How Active Attunement collects, uses, stores, and protects personal information — under New Zealand law, including the Privacy Act 2020 and the Health Information Privacy Code 2020.
Effective: [EFFECTIVE DATE] · Last updated: [LAST UPDATED DATE]
This practice and this policy are governed by New Zealand law, including the Privacy Act 2020 and the Health Information Privacy Code 2020. By engaging Active Attunement — whether you submit an enquiry, book a session, or work with us in any capacity — you agree that any privacy enquiries, requests, or complaints will be handled under this policy and under New Zealand law.
We welcome clients from Australia and elsewhere. Please consider whether this framework is acceptable for you before engaging. If you would prefer a privacy framework administered under your own country's law, you are welcome to seek a locally based practitioner.
Active Attunement is the practice of Katy Thomas, a nervous-system-informed clinician based in Aotearoa New Zealand and working with clients across Australasia. References in this policy to "we", "us", and "our" refer to Active Attunement. Katy Thomas is the privacy officer for the practice and is responsible for handling privacy enquiries and complaints.
When you visit this website, get in touch, or work with us, we may collect:
We collect personal information to:
We do not use your personal information for marketing without your express consent. We never sell or trade personal information.
Information you provide is used only for the purposes set out above, or for purposes you would reasonably expect given the context in which you provided it. If we ever need to use your information for a new purpose, we will ask you first and seek your consent.
We keep your information private. The only parties who may have access are:
Where data is transferred outside New Zealand for processing (for example, where a provider stores data on servers in the United States, Europe, or Australia), we take reasonable steps to ensure it is handled to a standard comparable to New Zealand privacy law, including reviewing each provider's contractual privacy commitments. This is consistent with our obligations under Information Privacy Principle 12 of the Privacy Act 2020.
We use reasonable safeguards to protect personal information against loss, unauthorised access, modification, or disclosure. These include encrypted connections (HTTPS) for our website, access controls on our records, multi-factor authentication on the accounts that hold client information, and considered provider selection.
No system is perfectly secure. If a notifiable privacy breach occurs, we will notify affected individuals and the Office of the Privacy Commissioner as soon as practicable, in accordance with the New Zealand Privacy Act 2020.
We keep personal information only for as long as we need it for the purposes set out above, or as required by law. Where records relate to clinical work, we retain them in line with New Zealand health-records obligations.
Under the Privacy Act 2020 and the Health Information Privacy Code 2020, you have the right to:
To exercise any of these rights, contact us at hello@activeattunement.com. We will respond within 20 working days. For requests about clinical records, we may need additional information to verify your identity before releasing records.
Where information relates to a child, the child's parent or legal guardian is generally the appropriate point of contact for access and correction requests, with consideration of the child's age, maturity, and best interests. We will discuss any specific concerns directly with you.
We collect only the information about a child that is genuinely relevant to assessing fit and shaping the work. We do not share information about a child with third parties without the explicit, informed consent of a parent or legal guardian, except as required by law or where there is a serious threat to life or safety.
This website does not currently use cookies for analytics, advertising, profiling, or remarketing. The only browser storage in use is your own device's local storage on the contact and application page, which saves your in-progress form answers so you can return to them later. This draft data lives only on your device and is cleared automatically when you submit the form, when you choose "Start fresh" on the form, or when you clear your browser's site data.
As Active Attunement grows, we expect to add the following. We are flagging this now so you know what to expect; when any of these tools is actually deployed, we will update the "Last updated" date on this policy and display a notice on the website (such as a consent banner) before any non-essential tracking loads.
These tools may collect information such as your IP address, the pages you visited, the device and browser you used, and identifiers that allow advertising platforms to recognise you on their own services. We will only enable them once a consent mechanism is in place.
Where it is lawful and practicable, you may interact with us anonymously or by pseudonym — for example, when making a general enquiry. To engage in clinical work or to refer an identified client, identifying information is necessary.
We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page will always reflect the most recent revision. If we make significant changes, we will let current clients know directly by email.
If you have a question or concern about how we have handled your personal information, please reach out to us first:
We will acknowledge your concern within 5 working days and aim to provide a substantive response within 20 working days.
If you are not satisfied with our response, you may make a complaint to the New Zealand Office of the Privacy Commissioner: privacy.org.nz · 0800 803 909.