Last updated: July, 2026
Zahra Ciardi, and PT Ascendant Wellness Group (trading as Ascendant Bali), are committed to protecting your privacy in compliance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), applicable Indonesian data protection law, and the AHPRA Code of Conduct for registered psychologists.
This Privacy Policy explains what personal information we collect, how we collect and hold it, why we collect it, how you can access or correct it, and how you can make a complaint.
On this page
1. Types of personal information collected
2. How we collect and hold personal information
3. Purposes for collecting personal information
4. AI tools used in our practice
5. Access and correction
6. Storage and security
7. Overseas disclosure of personal information
8. How long we keep your information
9. Cookies and website analytics
10. Complaints
11. Anonymity and pseudonyms
12. AHPRA registration
13. Updates to this policy
This may include:
- Personal details: name, address, date of birth, email, phone number, nationality, location.
- Health information: clinical history, presenting concerns, diagnoses, treatment notes, session recordings and transcripts, medication and treatment history, and information shared during intake, assessment, or care.
- Sensitive information: where relevant to your care, information about matters such as substance use history, mental health history, or other sensitive categories you choose to share with us.
- Billing and administrative details: payment information, program agreements, correspondence.
- Media and press enquiry details from members of the press: name, publication or outlet, role, contact details, and the nature of your enquiry, where submitted via our press enquiry form.
- Technical and website data: IP address, device and browser type, pages visited, form submission data, cookies (see Section 9).
We collect personal information:
- Directly from you, via our website enquiry form, email correspondence, phone, or in person.
- From a person responsible for you, where relevant.
- From third parties involved in your care, where you have consented, such as referring clinicians, hospitals, or other treatment providers.
Website enquiry form.
Enquiries submitted through our website via Webflow are sent directly to Gmail, with no third-party middleware involved.
Client records.
Once engaged as a client, your information is held in Zanda, our practice management system. Zanda is Australian-owned, and data for Australian-registered accounts is hosted in Sydney data centres via Amazon Web Services according to the latest information from Zanda as per last update of this document.
Video consultations.
Video sessions are conducted via Zoom. Zoom's built-in AI Companion may be used to generate call notes or summaries during some sessions. We will seek out your consent prior to the use of this feature (Informed Consent Form provided at the start of your engagement with our services).
Clinical documentation.
We may use Heidi Health, an Australian-based AI clinical scribe, to assist with transcription and note generation during consultations. Heidi Health is built specifically for clinical use, is hosted within Australia for Australian accounts, and aligns with the Australian Privacy Principles. Heidi does not retain audio recordings after transcription is complete.
We hold personal information in secure, access-controlled electronic systems.
We use and disclose your personal information to:
- Assess suitability for and provide our services, including individual therapy, coaching, and Ascendant Bali residential programs.
- Communicate with you about your enquiry, intake, or ongoing care.
- Liaise with other treatment providers involved in your care, where you have consented.
- Manage billing, administration, and program agreements.
- Meet legal and regulatory obligations, including obligations to AHPRA.
- Improve our website and services through aggregate, de-identified analytics.
- Send optional marketing or educational communications, where you have opted in. You can withdraw consent at any time by contacting [email].
- If you are contacting from the Press / Media: we use your data to respond to your enquiriesenquiries submitted via our press enquiry form.
We use AI-assisted tools to support clinical documentation and administrative efficiency. Specifically:
- Heidi Health, an Australian clinical AI scribe, may be used during consultations to assist with note-taking and generating clinical summaries.
- Zoom AI Companion may be used during video consultations to generate call notes.
The use of AI tools is at [Zahra's / the treating clinician's] discretion. You will be informed if an AI tool is being used during your session and may opt out at any time; if you opt out, no AI-assisted recording or transcription will occur and notes will be taken manually. AI-generated data is used solely for clinical documentation and administrative purposes and is not used to train AI models without your explicit consent.
You may request access to, or correction of, the personal information we hold about you by contacting [zahra@zahraciardi.com]. We may require identity verification before releasing or correcting information. We will respond within a reasonable timeframe no later than 30 days.
We take reasonable steps to protect your information from misuse, loss, and unauthorised access, including:
- Storage of clinical and administrative records in Zanda, an Australian practice management system.
- Encryption of electronic records in transit and at rest.
- Access controls limiting information to Zahra Ciardi and relevant clinical or administrative staff bound by confidentiality obligations.
- Regular review of our security practices and third-party processor agreements.
As Ascendant Bali is based in Indonesia and we work with clients located around the world, your personal information may be transferred to, stored, or processed in a country other than your own, including Australia and Indonesia where our practice and program are based. By providing your information to us, you consent to this transfer. We take reasonable steps to ensure your information is handled consistently with this policy regardless of your location.
Separately, some of the service providers we use to deliver our services are headquartered overseas. In line with Australian Privacy Principle 8, these are disclosed below.
1. Zanda Health
Australia (Sydney, AWS)
Purpose: Practice management, client records, billing
2. Heidi Health
Australia
Purpose: AI-assisted clinical documentation and transcription
3. Zoom
United States
Purpose: Video consultations; AI Companion call notes (where enabled)
4. Google (Gmail)
United States
Purpose: Email correspondence, website enquiry handling
5. Google Analytics
United States
Purpose: Aggregate website analytics (does not identify you personally)
6. Webflow
United States
Purpose: Website hosting and built-in analytics
We retain personal information only as long as necessary for the purposes it was collected, or as required by law.
- Clinical records: Ascendant Bali and Zahra Ciardi's practice work exclusively with adult clients. Clinical records are retained for a minimum of 7 years from the date of the last entry, consistent with Australian health records legislation.
- Enquiry form submissions that do not proceed to engagement: deleted after 12 months if no further contact.
- Marketing contacts: retained until you withdraw consent / unsubscribe.
Our website uses cookies and similar technologies, including essential cookies required for the site to function, and analytics cookies to understand visitor behaviour in aggregate. We use:
- Google Analytics, which helps us understand visitor behaviour in aggregate. This data does not identify you personally.
- Webflow Analytics, our website platform's built-in analytics, which provides aggregate site usage data.
You can disable cookies through your browser settings; disabling essential cookies may affect site functionality.
If you believe we have breached your privacy, please contact us in writing at zahra@zahraciardi.com
We will acknowledge your complaint within 5 business days days and respond substantively within 30 days.
If you are not satisfied with our response, you may contact:
- The Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au
- Relevant Indonesian data protection authority, if applicable.
- AHPRA / the relevant psychology board, for concerns relating to professional conduct
11. Anonymity and pseudonyms
Where possible, you may choose not to identify yourself or to use a pseudonym in initial enquiries. However, accurate identification is generally required for the safe and effective delivery of clinical care.
12. AHPRA registration
Zahra Ciardi is a registered psychologist with the Australian Health Practitioner Regulation Agency (AHPRA), registration number PSY0002180363. This website and its content are provided for general information purposes only and do not constitute individual clinical advice, nor do they establish a therapist-client relationship until formally engaged.
13. Updates to this policy
We review this policy periodically. The "last updated" date at the top reflects the most recent change. Where we make material changes to how we handle your personal information, we will take reasonable steps to notify current clients and update this page accordingly.
