Privacy Policy
This page explains what personal information drallademutska.com collects, why, where it goes, how long I keep it, and what you can ask me to do with it. It is written in plain English because you should be able to understand it without a lawyer.
Last updated 23 September 2026
Who I am and what this policy covers
This website is run by Dr Alla Demutska, a clinical psychologist registered in Australia with the Australian Health Practitioner Regulation Agency (Ahpra) and a Full Member of the Singapore Psychological Society. I work online and my readers, course participants and clients are in Singapore, Australia and other countries.
Because I am an Australian-registered health practitioner, I handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth), wherever you are. If you are in Singapore, the Personal Data Protection Act 2012 also applies to how I handle your data, and there is a short section for you below.
This policy covers the website only: the free guides, the quiz, the email list, the self-paced courses, the group programme application and deposit, the Ask Dr Alla column, the share-your-experience page, and the analytics and advertising tools that run on these pages.
If you are, or become, a therapy client, your clinical records are governed by the separate consent form you sign before we start work together. That form sets out confidentiality and its limits, how your session notes are kept, and any recording or AI note-taking you agree to. Nothing on this page changes what that form says.
Questions about anything here go to alla@drallademutska.com.
What I collect, and why
I only collect what each form actually asks for. Nothing on this site collects information you have not typed in yourself, apart from the automatic technical data described in the cookies section below.
Free guides, the midlife quiz, the webinar and keynote recordings
When you ask for a free guide, finish the midlife quiz, or request a recording, I collect your first name, your email address, and which resource you asked for. If you took the quiz, I also keep the name of the profile your answers pointed to, so the email I send you can carry it. Your individual quiz answers and dimension scores stay in your own browser and are not sent to me.
I use this to send you the resource and, from time to time, new writing. There are no automated email sequences. How to stop these emails is set out below.
Joining the email list and the therapy waitlist
The email list form collects your name, email address and the topics you tick. The individual therapy waitlist also asks what you are struggling with, what you hope for, what you expect from therapy, how often you would want to meet, and a confirmation that you are not in crisis. I read every entry personally and use it to decide whether and when to offer you a place. A copy of each entry is emailed to me.
Applying to the group programme
The application form collects more, because I have a duty to check that group work is safe for you. It asks for your name, email, phone number, location and age; what brings you and what you want to work on; whether you are in therapy, and if so your therapist's name and contact details; your experience of group work; whether you are currently in crisis and, if so, some detail; your treating doctor's name and contact details; an emergency contact (name, relationship, phone); how you heard about the programme; and anything else you want me to know.
Much of this is health information, which the Australian Privacy Principles treat as sensitive. I collect it only with your consent, which you give by submitting the form after reading the disclaimer step, and I use it for one purpose: to assess whether the programme is right for you and to keep you safe if you join. I do not use it for marketing. It is not shared with anyone unless you are in the programme and there is a safety reason to contact your treating doctor or emergency contact, or the law requires it.
If you start the form and stop after the first step, I keep only your name and email so I can follow up. A copy of every completed application is emailed to me so I can read it promptly.
Paying a deposit
Before you pay a deposit for the group programme you confirm a disclaimer. I record your name, email address, the wording and version of the disclaimer you agreed to, the time, the page you were on, your IP address and your browser type, and I email you a copy. This is evidence that you agreed, and it protects both of us. Payment itself is handled by Stripe (see below).
Enrolling in a self-paced course
Before you pay for a course you confirm an enrolment agreement. I record your name, email address, which course, the version of the agreement, a digital fingerprint of its exact wording, your IP address and your browser type, and I email you a copy. Payment is handled by Stripe. When Stripe confirms payment, I record your name, email, the course, the amount paid, Stripe's reference for the transaction, your access code and the date your access ends.
Once you are enrolled I also record the date you first open each module. That date sets the timing of the weekly module emails. If you complete the three-question reading at the start of the Inner Critic course, I store your three answers against your email so I can send them back to you at the final module. Your browser stores your access details so you are not asked for them every time.
When you enrol you are added to my email list for course-related communication, as the enrolment agreement says. The weekly module emails have a one-click stop link.
Ask Dr Alla
The question form collects your question, an age band, and, only if you choose to give them, your first name and email address. Questions can be sent with no name and no email. If you tick the box, your question may be answered publicly on my Substack with all names and identifying details changed. You can email me at any time to ask that a question not be published, or be taken down. If you tick the subscribe box, your email is added to my list.
Share your experience
This page is for people who have worked with me and want to say something about it. It collects your name, your role, your words, and optionally a photo or a link to a video, together with your ticked consent to publish. Photos are uploaded to my website storage. Nothing from this page is published without that consent, and you can withdraw it at any time by emailing me, after which I will remove it.
Emailing me directly
If you write to me, I keep the email and my reply for as long as I need them to deal with your question.
How long I keep it
| Category | Kept for |
|---|---|
| Email list, free guide and quiz signups | Until you unsubscribe or ask me to delete you. |
| Therapy waitlist entries | Until a place is offered or you ask to be removed, and in any case reviewed every twelve months. |
| Group programme applications, including health information | For the period Australian law requires health practitioners to keep records, which is seven years from the last contact for adults. Applications from people who do not join the programme are treated the same way, because they contain health information collected in a clinical screening. |
| Deposit and enrolment agreements | Seven years, alongside the purchase they relate to. |
| Course purchase records and module opens | Seven years from the purchase, for tax and accounting purposes. |
| Ask Dr Alla questions | Until answered and published, or until you ask me to delete the question. Published answers carry no identifying details. |
| Testimonials | Until you withdraw consent. |
| Analytics and pixel data | Held by Google and Meta under their own retention settings. I keep no separate copy. |
When a retention period ends, or when you ask me to delete your information and no law requires me to keep it, I delete it from the database and from my email.
How I protect it
The database is protected by access rules so that the code on this website can write a new entry but cannot read entries back; only I can read them, through an authenticated connection. Every form on the site is sent over an encrypted connection. Payment card details are never stored by me. Access to my email and my database accounts is protected by strong passwords and two-factor authentication. If a breach were ever likely to cause you serious harm, I would tell you and notify the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
Emails, and how to stop them
Emails from this site come from admin@drallademutska.com.
Occasional writing and updates, sent to everyone on the list. To stop these, reply to any of them with "unsubscribe" in the subject line, or write to alla@drallademutska.com. I remove you by hand within a few days.
Weekly course module emails, sent only while your course access is active. Each one has a "Stop them" link at the bottom that switches them off with one click.
Transactional emails, such as your copy of an agreement, your course access details or a reply to your application, are sent because you asked for the service and cannot be switched off separately.
Access, correction and deletion
You can ask me at any time to tell you what personal information I hold about you, to correct it, or to delete it. Write to alla@drallademutska.com from the email address you used on the site, or tell me which address that was. I will reply within 30 days. There is no charge.
I will delete what you ask me to delete unless a law requires me to keep it, for example a purchase record I must hold for tax purposes, or a group programme application that forms part of a clinical screening record. If that is the case I will tell you what I have kept and why.
You can withdraw any consent you have given, for example to publish a question or a testimonial, and I will act on it. Withdrawing consent does not affect anything done before you withdrew it.
Children
This site and everything on it is for adults. I do not knowingly collect personal information from anyone under 18. If you believe a child has submitted information, email me and I will delete it.
If you are in Singapore
The Personal Data Protection Act 2012 gives you the right to know what personal data I hold about you and how it has been used, to correct it, and to withdraw consent. The same email address handles all of these. Under the PDPA I am responsible for your data when it is transferred out of Singapore, and the providers listed above are the only places it goes. If you are not satisfied with my response, you can contact the Personal Data Protection Commission at pdpc.gov.sg.
Complaints
If you think I have handled your personal information wrongly, please write to me first at alla@drallademutska.com. I take this seriously and I will respond within 30 days. If you are not satisfied with my response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or, if you are in Singapore, to the Personal Data Protection Commission.
Changes to this policy
If I add a new tool or start collecting something new, I will update this page and change the date at the top. Where a change affects information you have already given me, I will email you about it.
Contact
Dr Alla Demutska
alla@drallademutska.com
drallademutska.com