Privacy Policy

‍ ‍

Recuperate and Reconnect is a sole trader business committed to providing quality massage therapy services. This policy explains how I collect, hold, use, and disclose personal information, in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). A copy of the Australian Privacy Principles can be accessed from the website of The Office of the Australian Information Commissioner (OAIC) at http://www.oaic.gov.au/. 

‍ ‍This policy applies to all clients, prospective clients, and visitors to my website or clinic. 

‍ ‍My main functions and activities involving personal information are:  

  • providing massage therapy services 

  • managing client records, bookings and payments 

  • operating my website 

  • sending appointment reminders, follow-up care information, or occasional marketing communications. 

‍ ‍If you have a concern about how I have handled your information, contact me first using the contact details at the end of this policy. 

‍ ‍Summary 

  • ‍I collect personal information, including health information, to provide massage therapy services to you safely and effectively.

  • I keep your information secure and only share it with others (like your GP or another health professional) if you ask me to, or if the law requires it. 

  • I store your information using a secure cloud-based booking and clinical notes system, which stores data in Australia 

  • You can ask to see or correct your information at any time. 

‍ What information I collect 

‍ Depending on how you interact with me, I collect: 

‍ Personal information

  • Full name, date of birth, contact details (phone, email, postal address) 

  • Emergency contact details 

  • Payment and billing information for invoicing purposes. I do not store full card details. 

  • Booking history and appointment preferences. 

‍ Sensitive information (health information)

‍ I collect more detailed health information because it is necessary to provide safe and effective treatment. This includes: 

  • relevant medical history, current injuries, conditions, medications, allergies, and pregnancy status 

  • ‍ details you provide during consultations about symptoms and treatment goals 

  • clinical notes I make during and after your treatment.  

  • referrals or reports from other health practitioners where relevant and with your consent. 

‍ I only collect health information that is relevant to providing you with safe treatment. I will not ask for more than I need. 

‍ How I collect personal and sensitive information 

‍ I collect information directly from you through: 

  • ‍ online or phone bookings 

  • ‍ intake/consultation forms 

  • ‍ conversations during consultations and treatment 

  • ‍ email or text message correspondence 

  • my website 

  • Instagram 

‍ I also collect information indirectly, for example: 

  • via a referring health practitioner, if you’ve asked them to share relevant information with me 

  • via a third-party booking platform, Splose 

‍ I will always try to collect information directly from you unless it is unreasonable or impractical to do so.  

‍ When I collect personal information, I will explain why I am collecting it and how I plan to use it, unless it is already clear from the context 

‍ How I hold and protect your information 

‍Storage

‍I store your personal information using 

  • a cloud-based practice management system (booking and clinical notes) 

‍When your personal information is no longer needed for the purpose it was collected, I will take reasonable steps to destroy or permanently de-identify it. However, your personal information will be retained in your client file for a minimum of 7 years after your last appointment, in line with health record-keeping requirements. 

‍ Security

‍I take reasonable steps to protect your information from misuse, loss, unauthorised access, or disclosure, including: 

  • password-protecting digital devices and software accounts, including multi-factor authentication 

  • storing paper records in a securely locked location, not accessible to the public 

  • limiting access to your information to myself only 

  • using reputable software providers with their own security safeguards. 

‍ How I use your personal and health information 

‍I use your personal and health information to: 

  • assess your suitability for treatment and identify any contraindications 

  • provide, plan, and tailor your treatment 

  • manage bookings, reminders, and rescheduling 

  • process payments and issue invoices/receipts 

  • communicate with you about appointments, follow-up care, or relevant business updates, where you haven’t opted out 

  • comply with my legal, insurance, and professional association obligations (for example. record-keeping requirements). 

‍I do not use or disclose your health information for marketing purposes without your express consent. 

‍Who I share your information with 

‍I only share your information with the following third parties and only in the circumstances stated below: 

  • ‍ ‍other health practitioners involved in your care but only with your consent (e.g. providing a report to your GP if you ask me to) 

  • my accountant or bookkeeper, limited to information necessary for invoicing and tax purposes 

  • my professional indemnity insurer, if a claim arises 

  • relevant authorities, if required by law (e.g. a court order, or mandatory reporting obligations). 

‍ ‍Overseas disclosure 

‍I use Splose to manage bookings and clinical records. Splose stores information in Australia, however some data may be processed or processed overseas. See their privacy policy at Privacy Policy • splose

‍I do not send or disclose your personal information to recipients located outside Australia.” 

‍Accessing and correcting your information 

‍ You can ask to access the personal information I hold about you, or ask me to correct it if it is inaccurate, out of date, or incomplete. To make a request, you can contact me using the details at the end of this policy. I will respond within a reasonable time (usually within 30 days).  

‍There is no charge for requesting access or correction. If producing a copy involves significant time or cost, I may charge a small administrative fee. I will also require identification from you before releasing any requested information. 

‍How to make a complaint 

‍If you believe I have breached your privacy or mishandled your personal information, please contact me first using the details below. I will: 

  • ‍acknowledge your complaint within a reasonable time 

  • investigate the issue and respond with an outcome, generally within 30 days 

  • take reasonable steps to resolve the matter. 

‍If you are not satisfied with my response, you can escalate your complaint to the Office of the Australian Information Commissioner. 

‍Contact details 

‍For any questions, access/correction requests, or complaints about this policy: 

Leah Birch 
Recuperate & Reconnect 
Email: recuperateremedialmassage@gmail.com

Changes to this policy 

‍I will update this policy to reflect changes in my practices or legal obligations. The most current version will always be available at recuperateandreconnect.com.au or on request. This policy was last reviewed on 29/07/2026. 

‍ ‍