Legal

Privacy Policy

How Wellbeing Chiropractic Queensland Pty Ltd collects, holds, uses and discloses personal information under the Privacy Act 1988 (Cth).

Last updated 1 September 2026  ·  ABN 95 701 299 498

1. About this policy

This Privacy Policy explains how Wellbeing Chiropractic Queensland Pty Ltd (ABN 95 701 299 498, ACN 701 299 498) (“we”, “us”, “our”) handles personal information. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in Schedule 1 of that Act. As a provider of a health service we are an APP entity regardless of turnover.

Because we operate from Victoria, our handling of health information is also subject to the Health Records Act 2001 (Vic) and the Health Privacy Principles it contains. Where those obligations are stricter than the APPs, we apply the stricter standard.

2. What personal information means

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. Sensitive information is a subset of personal information that attracts stronger protection and includes health information — which is most of what a chiropractic practice records about a patient.

3. Information we collect

3.1 Through this website

This website is a static informational site. It does not host a database, an account system or a booking engine. When you use the enquiry form on our contact page, the form opens your own email application; no information is transmitted to us until you choose to send that email. What we then receive is what you wrote: typically your name, your email address, the area of the body you have described and any details you chose to include.

3.2 In the course of providing care

If you become a patient, we collect the information reasonably necessary to assess and treat you. That ordinarily includes your name, contact details, date of birth, relevant medical and injury history, medications, examination findings, treatment records, correspondence with other practitioners, imaging and reports you provide, and billing information.

3.3 Technical information

Our hosting provider records standard server information such as IP address, browser type and the pages requested, for the purposes of delivering the site and protecting it from abuse. This website does not set cookies, run analytics scripts, embed third-party trackers, or load fonts, images or scripts from external services.

4. How we collect it

We collect personal information directly from you wherever it is reasonable and practicable to do so — from your enquiry, your intake forms, and what you tell us during appointments. We may collect information about you from a third party, such as a referring general practitioner, a specialist, a radiology provider or a family member acting on your behalf, where you have consented or where it is otherwise permitted under the Privacy Act 1988 (Cth). If we receive unsolicited personal information that we could not lawfully have collected, we will destroy or de-identify it where it is lawful and reasonable to do so, in accordance with APP 4.

5. Why we collect, hold, use and disclose it

Under APP 3 and APP 6 we collect and use personal information only for purposes reasonably necessary for our functions and activities. Those purposes are:

  • responding to your enquiry and arranging appointments;
  • conducting examinations and providing chiropractic care;
  • keeping accurate clinical records and communicating with other treating practitioners with your consent;
  • issuing invoices, processing payments and managing accounts;
  • meeting our record-keeping, insurance, professional and legal obligations;
  • improving the safety and quality of the care we provide.

We will not use or disclose your personal information for an unrelated secondary purpose unless you would reasonably expect it, you have consented, or the use or disclosure is required or authorised by or under an Australian law or a court or tribunal order.

6. Sensitive and health information

Consistent with APP 3.3, we collect health information about you only where it is reasonably necessary for our activities and you have consented, or where the collection is required or authorised by law, or is necessary to lessen or prevent a serious threat to life, health or safety. Consent to the collection of your clinical history is a practical prerequisite to safe treatment; you may decline, but we may then be unable to proceed with care.

7. Disclosure to others

We do not sell, rent or trade personal information. We may disclose it to:

  • other health practitioners involved in your care, with your consent;
  • service providers who support our practice, such as our email, hosting and accounting providers, bound to protect it;
  • our professional indemnity insurer or legal advisers, where necessary;
  • a regulator, court, tribunal or law enforcement body where required or authorised by law.

7.1 Overseas disclosure

We do not routinely disclose personal information to overseas recipients. Some of the software and hosting infrastructure we rely on may store data on servers located outside Australia. Where APP 8 applies, we take reasonable steps to ensure any overseas recipient does not breach the Australian Privacy Principles.

8. Direct marketing

We do not conduct direct marketing campaigns and we do not operate a marketing mailing list. Consistent with APP 7, if that ever changes, any such communication will identify us clearly and provide a simple means of opting out, which we will action promptly and at no cost to you.

9. Security of the information we hold

As required by APP 11, we take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. Those steps include restricting access to clinical records to people who need it, using password protection and access controls on our systems, storing any paper records securely, and reviewing our practices periodically.

No method of transmission over the internet is completely secure. Email in particular is not an encrypted channel, which is why we ask you not to send sensitive health details through the enquiry form when you would rather discuss them in person.

9.1 Data breaches

We maintain a data breach response process. Where a breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).

10. How long we keep it

We keep clinical records for the minimum period required of a health service provider under the applicable Commonwealth and Victorian legislation, and longer where an insurance, legal or professional obligation requires it. Records relating to a patient who was a child when treated are retained for the longer period the law prescribes in that case. When personal information is no longer needed for any purpose for which it may lawfully be used, and we are not required by law to retain it, we destroy it or de-identify it in accordance with APP 11.2.

11. Accessing and correcting your information

Under APP 12 you may request access to the personal information we hold about you, and under APP 13 you may ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Write to [email protected] and we will respond within a reasonable period.

We may need to verify your identity before releasing records, and a reasonable administrative charge may apply to the cost of providing access — never to the making of the request itself. If we refuse access or refuse to make a correction, we will tell you in writing why, and how you may complain.

12. Anonymity and pseudonymity

APP 2 gives you the option of dealing with us anonymously or under a pseudonym where that is lawful and practicable. You may make a general enquiry about our services on that basis. It is not practicable for clinical care, where accurate identification is a safety requirement.

13. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please tell us first. Email [email protected] with the details and what outcome you are seeking. We will acknowledge your complaint, investigate it and respond in writing.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC), the independent regulator for the Privacy Act 1988 (Cth). The OAIC can be contacted through its website at oaic.gov.au. Complaints about health information held in Victoria may alternatively be made to the Health Complaints Commissioner in Victoria.

14. Changes to this policy

We may update this policy from time to time to reflect changes to our practice or to the law. The current version is always the one published at this address, and the date at the top of this page shows when it last changed.

15. Contact us

Privacy enquiries, access requests and complaints should be addressed to the privacy officer at [email protected].

  • EntityWellbeing Chiropractic Queensland Pty Ltd
  • ABN95 701 299 498
  • ACN701 299 498
  • Registered officeVIC 3122, Australia

Questions about your information

Ask us anything about this policy

Access requests, corrections and privacy complaints are handled in writing and answered in writing.