Elev8d Therapy is committed to protecting your privacy and handling your personal and health information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and the Health Records and Information Privacy Act 2002 (NSW).
1. Scope of This Policy
This Privacy Policy applies to all personal and health information collected by Elev8d Therapy through:
Our website (elev8dtherapy.com.au)
Online booking system
In-person consultations and treatments
Phone and email communications
Paper-based forms and records
As a health service provider, we are bound by additional obligations under the Health Records and Information Privacy Act 2002 (NSW) regarding health information.
As a massage therapy practice, we collect health information which is classified as "sensitive information" under Australian privacy law. This includes:
Medical history: Current and past injuries, conditions, surgeries, and treatments
Health conditions: Chronic pain, allergies, pregnancy status, contraindications
Referral information: Information from or to other healthcare providers (with your consent)
Lifestyle factors: Occupation, activity levels, and factors relevant to treatment
Technical Information
When you visit our website, we automatically collect:
IP address and browser type
Pages visited and time spent on site
Referring website
Device type and operating system
3. How We Use Your Information
Primary Purposes
We use your information to:
Provide massage therapy and rehabilitation services
Create and maintain your client health record
Process and manage your appointments
Communicate with you about your treatment
Send appointment reminders and confirmations
Process payments and issue receipts
Secondary Purposes
With your consent, we may also use your information to:
Send you health and wellness information
Inform you about our services and promotions
Request feedback to improve our services
Legal and Administrative Purposes
Comply with legal and regulatory requirements
Respond to legal requests or court orders
Protect our rights and safety
4. Legal Basis for Processing
We process your information based on:
Consent: You provide explicit consent for collection of health information when completing intake forms
Contractual necessity: Processing is necessary to provide the services you have requested
Legal obligation: We are required by law to maintain health records
Legitimate interests: For administrative purposes and improving our services
Health Information Consent
Collection of health information requires your explicit consent. By completing our health intake form and agreeing to treatment, you consent to the collection, use, and storage of your health information for the purposes outlined in this policy.
5. Storage and Protection
Data Security
We protect your information through:
Secure, encrypted electronic storage systems
Password-protected access to client records
Physical security measures for paper records
Staff training on privacy and confidentiality
SSL encryption on our website
Secure payment processing through third-party providers
Record Retention
In accordance with NSW Health Records regulations, we retain health records for:
Adult clients: 7 years from the date of last treatment
Clients under 18: Until the client turns 25, or 7 years from last treatment, whichever is longer
After the retention period, records are securely destroyed.
Data Location
Your personal and health information is stored in Australia. We do not transfer health information overseas without your explicit consent.
6. Who We Share Information With
We May Share Your Information With:
Other healthcare providers: With your consent, for continuity of care (e.g., referring doctor, physiotherapist)
Health funds: To process your health insurance claims
Service providers: Who assist with appointment booking, payment processing, and IT services (bound by confidentiality agreements)
Legal authorities: When required by law or court order
We Will NOT:
Sell your personal or health information
Share your information for marketing purposes without consent
Disclose your health information without your consent (except where legally required)
7. Your Privacy Rights
Under Australian privacy law, you have the right to:
Access Your Information
You can request access to the personal and health information we hold about you. We will respond within 30 days and provide access in the format you request where reasonably possible.
Correct Your Information
If you believe information we hold is inaccurate, incomplete, or out of date, you can request correction. If we disagree with the correction, you may request we attach a statement to the record.
Withdraw Consent
You may withdraw consent for:
Marketing communications (at any time)
Certain uses of your information (subject to our legal obligations to retain health records)
Request Deletion
You may request deletion of your personal information where we no longer need it. Note that we are legally required to retain health records for the periods specified above.
Data Portability
You can request a copy of your health records in a commonly used format to transfer to another healthcare provider.
We use essential cookies to make our website work. We'd also like to set optional cookies to help us improve your experience.
Cookie Policy |
Privacy Policy