This privacy policy sets out how The Body Refinery Physiotherapy Pty Ltd (The Body Refinery) upholds your rights under the Australian Privacy Principles contained in the Privacy Act 1988 (Cth). This policy lets you know what personal information of yours we hold, what we do with it and who we will disclose it to.
1. Personal Information We Collect or Process
Personal information is any information or opinion in any form, which identifies an individual or from which an individual’s identity is apparent or can be reasonably ascertained. By using our website and/or App and giving your information to us, you indicate your consent to us and any other organisations, third party suppliers and agents we engage or employ from time to time, to collect and use your personal information in accordance with the terms set out in this policy.
We collect personal information for the purposes of delivering our products and services and communicating with our clients. We may collect your name, address, mobile number, date of birth, emergency contact person and contact details, bank account and/or credit card details, payment history, postcode, and other information.
How and why we collect information:
1. We may collect your information from the following sources:
- Directly from you
- Intake forms
- Online bookings
- Mindbody Online booking system
- Phone calls
- Emails
- In-person consultations
- Website forms
- Third parties, such as referring practitioners (with consent)
2. We collect your information to:
- Provide services
- Manage bookings
- Maintain clinical records
- Process payments
- Communicate with you
- Meet legal and regulatory obligations
- Improve our services
- Send appointment confirmations and reminders
The Body Refinery requires certain personal information from clients to provide its products and/or services, and to meet professional standards and legal requirements.
2. Third Party Websites and Links
We use third-party client management software, “Mindbody Online”. In order to create a client profile, your personal information will be provided to the proprietor of Mindbody Online. The collection and use of personal information by Mindbody Online are governed by Mindbody Online’s privacy policy, which can be viewed at: https://www.mindbodyonline.com/privacy-policy
Mindbody stores consumer data on secure servers and backup servers located in the United States. Further information regarding Mindbody’s data storage practices can be found at:https://support.mindbodyonline.com/s/article/GDPR-FAQ?language=en_US
If a client wishes to request access to, correction of, or deletion of their personal information held within Mindbody, they may submit their request through Mindbody’s Data Options page available at:
https://support.mindbodyonline.com/s/article/Communication-preferences-Data-Options-page?language=en_US
Mindbody also maintains internal documented procedures for data breach notification and security incident management in accordance with applicable privacy laws.
3. Security and Retention of Your Information
The Body Refinery will seek to take all reasonable steps to keep any information we hold about you, secure, accurate and up to date. Your information is stored on secure servers and we will take all reasonable steps to ensure that our employees and contractors respect the confidentiality of any personal information held by us. You should notify us immediately of any unauthorised use of your account or any other breach of security. The Body Refinery does not accept responsibility for any consequences of the unauthorised access to your information where reasonable security measures have been followed.
We take reasonable steps to protect your information from misuse, interference, loss, unauthorised access, modification or disclosure. These steps may include:
- Secure software systems
- Password-protected records
- Restricted staff access
- Secure payment processing
- Staff confidentiality obligations
Classes may be recorded by a Practitioner or Instructor for quality control, as well as promotional purposes. If you do not consent to the Instructor using video or still images taken during the class for promotional purposes, please notify the Practitioner, Instructor or a Manager or Director in writing.
4. Complaints
If you have concerns about how we handle your personal information, please use the contact details provided on our website to contact us.
Depending on your location, you may have the right to appeal our resolution of your complaint by contacting us as detailed below, or by submitting your complaint to your local data protection authority.
5. Changes to This Privacy Policy
We may amend this privacy policy from time to time, and the current version will be published on our website. From time to time, we may include links to other websites; however, we do not accept responsibility for the safety and security once you leave our secure site.
You agree with the above terms and conditions. By booking into a class or appointment, you automatically agree to the above terms and conditions. By booking into a class or appointment, using our services, or providing your information to us, you acknowledge and agree to this Privacy Policy.
