Website Privacy Policy

Effective date: 30 July 2026

1. About this policy

Comma + Co respects your privacy and is committed to handling personal information carefully, transparently and in accordance with applicable Australian privacy laws.

This Website Privacy Policy explains how we collect, use, store and disclose information when you:

• Visit the Comma + Co website;

• Submit an enquiry or contact form;

• Subscribe to receive updates or other communications;

• Follow a link to book or pay for a service; or

• Otherwise interact with us online.

This policy applies specifically to the Comma + Co website and associated online activity.

If you become a counselling or coaching client, additional privacy, confidentiality and record-keeping provisions will apply. These are explained separately in our Client Privacy Policy, Informed Consent documentation and service agreements.

2. Information we may collect

When you use this website, we may collect the following types of information.

Information you provide directly

This may include:

• Your name;

• Your email address;

• Your telephone number;

• The service you are interested in;

• Information included in an enquiry or contact form;

• Communication preferences;

• Newsletter or mailing-list subscriptions; and

• Correspondence you send to us.

Please only provide information that is reasonably necessary for us to respond to your enquiry. General website forms are not intended for detailed clinical information, urgent mental health concerns or crisis support.

Information collected automatically

When you visit the website, certain technical and usage information may be collected automatically through Squarespace, Google Analytics and related technologies.

This may include:

• Your IP address;

• Browser and device type;

• Approximate geographic location;

• Referring website or source;

• Pages viewed;

• The date, time and duration of a visit;

• Links or website features used; and

• Information about how visitors navigate and interact with the website.

This information is generally used in aggregated form to understand website performance and improve the visitor experience.

3. How we collect information

We may collect personal information when you:

• Complete an enquiry or contact form;

• Subscribe to receive email communications;

• Correspond with us by email;

• Interact with the website;

• Accept or manage website cookies; or

• Follow a link from the website to an external booking platform.

We aim to collect personal information directly from you wherever reasonably possible.

4. How we use your information

We may use information collected through the website to:

• Respond to enquiries;

• Provide information about our services;

• Facilitate appointment requests;

• Send communications you have requested;

• Manage newsletter subscriptions;

• Operate, maintain and secure the website;

• Understand website use and visitor needs;

• Improve our content, services and website experience;

• Diagnose technical issues;

• Maintain appropriate business records; and

• Comply with legal and regulatory obligations.

We will not use personal information for an unrelated purpose unless you have consented or the use is otherwise authorised or required by law.

5. Enquiries and sensitive information

Information about a person’s physical, emotional, psychological or mental health may be considered sensitive or health information under Australian and Victorian privacy laws.

If you include health or other sensitive information in a website enquiry, we will only use it as reasonably necessary to understand and respond to your request, or as otherwise permitted by law.

Submitting an enquiry does not establish a therapeutic relationship with Comma + Co. Please do not use the website or email for emergencies, crisis assistance or time-sensitive clinical support.

If you require urgent assistance, call Triple Zero on 000 or contact an appropriate crisis or emergency service.

6. Bookings and payments

Appointments and associated payments are completed through Halaxy, an external practice-management platform.

When you follow a booking link, you leave the Comma + Co website and provide information directly through Halaxy. Halaxy may collect information such as your contact details, appointment information, payment information and information relevant to the service you are seeking.

Halaxy’s collection and processing of information through its platform are also subject to its own privacy terms and security practices. Personal information subsequently received or held by Comma + Co is managed in accordance with our professional, legal and client privacy obligations.

We encourage you to review Halaxy’s privacy information before submitting information through its platform.

7. Website hosting and Squarespace

This website is hosted by Squarespace.

Squarespace may process information required to operate, secure and deliver the website. It may also use cookies and similar technologies to provide website functionality and generate analytics about website traffic and activity.

You can read more about how Squarespace handles information in the Squarespace Privacy Policy and Squarespace Cookie Policy.

8. Google Analytics

We use Google Analytics to better understand how visitors find and use the website.

Google Analytics may collect information about website visits, devices, approximate location and interactions with website content. We use this information to assess website performance and improve the relevance and usability of our content.

We do not intentionally send names, email addresses, telephone numbers or detailed health information to Google Analytics.

Information collected through Google Analytics is handled in accordance with Google’s terms and privacy practices. More information is available in the Google Privacy Policy.

Visitors may also use the Google Analytics opt-out browser add-on to prevent their website activity being made available to Google Analytics.

9. Cookies

Cookies are small data files stored on your device when you visit a website. This website may use:

• Essential cookies required for the website to operate;

• Analytics and performance cookies used by Squarespace;

• Google Analytics cookies; and

• Cookies associated with embedded or connected services.

You may be able to accept, decline or manage non-essential cookies using the cookie controls displayed on the website. You can also manage or block cookies through your browser settings.

Disabling certain cookies may affect how some website features operate.

10. Email communications

If you subscribe to receive updates, we may use your name and email address to send the communications you requested.

You may unsubscribe at any time by using the unsubscribe link included in an email or by contacting kr@commaandco.com.au.

Unsubscribing from general communications will not prevent us from sending essential administrative messages relating to an enquiry, appointment or existing service relationship.

We do not sell or rent mailing-list information to third parties.

11. Third-party links and embedded content

The website may contain links to third-party websites, booking platforms, social media services or embedded content.

Those third parties may collect information when you interact with their services. Their handling of information is governed by their own privacy policies and is outside the direct operation of this website.

A link to an external website does not mean that Comma + Co controls or accepts responsibility for that website’s privacy practices.

12. Disclosure to service providers

We may disclose personal information to trusted service providers where reasonably necessary to operate the website or respond to your request. These may include providers of:

• Website hosting and administration;

• Website analytics;

• Email and communication services;

• Practice management and appointment booking;

• Payment processing;

• Professional information technology support; and

• Legal, regulatory or professional advisory services.

We only disclose information that is reasonably necessary for the relevant service or purpose.

We may also disclose information where required or authorised by law, or where necessary to address a serious threat to health or safety.

13. Overseas processing and storage

Some technology providers used by this website, including Squarespace and Google, operate internationally. Information processed through these services may be stored or accessed in the United States and other countries in which those providers or their service providers operate.

Privacy protections in another country may differ from those applying in Australia. We take reasonable steps when selecting and configuring service providers, but we cannot control the location of every server or technical process used by an external platform.

Further information about international processing is available in each provider’s privacy policy.

14. Storage and security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

These steps may include:

• Using reputable website and technology providers;

• Applying access controls;

• Limiting access to people who require the information;

• Maintaining password and account security;

• Using secure website connections; and

• Reviewing the services used to collect and store information.

No website, email transmission or online storage system can be guaranteed to be completely secure. You provide information online at your own risk.

15. Retention and deletion

We retain website-related personal information only for as long as it is reasonably required for the purpose for which it was collected, to maintain appropriate business records, or to meet legal and regulatory obligations.

Information that is no longer required will be deleted or de-identified when reasonably possible, subject to applicable record-retention requirements.

Different retention requirements apply to client and clinical records. These are addressed separately in our client privacy and informed-consent documentation.

16. Accessing or correcting your information

You may ask to access personal information we hold about you or request that inaccurate, incomplete or outdated information be corrected.

Requests can be made by emailing kr@commaandco.com.au.

We may need to verify your identity before providing access or making a correction. In limited circumstances, access may be refused where permitted or required by law. If this occurs, we will explain the reason where we are legally able to do so.

17. Privacy enquiries and complaints

If you have a question, concern or complaint about how information collected through the website has been handled, please contact:

Privacy Contact
Comma + Co
Email: kr@commaandco.com.au

Please provide enough information for us to understand and investigate your concern. We will acknowledge and respond to privacy complaints within a reasonable period.

If you are not satisfied with our response, you may be entitled to contact:

• The Office of the Australian Information Commissioner; or

• The Victorian Health Complaints Commissioner, where the matter concerns health information or a health service.

18. Changes to this policy

We may update this Website Privacy Policy when our website, services, technology providers or legal obligations change.

The current version will be published on this website with its effective date. We encourage visitors to review it periodically.

19. Contact

Questions about this Website Privacy Policy can be directed to:

Comma + Co
Email: kr@commaandco.com.au