Privacy Policy

  • When you share your health story with me, you are trusting me with something personal. I hold that trust with the same care and respect I bring to my clinical work.

    This policy explains, in plain language, what information I collect, why, how I keep it safe, and the choices you have. I collect only what I need, I never sell your information, and I won't share it without your consent except where the law requires it.

  • If you book a consultation, I collect:

    • your name, date of birth, address, phone number and email

    • your health history, current concerns, medications and supplements, allergies, and lifestyle details such as diet, sleep and stress

    • notes from our consultations, the herbal formulas I prepare for you, and how you respond to them

    • results or letters from other practitioners, if you choose to share them

    • an emergency contact, if you provide one

    If you attend a workshop, class or event, I collect your name and contact details, and any health or access needs you tell me about so I can keep you safe.

    If you sign up for my letter or mailing list, I collect your name and your email or postal address.

    If you visit my website, basic technical information is collected automatically (see Website, cookies and social media below).

    Where possible, I collect information directly from you. I'll only collect information about you from someone else, such as your GP or a family member, with your consent or where the law allows.

  • I collect your information so I can care for you safely and well. That means I can:

    • understand your health as a whole and prepare herbal formulas suited to you

    • check for interactions with any medications or conditions

    • keep accurate clinical records, as the law requires

    • arrange appointments, send reminders, and follow up on your care

    • take payment and issue receipts

    • tell you about workshops and seasonal letters, only if you've asked to hear from me

    I won't work with your information for any other purpose without asking you first. I never sell or trade personal information, and I don't use your health information for marketing.

  • Your clinical records are stored in Cliniko, a practice-management system built for health practitioners. Australian Cliniko accounts are stored on secure servers in Australia, and data is encrypted and backed up daily. Any paper notes are kept in a locked cabinet and scanned or stored securely. Only I can see your clinical records.

    I also:

    • protect my devices with passwords and keep software up to date

    • run telehealth consultations through cliniko, from a private space where we can't be overheard

    • bring only what I need to home visits, and never leave records unattended

    • avoid sending detailed health information by ordinary email or text where I can

    How long I keep it. New South Wales law requires me to keep health records for 7 years after your last consultation, or until you turn 25 if you were under 18 when I first saw you. After that, I destroy them securely and keep a note of when they were destroyed.

    If something goes wrong. If a data breach is likely to cause you serious harm, I will tell you and the Office of the Australian Information Commissioner as soon as I can.

  • Your information stays between us. I only share it:

    • with your consent, such as writing to your GP or another practitioner involved in your care

    • in an emergency, where there is a serious threat to your life, health or safety, or someone else's

    • where the law requires it, such as a court order

    • with my professional indemnity insurer or association, in the rare case of a complaint or claim, and only what is needed

    I also rely on a few trusted services to run my practice: practice software, telehealth, payments, website hosting and email. They store information on my behalf and are not allowed to work with it for their own purposes. The main ones are Cliniko (clinical records, bookings and payments), which stores Australian data in Australia, though it works with some service providers in Australia and the USA; and Squarespace (my website and online forms), a US company that processes website data on servers in the United States.

  • My website is hosted by Squarespace. When you visit, Squarespace automatically collects basic information such as your IP address, browser type, the pages you view and how you arrived at the site. It does this through cookies, which are small files stored in your browser. Squarespace's built-in analytics show me general visitor numbers and traffic sources, not who you are. You can block or delete cookies in your browser settings. Squarespace handles this data under its own privacy policy and cookie policy, and processes it in the United States.

    Contact forms. Messages sent through my website's Get in Touch form are stored in Squarespace. Please don't share detailed health information through the form. We can talk about that safely in a consultation.

    Online booking. When you book a consultation, you enter your details into Cliniko, not my website. Cliniko's own privacy policy also applies.

    My seasonal letter and mailing list. If you subscribe, I'll send you seasonal letters and occasional news about workshops. Every email includes an unsubscribe link, and you can ask me to remove your postal address at any time. Your health information is never added to my mailing list.

    Instagram and other social media. If you contact me through social media, that platform's privacy policy applies to your messages. Please don't share health details there.

  • Seeing your records. You can ask for a copy of the information I hold about you at any time. I'll respond within 30 days. There is no charge to ask, though I may charge a small fee to cover copying large records, and I'll tell you first. In rare cases the law allows me to refuse, such as where access would put someone's safety at risk; I'll explain why in writing.

    Correcting your records. If something is wrong, out of date or incomplete, let me know and I'll correct it. If I disagree, I'll add a note of your view to your record.

    Staying anonymous. You can enquire, attend a public workshop or read my website without giving your name. For clinical consultations, I need to know who you are so I can care for you safely.

    Moving to another practitioner. With your consent, I'll send your records to a new practitioner.

    Making a complaint. If you're unhappy with how I've handled your information, please talk to me first. I'll respond within 30 days.

  • I may update this policy as my practice grows or the law changes. The current version will always be on my website, with the date it was last updated. If a change affects how I handle your health information, I'll let current clients know.

    If you have any questions about your privacy, or want to see or correct your records, please get in touch

    Last updated: 9th November 2026