How we collect, use, and protect your personal information
Last updated: 19 June 2026 (Rev. 2)
This Privacy Policy explains how this service ("we", "our", "us"), operating in Australia, collects, holds, uses, and discloses your personal information. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
By using this website or making a booking, you agree to the collection and use of your information as described in this policy.
We collect personal information necessary to provide our services, including:
We collect this information directly from you when you make a booking or complete a health intake form. Health information is classified as sensitive information under the Privacy Act and is handled with heightened care.
We collect and use your personal information to:
We will not use your information for any purpose not listed above without your consent.
Your information is stored securely in Google Firebase (Firestore), a cloud database service provided by Google LLC. Data is encrypted at rest and in transit using TLS/HTTPS. Access is restricted to the authorised business owner only.
We retain your records for a minimum of 7 years as required by Australian health records legislation. For clients who were under 18 at the time of treatment, records are retained until they turn 25 years of age, or for 7 years from the date of last service, whichever is longer. After this period, records will be securely destroyed.
We do not sell, rent, or share your personal information with third parties, except:
Under the Australian Privacy Principles, you have the right to:
To exercise any of these rights, please contact us at the details below. We will respond within 30 days.
This website is hosted on Google Firebase and uses Firebase services including Firestore (database) and Firebase Authentication. These services are provided by Google LLC and may collect anonymised technical data (such as page load performance) as part of standard operation.
This site may use Google Analytics to collect aggregate, anonymised usage statistics. This data is not used for advertising and is not shared with third parties. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
We do not use advertising cookies or third-party tracking cookies beyond the above. If this changes, this policy will be updated and a cookie consent notice will be displayed.
Firebase services are subject to Google's Privacy Policy. Data processed by Firebase is stored on servers operated by Google LLC, a company incorporated in the United States. Data may be processed in the US or other countries where Google operates data centres. We rely on Google LLC's Data Processing Addendum and standard contractual clauses as safeguards under APP 8. You can review Google's data transfer commitments at cloud.google.com/terms/data-processing-addendum.
We are subject to the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth). If we become aware of an eligible data breach — one that is likely to result in serious harm to one or more individuals — we will:
Notification will include a description of the breach, the kinds of information involved, and the steps we recommend you take in response. We maintain an internal data breach response plan and will take immediate steps to contain and remediate any breach.
If you have a complaint about how we have handled your personal information, please contact us directly first. If your complaint is not resolved to your satisfaction, you may contact the Office of the Australian Information Commissioner (OAIC):
For privacy inquiries or to exercise your rights under the Australian Privacy Principles, please contact:
We will acknowledge your request within 5 business days and respond fully within 30 days.
This policy may be updated from time to time. Any changes will be posted on this page with a revised date.