Data controller and contact information
Purposes and lawful basis for processing personal data
We may collect, process and use your personal data in the course of providing therapy services, goods and other related services to you and to manage our relationship with you, in the following ways:
Processed under the lawful basis of Contract:
When you inquire about or purchase therapy services, goods and other related services from us, we will collect personal information to enable us to respond to your inquiry and to process and complete your request. We may also collect personal information from you when you apply for a job with us to enable us to contact you and process your application.
Processed under the lawful basis of Legal Obligation:
We collect and process your personal information for producing invoices and accounting purposes which is required to meet Privacy Act and other Government legislation. We collect personal information from employees to enable us to meet employment law obligations.
Processed under the lawful basis of Consent:
If you have given consent to receive marketing communications from us, we will collect information concerning your marketing preferences and send you communications based on those preferences.
Who we share your personal data with
We do not share your data with any other third parties except:
- if you have given your consent.
- if it is necessary to enable the provision of third party services you have requested (for example to facilitate quotes or agreements for other services or products).
- if we are under a duty to comply with any legal obligation.
Third party recipients of your data
Data processors are third parties who provide elements of our business management services for us, who process or store personal data on our behalf. The categories of these recipients are accounting, marketing, software, and website providers.
We have contracts in place with our data processors to ensure they are looking after your data to the Privacy Act, which means they cannot use, share or do anything with your personal data unless we have instructed them to do so.
Unless otherwise listed below, your personal data will be kept for a period of 7 years in order to comply with Government requirements.
Your rights in regard to your personal data
You have a number of rights in regard to your personal data. These include the right to request access to, rectification or erasure of personal data we hold, or restriction of processing concerning your data, or to object to the processing as well as the right of data portability. If you wish to make any such requests please contact us in writing using the contact details on the contact page.
Right to withdraw consent
Where we have processed your personal data on the lawful basis of consent, you have the right to withdraw this consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to complain
If you have any concerns about how we have handled your personal data, please contact us so we may address them.
You also have the right to lodge a complaint with the supervisory authority, the Office of the Australian Information Commissioner, about how we manage your data.
Provision of data
In most cases, the provision of your personal data is necessary to enter into a contract with us.
Changes to this policy
We will regularly review this privacy notice and update it where necessary.
Version 1 dated June 2020