Privacy Policy


Last updated: 16/10/2026

Health Society Co. (“we”, “us”, “our”) is a multidisciplinary health and wellness clinic at 1/47–49 Flood Street, Leichhardt NSW 2040. We respect your privacy and are committed to protecting your personal and health information.

This policy explains how we collect, use, store and disclose your information in line with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Health Records and Information Privacy Act 2002 (NSW).

1. What information we collect

We only collect information that is reasonably necessary to provide our services. This may include:

Personal information

  • Name, date of birth, gender, address, phone number and email address
  • Emergency contact and next of kin details
  • Health fund, Medicare, DVA, NDIS, Workers Compensation, CTP or Lifetime Care details
  • Employer and insurer details (for workplace rehabilitation and compensable claims)
  • Payment and billing information

Health (sensitive) information

  • Your medical history, current symptoms, medications and allergies
  • Assessment findings, treatment notes, treatment plans and progress reports
  • Referrals and reports from GPs, specialists and other health providers
  • Psychological, counselling, nutritional and lifestyle information relevant to your care
  • Information about children, where a parent or guardian books care on their behalf

Website information

  • Information you submit through our online booking system, contact, referral or feedback forms
  • Technical data such as IP address, browser type, device type, pages visited and time on site, collected through cookies and Google Analytics

2. How we collect your information

We usually collect information directly from you when you:

  • Book an appointment online, by phone or in person
  • Complete intake or consent forms
  • Attend a consultation
  • Contact us by phone, email or through our website
  • Leave feedback or a review

Sometimes we collect information from third parties, with your consent or where permitted by law, such as:

  • Your GP, specialist or other referring health practitioner
  • NDIS plan managers, support coordinators or the NDIA
  • Insurers, employers, case managers and SIRA (for Workers Compensation and CTP claims)
  • The Department of Veterans’ Affairs
  • A parent, guardian or authorised representative

3. Why we collect and use your information

We use your information to:

  • Assess, diagnose and provide treatment and care
  • Coordinate your care between our clinicians, as we keep shared clinical records across our disciplines
  • Communicate with your referring practitioner and other providers involved in your care
  • Process payments, health fund claims and rebates (including via HICAPS)
  • Lodge claims and reports with Medicare, DVA, NDIS, insurers and other funding bodies
  • Send appointment confirmations and reminders by SMS or email
  • Respond to your enquiries and feedback
  • Meet our legal, regulatory and professional obligations
  • Improve our services and our website

We will only send you marketing communications, such as newsletters or promotions, with your consent. You can unsubscribe at any time.

4. Shared clinical records

Health Society Co. operates as one clinic with one set of patient notes. This means clinicians across our services (for example, your physiotherapist and your naturopath) may access your records where it is relevant to your care. If you would prefer certain information not be shared with other clinicians within the clinic, please let us know and we will discuss your options.

5. Who we disclose your information to

We may disclose your information to:

  • Other health professionals involved in your care, such as your GP or specialist
  • Health funds, Medicare, DVA, the NDIA, plan managers, insurers, employers and SIRA, where relevant to your funding or claim
  • Third-party service providers who help us run the clinic, including Cliniko (our practice management and online booking system), payment processors, SMS and email providers, IT support and website hosting
  • Anyone you have authorised us to share information with
  • Others where required or permitted by law, such as a court order, mandatory reporting obligation, or to lessen or prevent a serious threat to someone’s life, health or safety

We require our service providers to protect your information and use it only for the services they provide to us. We do not sell your personal information.

6. Overseas disclosure

Your patient records and booking information are stored in Cliniko, our practice management system, on servers located in Australia.

Our website uses Google Analytics and Google Search Console, which are provided by Google and may process website usage data overseas, including in the United States. This data relates only to how visitors use our website. We never send your health information or clinical records to these tools.

Where information is processed overseas, we take reasonable steps to ensure it is protected to a standard consistent with Australian privacy law.

7. How we store and protect your information

Your records are stored electronically in Cliniko, a secure, encrypted, password-protected system with restricted access. Any paper records are kept securely on site. We take reasonable steps to protect your information from misuse, loss, unauthorised access, modification or disclosure, including:

  • Access controls so only authorised staff can view records
  • Secure, encrypted practice management and booking software
  • Staff confidentiality obligations and privacy training

As required under NSW law, we generally keep health records for at least 7 years from your last visit, or for children until they turn 25. After that, records are securely destroyed or de-identified.

8. Accessing and correcting your information

You have the right to request access to the personal and health information we hold about you, and to ask us to correct it if it is inaccurate, out of date or incomplete.

To make a request, please contact us using the details below. We will respond within a reasonable time, usually within 30 days. In limited circumstances, we may refuse access where permitted by law, and we will explain the reason in writing. We may charge a reasonable fee for providing copies of records, but not for making the request.

9. Anonymity

Where practical, you may deal with us anonymously or using a pseudonym, for example when making a general enquiry. However, we generally need your identity to provide treatment, process claims and keep accurate health records.

10. Website, cookies and analytics

Our website uses cookies and similar technologies to help it work properly and to understand how visitors use it.

Google Analytics helps us understand how visitors find and use our website, such as which pages are viewed and how long people stay. It may collect information such as your IP address, device and browser type, pages visited and approximate location. This information is aggregated and does not identify you personally.

Google Search Console helps us monitor how our website appears in Google search results. It provides us with summary search data, such as search terms and clicks, and does not identify individual visitors.

You can disable cookies in your browser settings, or opt out of Google Analytics using Google’s Analytics Opt-out Browser Add-on. Some parts of the website may not work as intended if cookies are disabled.

Online bookings: When you book an appointment through our bookings page (healthsocietyco.com.au/bookings), your details are entered directly into Cliniko, our practice management system. Cliniko handles this information on our behalf and stores it securely in Australia. Cliniko’s own privacy policy also applies to information processed through its platform.

Social media: If you interact with us on Instagram (@healthsocietyco) or other social platforms, your information is also subject to that platform’s privacy policy. Please do not share health information with us through social media messages.

Our website may contain links to other websites. We are not responsible for the privacy practices of those sites.

11. Data breaches

If a data breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme.

12. Complaints

If you have a concern about how we have handled your information, please contact us first. We will acknowledge your complaint promptly and aim to resolve it within 30 days.

If you are not satisfied with our response, you can contact:

Office of the Australian Information Commissioner (OAIC)
Phone: 1300 363 992
Website: www.oaic.gov.au

Information and Privacy Commission NSW (for health records)
Phone: 1800 472 679
Website: www.ipc.nsw.gov.au

13. Changes to this policy

We may update this policy from time to time. The current version will always be available on our website, with the date it was last updated.

14. Contact us

Privacy Officer, Health Society Co.
1/47–49 Flood Street, Leichhardt NSW 2040
Phone: (02) 7227 9893
Email: info@healthsocietyco.com.au