Privacy Policy

1. Introduction

101 Group ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the site.

2. Information We Collect

We collect information you provide directly to us, including:

• Personal identification: name, email address
• Health information: information you share about your mental health needs (kept strictly confidential)
• Payment information: billing name, address, and payment card details (processed securely via Stripe — we do not store card numbers)
• Communications: messages you send us via contact forms or email
• Usage data: pages visited, time spent, browser type, IP address (anonymised where possible)

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve our services
• Process payments and manage billing via Stripe
• Schedule and manage appointments
• Send administrative communications (appointment confirmations, receipts)
• Respond to your enquiries
• Comply with legal and regulatory obligations
• Protect against fraud and ensure platform security

4. Payment Processing (Stripe)

We use Stripe to process all payments. When you make a payment, your card details are transmitted directly to Stripe and are never stored on our servers. Stripe is PCI DSS Level 1 certified — the highest standard of payment security.

Stripe may collect and process your payment data in accordance with their own Privacy Policy, available at stripe.com/privacy. By making a payment you also agree to Stripe's terms.

We receive a transaction token from Stripe which allows us to confirm payment without accessing your full card details.

5. How We Share Your Information

We do not sell, trade, or rent your personal information. We may share information only in the following circumstances:

• Service providers: Stripe (payments), scheduling software, cloud hosting providers — all bound by confidentiality obligations
• Legal requirements: when required by law, court order, or governmental authority
• Safety: where disclosure is necessary to protect the safety of you or others (mandatory reporting obligations)
• Business transfers: in connection with a merger or acquisition, subject to the same privacy protections

6. Clinical Confidentiality

All clinical information shared during therapy sessions is strictly confidential and governed by applicable professional and legal standards. Exceptions are limited to mandatory reporting obligations (risk of harm to self or others) as required by Australian law.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Clinical records are retained for a minimum of 7 years (or until a minor turns 25) in accordance with Australian health record requirements.

Payment records are retained as required for tax and accounting purposes (generally 7 years).

8. Cookies and Tracking

Our website uses cookies and similar tracking technologies to improve your experience. We use:

• Essential cookies: required for the site to function
• Analytics cookies: to understand how visitors use our site (anonymised)
• Preference cookies: to remember your settings

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

9. Your Rights

Under Australian Privacy law and applicable regulations, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal obligations)
• Opt out of marketing communications
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise these rights, contact us via our contact page.

10. Data Security

We implement industry-standard security measures including SSL/TLS encryption, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

11. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

12. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe a child has provided us information, contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, please reach out via our contact page.