Privacy Policy

Last updated: 28 October 2026

Perfect Spine Chiropractic Clinic (ABN 38 975 402 920) ("we", "us", "our") provides chiropractic care at our clinics in Hurstville, Eastwood and Burwood, Sydney. We respect your privacy and handle your personal and health information in line with the Privacy Act 1988 (Cth), including the Australian Privacy Principles, and the Health Records and Information Privacy Act 2002 (NSW).

This policy explains what information we collect, why we collect it, who we may share it with, and how you can access or correct it.

1. What information we collect

• Contact and identity details — your name, date of birth, address, phone number, email address and emergency contact.
• Health information — your medical history, symptoms, medications, examination findings, treatment notes, and any reports or imaging relevant to your care.
• Billing and claims details — private health fund, Medicare, workers compensation or insurance details where you claim through them, and records of payments.
• Website information — limited technical and usage information when you visit our website (see section 6).

2. How we collect it

We collect most information directly from you — when you book online, call or email us, complete an intake form, or attend an appointment. With your consent, or where the law allows, we may also collect information from others, such as your GP or another health practitioner, your insurer, or a parent or guardian.

You can make general enquiries without identifying yourself. To provide treatment, however, we need to know who you are.

3. How we use your information

• To assess, treat and care for you
• To manage appointments, including sending booking confirmations and reminders by SMS or email
• To process payments and claims with health funds, Medicare or insurers
• To communicate with other health practitioners involved in your care, with your consent
• To meet our legal and professional obligations, including record-keeping requirements
• To understand how our website is used, so we can improve it

We do not sell your information. We will not use it to send you marketing without your consent, and you can opt out at any time.

4. Who we share it with

We only share your information when it is needed for your care or our services, when you have consented, or when the law requires or permits it. This may include:

• Other health practitioners involved in your care, such as your GP or a specialist
• Private health funds, Medicare, workers compensation or other insurers, when you make a claim through them
• Service providers who help us run the clinic, such as our practice management and online booking system (Cliniko), IT and website providers — only for the purpose of providing their services to us
• Courts, regulators or authorities, where we are legally required to
• Others where necessary to lessen or prevent a serious threat to someone's life, health or safety

5. Online bookings

Online bookings on our website are made through Cliniko, a practice management system. The details you enter when booking go directly into Cliniko and our clinic records. Cliniko's own privacy and security practices also apply to how it handles that information.

6. Our website

Our website does not ask you to fill in any forms other than through the Cliniko booking system. When you visit it:

• Google Analytics uses cookies to tell us how visitors use the site — for example, which pages are viewed, roughly where visitors are located, what device they use, and whether they click to book or call. It does not tell us who you are, and we do not send Google your name or health information. You can block cookies in your browser settings, or use the Google Analytics opt-out browser add-on.
• Google Maps and Google Fonts load from Google, which means your browser shares its IP address and basic technical information with Google.
• Our website host keeps standard server logs, including IP addresses, for security and performance.
• Links to other websites, such as Facebook, are covered by those sites' own privacy policies.

7. Information held or processed overseas

Some of our service providers store or process information outside Australia. Google (analytics, maps and fonts) and our website host operate in the United States and other countries. Cliniko and some of its own service providers (for example, for email delivery) may also process information overseas, including in the United States. We use reputable providers and take reasonable steps to ensure your information is protected.

8. How we store and protect it

We store records electronically in secure systems with access controls, and any paper records securely. Our staff are bound by confidentiality.

As required by NSW law, we keep health records for at least 7 years from your last visit, or, if you were under 18 when the information was collected, until you turn 25. After that, records are securely destroyed or de-identified.

If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as required under the Notifiable Data Breaches scheme.

9. Accessing and correcting your information

You can ask to see, or get a copy of, the information we hold about you, and ask us to correct anything that is inaccurate, out of date or incomplete. Contact us using the details below. We will respond within 30 days. We may charge a reasonable fee to cover the cost of providing copies, but not for making a request. In the limited cases where the law allows us to refuse access, we will explain why in writing.

10. Questions and complaints

If you have a question or concern about your privacy, please contact us first — we will try to resolve it and respond within 30 days.

If you are not satisfied with our response, you can contact:

• Office of the Australian Information Commissioner (OAIC) — oaic.gov.au, phone 1300 363 992
• Information and Privacy Commission NSW, for health records matters — ipc.nsw.gov.au, phone 1800 472 679

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.