Policies

This policy applies to all clients, prospective clients, and visitors to my website or clinic. My main functions and activities involving personal information are: - providing massage therapy services - managing client records, bookings and payments - operating my website - sending appointment reminders, follow-up care information, or occasional marketing communications where you have opted in to receive them. If you have a concern about how I have handled your information, contact me first using the contact details at the end of this policy. Summary I collect personal information, including health information, to provide massage therapy services to you safely and effectively. I keep your information secure and only share it with others (like your GP or another health professional) if you ask me to, or if the law requires it. I store your information using a secure cloud-based booking and clinical notes system, which stores data in Australia.   You can ask to see or correct your information at any time. ​What information I collect Depending on how you interact with me, I collect: Personal information - Full name, date of birth, contact details (phone, email, postal address) - Emergency contact details - Booking history and appointment preferences. - Sensitive information (health information) I collect more detailed health information because it is necessary to provide safe and effective treatment. This includes: - relevant medical history, current injuries, conditions, medications, allergies, and pregnancy status - details you provide during consultations about symptoms and treatment goals - clinical notes I make during and after your treatment. - referrals or reports from other health practitioners where relevant and with your consent. ​​ I only collect health information that is relevant to providing you with safe treatment. I will not ask for more than I need. How I collect personal and sensitive information I collect information directly from you through: - online or phone bookings - intake/consultation forms - conversations during consultations and treatment - email or text message correspondence my website. ​I also collect information indirectly, for example: - via a referring health practitioner, if you’ve asked them to share relevant information with me - via a third-party booking platform Cliniko ​​I will always try to collect information directly from you unless it is unreasonable or impractical to do so. When I collect personal information, I will explain why I am collecting it and how I plan to use it, unless it is already clear from the context How I hold and protect your information Storage I store your personal information using a cloud-based practice management system (booking and clinical notes). When your personal information is no longer needed for the purpose it was collected, I will take reasonable steps to destroy or permanently de-identify it. However, your personal information will be retained in your client file for a minimum of 7 years after your last appointment, in line with health record-keeping requirements. Security I take reasonable steps to protect your information from misuse, loss, unauthorised access, or disclosure, including: - password-protecting digital devices and software accounts, including multi-factor authentication - limiting access to your information to myself only,  - using reputable software providers with their own security safeguards How I use your personal and health information I use your personal and health information to: - assess your suitability for treatment and identify any contraindications - provide, plan, and tailor your treatment - manage bookings, reminders, and rescheduling - process payments and issue invoices/receipts - communicate with you about appointments, follow-up care, or relevant business updates, where you haven’t opted out - comply with my legal, insurance, and professional association obligations (for example. record-keeping requirements). I do not use or disclose your health information for marketing purposes without your express consent. Who I share your information with I only share your information with the following third parties and only in the circumstances stated below: - other health practitioners involved in your care but only with your consent (e.g. providing a report to your GP if you ask me to) - my accountant or bookkeeper, limited to information necessary for invoicing and tax purposes - my professional indemnity insurer, if a claim arises - relevant authorities, if required by law (e.g. a court order, or mandatory reporting obligations). Overseas disclosure I use Cliniko to manage bookings and clinical records. Cliniko stores or processes data on servers located in Australia. See their privacy policy at https://www.cliniko.com/policies/privacy/. ​Where practicable, I will let you know if your information is likely to be sent overseas and, if you ask, which countries are involved. ​Accessing and correcting your information You can ask to access the personal information I hold about you, or ask me to correct it if it is inaccurate, out of date, or incomplete. To make a request, you can contact me using the details at the end of this policy. I will respond within a reasonable time (usually within 30 days). There is no charge for requesting access or correction. If producing a copy involves significant time or cost, I may charge a small administrative fee. I will also require identification from you before releasing any requested information. How to make a complaint If you believe I have breached your privacy or mishandled your personal information, please contact me first using the details below. I will: - acknowledge your complaint within a reasonable time - investigate the issue and respond with an outcome, generally within 30 days - take reasonable steps to resolve the matter. - If you are not satisfied with my response, you can escalate your complaint to the Office of the Australian Information Commissioner. Contact details For any questions, access/correction requests, or complaints about this policy: May Yap MY Integrated Body Phone: +61 481 562 781 Email: myintegratedbody@gmail.com Postal address: HPlus Consulting Suites, Suite 3A, 472 The Esplanade, Warners Bay, NSW 2282 Changes to this policy I will update this policy to reflect changes in my practices or legal obligations. The most current version will always be available at https://www.myintegratedbody.com.au/policies or on request. This policy was last reviewed on 26/07/2026.