Privacy Policy

Good Vibes Remedial Massage ("we", "us", "our") is committed to protecting your privacy. We handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and the Health Records and Information Privacy Act 2002 (NSW). This policy explains what we collect, why we collect it, and how you can access or correct it.

Depending on how you interact with us, we may collect:

• Your name, phone number, email address and postal address.
• Health information you provide for treatment, including medical history, injuries, symptoms, medications, treatment notes and progress records.
• Booking, appointment and payment details (including health fund information).
• Correspondence with us, including messages sent by email, phone or social media.
• Basic technical information when you visit our website, such as pages viewed and approximate location, used only to improve the site.

We use your information to:

• Assess, plan and deliver safe and appropriate remedial massage treatment.
• Manage bookings, appointment reminders, invoices and health fund rebates.
• Respond to your enquiries and provide aftercare advice.
• Meet our professional, insurance and legal record-keeping obligations.

We only collect health information with your consent and where it is reasonably necessary for your treatment.

We do not sell or trade your personal information. We may disclose information to:

• Your health fund or HICAPS/payment provider, where needed to process a claim or payment.
• Other health practitioners involved in your care, with your consent or on your referral.
• Our booking, accounting and IT service providers, who are bound to protect it.
• Any person or body where required or authorised by Australian law, or where there is a serious threat to life, health or safety.

Some service providers (for example online booking or email platforms) may store data overseas. We take reasonable steps to ensure they protect your information to a standard consistent with the APPs.

Clinical records are stored securely in password-protected digital systems and/or locked physical storage, accessible only to authorised personnel. Health records are retained for at least seven years from the date of last service (or, for a client under 18, until they turn 25), as required by Australian health record laws, then securely destroyed.

You may request access to the personal and health information we hold about you, or ask us to correct it, by contacting us using the details below. We will respond within a reasonable period, usually within 30 days. In limited circumstances permitted by law we may refuse access, and if we do we will explain why in writing.

Our website may use cookies and basic analytics to understand how visitors use the site. You can disable cookies in your browser settings; some features may not work as intended if you do. Our site may link to third-party services (such as our booking provider and social media pages), which have their own privacy policies.

If you believe we have breached your privacy, please contact us first so we can resolve it. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au or, for NSW health records, the NSW Information and Privacy Commission at ipc.nsw.gov.au.

We may update this policy from time to time. The current version will always be available on this page with the date it was last updated.