accordance with its own privacy practices and terms.

Cookies and website analytics

My website may use cookies and similar technologies.
Cookies may be used to:

  • enable website functionality
  • remember preferences
  • understand how visitors use the website
  • improve website performance
  • maintain website security
  • support analytics or other website functions.

Depending on the tools currently installed on my website, third-party providers may also collect information about your interaction with the website.
You can adjust cookie settings through your browser. Disabling certain cookies may affect how parts of the website function.

Email and newsletter communications

I use Mailchimp to manage email newsletters and marketing communications.
If you choose to subscribe to my newsletter or marketing communications, Mailchimp may collect and process information such as your name, email address and information about whether you open or interact with emails.
You can unsubscribe from marketing communications at any time by selecting the unsubscribe link in the email or by contacting me directly.
Unsubscribing from marketing communications will not prevent me from sending necessary administrative communications relating to a service you have booked or received.
Mailchimp is a third-party service provider and handles information in accordance with its own privacy practices and terms.

Why I collect and use your information

I collect, hold and use personal information for purposes that are reasonably necessary for my business and the services I provide.
These purposes include:

  • providing and managing your sessions
  • understanding your needs in relation to the services you request
  • managing appointments
  • communicating with you
  • responding to enquiries
  • maintaining appropriate client records
  • processing payments
  • providing resources or digital products you have purchased or requested
  • administering programs and memberships
  • sending newsletters and marketing communications where you have consented
  • managing my business and administrative responsibilities
  • improving my website and services
  • meeting legal, accounting, insurance and regulatory requirements
  • responding to complaints or disputes
  • protecting my rights, property and safety and the rights, property and safety of others.

I will not use your personal information for a purpose unrelated to the reason it was collected unless permitted or required by law or you have provided appropriate consent.

When I may disclose your information

I do not sell your personal information.
I may disclose personal information where reasonably necessary to provide my services, operate my business or comply with legal requirements.
Depending on the circumstances, information may be disclosed to:

  • Trafft, for appointment and booking management
  • Square, for payment processing
  • Hostinger, for website hosting and technical services
  • Mailchimp, for email and newsletter management
  • Microsoft OneDrive, for electronic storage
  • professional advisers such as accountants, insurers or lawyers
  • IT or technical support providers where reasonably necessary
  • government agencies, regulatory bodies or other parties where required or authorised by law.

I will take reasonable steps to ensure that information disclosed to service providers is handled appropriately.

Overseas disclosure and storage

Some of the third-party providers I use may store or process personal information outside Australia.
This may include providers such as Trafft, Square, Hostinger, Mailchimp and Microsoft, depending on the services, account configuration and data storage arrangements applicable to my business.
As these arrangements may change, the location in which information is stored or processed may also change.
Where applicable, I will take reasonable steps to ensure that overseas disclosures are handled in accordance with Australian privacy requirements.
Third-party providers may also be subject to privacy laws and requirements in the countries in which they operate or store information.

How I protect your information

I take reasonable steps to protect personal information from:

  • misuse
  • interference
  • loss
  • unauthorised access
  • unauthorised modification
  • unauthorised disclosure.

These steps may include:

  • securing physical client records
  • using password-protected systems
  • using account access controls
  • securing devices used to access client information
  • limiting access to information
  • using reputable third-party service providers
  • taking reasonable care when transmitting information electronically
  • securely disposing of information when it is no longer required.

No electronic storage or transmission system can be guaranteed to be completely secure.

How long I retain information

I retain personal information for as long as reasonably necessary for the purposes for which it was collected.
This may include retaining information for:

  • providing ongoing or future services
  • maintaining appropriate client records
  • meeting legal or regulatory obligations
  • accounting and taxation requirements
  • insurance requirements
  • resolving complaints or disputes
  • protecting my legal interests.

When information is no longer required, I will take reasonable steps to securely destroy or de-identify it unless I am required or permitted by law to retain it.

Accessing your information

You may request access to personal information I hold about you.
You can make a request by contacting me using the details below.
I may need to verify your identity before providing access to your information.
I will respond to access requests within a reasonable period.
In some circumstances, I may be unable to provide access to particular information where an exception under applicable privacy law applies. If this occurs, I will explain the reason where I am permitted to do so.

Correcting your information

I take reasonable steps to ensure that personal information I hold is accurate, complete and up to date.
If you believe information I hold about you is inaccurate, incomplete, out of date or misleading, you may request that it be corrected.
Please contact me using the details below.
If I determine that the information requires correction, I will take reasonable steps to correct it.

Marketing communications

I may send information about my services, programs, resources, workshops, newsletters and other offerings where you have consented to receive marketing communications or where otherwise permitted by law.
You can unsubscribe at any time.
Your decision to unsubscribe from marketing communications will not affect your ability to receive services or necessary administrative communications.

Children and teenagers

Some of my services are available to children and teenagers.
Where services are provided to someone under 18, I may collect information from the young person and/or their parent, guardian or other authorised person as appropriate.
I will handle personal information relating to children and young people with appropriate care and in accordance with applicable privacy, consent and legal requirements.

Third-party websites

My website may contain links to websites or services operated by third parties.
These websites have their own privacy policies and practices.
I am not responsible for the privacy, security or content of third-party websites.
I encourage you to review the privacy policy of any third-party website before providing personal information.

Social media

I may maintain social media accounts and communicate with people through social media platforms.
Information you voluntarily make public through social media may be visible to others and may also be collected and used by the relevant social media platform in accordance with its own privacy policy.
I will not intentionally publish your private personal information through my social media channels without your appropriate consent, unless disclosure is otherwise permitted or required by law.

Unsolicited information

If I receive personal information that I did not request, I will assess whether I could have lawfully collected that information.
Where I could not have lawfully collected the information and it is not required to be retained by law, I will take reasonable steps to destroy or de-identify it.

Data breaches

I take reasonable steps to protect the personal information I hold.
If I become aware of a data breach involving personal information, I will assess and respond to the breach in accordance with applicable privacy requirements.
Where the Notifiable Data Breaches scheme applies and a breach is likely to result in serious harm to affected individuals, I will comply with applicable notification requirements.

Privacy complaints

If you have a concern about the way I have handled your personal information, I encourage you to contact me first so that I can understand and attempt to resolve your concern.
You can make a privacy complaint by contacting:
Donella Storey
Email: donella@donellastorey.com.au
Please provide as much relevant information as possible about your concern.
I will acknowledge and investigate your complaint and aim to respond within a reasonable period.
If you are not satisfied with my response, or your concern remains unresolved, you may contact the Office of the Australian Information Commissioner (OAIC).
Information about making a privacy complaint is available from the OAIC.

Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my business, services, technology, privacy practices or legal requirements.
The most current version will be published on this website.
The “Last updated” date at the beginning of this policy indicates when it was most recently reviewed or changed.

Contact

If you have questions about this Privacy Policy, would like to access or correct your personal information, or wish to make a privacy complaint, please contact me:
Donella Storey
Email: donella@donellastorey.com.au
Website: www.donellastorey.com.au
I will treat your enquiry with care and respect and will take reasonable steps to address your request.

Your privacy matters

I recognise that the work I offer may involve sharing personal and deeply private aspects of your life.
I will treat the information you share with care, respect and discretion and will take reasonable steps to protect your privacy throughout your relationship with me.