Last updated: 17 August 2026
 

Grace Armstrong - Naturopathy (ABN 52 514 459 829) ("I", "me", "my", "we", "us" or "our") respects your privacy and is committed to protecting the personal information you provide to us.
 

This Privacy Policy explains how we collect, hold, use and disclose personal information, including sensitive health information, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
 

As a health service provider, Grace Armstrong - Naturopathy is covered by the Privacy Act regardless of the size or annual turnover of the business.
 

This Privacy Policy applies to personal information collected through our website, booking and practice management systems, contact forms, consultations, and other interactions with us.
 

1. About Grace Armstrong - Naturopathy

Grace Armstrong - Naturopathy provides naturopathic consultations online and in person.
 

In providing these services, we may need to collect and hold personal information and sensitive health information about clients. We recognise that health information is particularly private and take reasonable steps to protect it and handle it appropriately.
 

This Privacy Policy should be read together with any privacy notices or consent forms provided to you when we collect your information.
 

2. What Information We Collect

The type of information we collect depends on how you interact with us and the services you use.
 

Personal information

We may collect and hold personal information such as:

• your name;

• date of birth;

• email address;

• telephone number;

• residential or postal address;

• appointment and booking information;

• information provided through website contact or enquiry forms;

• payment and invoicing information;

• correspondence and communications between you and us;

• information relating to your use of our website; and

• information necessary to manage our professional and business relationship with you.
   

Sensitive information and health information

In providing naturopathic services, we may collect sensitive information where reasonably necessary, including:

• medical and health history;

• current and previous symptoms;

• medications and supplements;

• allergies and adverse reactions;

• dietary information;

• lifestyle information;

• relevant family and personal history;

• pathology, imaging and other test results;

• information about existing health conditions;

• information provided by other healthcare practitioners involved in your care; and

• clinical notes, consultation records and recommendations arising from your consultations.

Health information is sensitive information under the Privacy Act and is subject to additional privacy protections.
 

We generally collect sensitive information with your consent and only where it is reasonably necessary for the provision and management of our services, or otherwise permitted or required by law.
 

3. How We Collect Your Information

Where reasonably practicable, we collect personal information directly from you.
 

We may collect information when you:

• submit an enquiry through our website;

• complete a website contact form;

• book an appointment;

• complete an intake, privacy or consent form;

• provide information through our practice management or booking platform, SimpleClinic;

• communicate with us by email, telephone, video consultation or other means;

• attend an in-person consultation;

• provide health information during a consultation;

• provide pathology or other test results;

• make or receive a payment or invoice; or

• otherwise communicate or interact with us in connection with our services.
   

Where reasonably necessary and permitted by law, we may also collect information from third parties, such as another healthcare practitioner or pathology or testing provider. Where required, we will seek your consent before obtaining information from another healthcare provider.
 

We may also collect certain information automatically when you use our website, including information relating to your browser, device, IP address and website activity, depending on the cookies and analytics technologies enabled on the website.
 

4. Why We Collect, Hold, Use and Disclose Your Information

We collect, hold, use and disclose personal information for purposes reasonably necessary for operating our practice and providing our services.
 

These purposes may include:

• providing naturopathic consultations and health-related recommendations;

• understanding your health history and circumstances;

• communicating with you about appointments and consultations;

• arranging or facilitating pathology, testing or referrals where appropriate and agreed with you;

• preparing clinical and consultation records;

• providing invoices, receipts and payment-related information;

• facilitating the supply or purchase of practitioner-recommended supplements or herbal preparations where relevant;

• managing bookings and appointments;

• responding to enquiries and requests;

• maintaining and managing our business records;

• meeting applicable legal and professional obligations;

• maintaining the security and functionality of our systems;

• improving our website, services and client experience;

• responding to complaints or disputes;

• preventing or investigating suspected fraud, misuse or security incidents; and

• complying with applicable laws, regulations, court orders or other legal requirements.

We will not use or disclose your personal information for a purpose unrelated to the purpose for which it was collected unless permitted or required by law, or otherwise with your consent. We do not sell or rent your personal information.
 

5. Disclosure of Personal Information

We may disclose personal information where reasonably necessary to provide our services, operate our practice, or comply with our legal obligations.
 

Depending on the circumstances, this may include disclosure to:
 

Booking and practice management providers

We use SimpleClinic as a third-party practice management and booking platform. Information you provide through SimpleClinic may be collected, stored and processed by SimpleClinic in accordance with its own privacy arrangements.
 

SimpleClinic states that it uses safeguards including encryption, access controls, access logging and security monitoring to protect personal and sensitive information. SimpleClinic also states that its services may be provided through contractors or service providers in locations outside Australia.
 

Healthcare and testing providers

Where appropriate and with your consent, we may disclose relevant information to other healthcare providers, pathology providers or testing services involved in your care.
 

We will generally only disclose information that is reasonably necessary for the relevant purpose.
 

Dispensary, supplement or product providers

Where you choose to purchase supplements or herbal preparations recommended during your consultation, relevant information may be disclosed to a third-party dispensary or supplier where necessary to process or fulfil your order.
 

We will only disclose information reasonably necessary for this purpose.
 

Professional and business service providers

We may disclose personal information to service providers who assist us in operating our practice, such as:

• website and hosting providers;

• information technology and cloud-storage providers;

• email and communications providers;

• payment and accounting providers;

• professional advisers; and

• other contractors or service providers where reasonably necessary to operate our practice.

Disclosure required or authorised by law

We may disclose personal information where required or authorised by Australian law, a court or tribunal, or another lawful authority.
 

6. Overseas Disclosure and Processing

Some of the technology and service providers we use may store, process or otherwise handle personal information outside Australia.
 

For example:

• our website may be hosted and supported using Wix, which states that personal information may be stored in data centres in the United States and Ireland and may also be processed by group companies and third-party providers in other countries;

• we may use Google services, including Gmail, for business email and communications. Google operates services and infrastructure globally and states that personal information may be processed on servers located outside the country in which a person lives; and

• SimpleClinic may use contractors or service providers located outside Australia in providing its services.
   

Where we disclose personal information to an overseas recipient, we will take reasonable steps required by the Privacy Act and the Australian Privacy Principles in relation to overseas disclosures.
 

The countries in which overseas recipients may be located can change as our technology and service providers change. Where practicable, we will identify relevant countries in our privacy notices or this Privacy Policy.
 

You can contact us using the details below if you would like further information about our overseas disclosure arrangements.
 

7. How We Hold and Protect Your Information

We take reasonable steps to protect the personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure.
 

Depending on the information and the system involved, reasonable security measures may include:

• password-protected systems and accounts;

• access controls limiting information to people who require it for legitimate purposes;

• secure online practice management systems;

• encryption and secure transmission where provided by our service providers;

• secure storage of physical records where applicable;

• keeping software and systems appropriately maintained; and

• securely destroying or de-identifying personal information when it is no longer required and we are not legally required to retain it.
   

No method of electronic transmission or storage can be guaranteed to be completely secure. However, we take reasonable steps appropriate to the circumstances to protect the information we hold.
 

8. Retention and Destruction of Health Information

We retain personal information, including health information, for as long as reasonably necessary to:

• provide and manage our services;

• maintain appropriate clinical and business records;

• meet applicable legal and professional obligations;

• resolve complaints or disputes;

• protect our legitimate interests; and

• comply with any applicable record-retention requirements.
   

We do not retain personal information indefinitely where it is no longer required.
 

When personal information is no longer required and we are not otherwise required by law to retain it, we will take reasonable steps to securely destroy it or permanently de-identify it.
 

The retention period may vary depending on the type of information, the circumstances in which it was collected and any legal or professional obligations that apply at the time.
 

9. Accessing Your Personal Information

You may request access to personal information we hold about you.
 

We may ask you to provide reasonable information to verify your identity before providing access.
 

We will respond to access requests within a reasonable period and will generally provide access in the form requested where it is reasonable and practicable to do so.
 

In some circumstances, the Privacy Act permits or requires us to refuse access to particular information. If we refuse your request, we will provide written reasons where required by law and explain any available avenues for review or complaint.
 

We may charge a reasonable fee for providing access where permitted by law. Any fee will not be excessive and will not be used to discourage you from requesting access to your information.
 

10. Correcting Your Personal Information

We take reasonable steps to ensure that personal information we hold is accurate, complete and up to date.
 

If you believe that information we hold about you is inaccurate, incomplete, out of date or misleading, you may request that we correct it.
 

We will consider your request and take reasonable steps to correct information where appropriate.
 

If we refuse a correction request, we will provide written reasons where required by law and explain any available avenues for complaint.
 

11. Website, Cookies and Analytics

Our website may use cookies and similar technologies to support website functionality, security, performance and analytics.
 

Depending on the configuration of our website, these technologies may collect information such as:

• IP address;

• browser type;

• device information;

• pages visited;

• approximate location derived from technical information;

• referring website;

• interactions with the website; and

• other technical or usage information.

We may use analytics services to understand how visitors use our website and to improve its functionality and performance.
 

Some cookies and similar technologies may be provided by third-party service providers.
 

You can manage or disable cookies through your browser settings. Some website functions may not operate correctly if certain cookies are disabled.
 

Our website may also contain links to websites operated by third parties. We are not responsible for the privacy practices or content of third-party websites, and you should review their privacy policies before providing them with personal information.
 

12. Direct Marketing

We do not currently use your health information for direct marketing.
 

If we introduce marketing communications in the future, we will comply with applicable privacy and spam laws.
 

Where consent is required for direct marketing, we will obtain that consent before sending the relevant communications.
 

You may opt out of marketing communications at any time using the unsubscribe mechanism provided or by contacting us directly.
 

Communications that are necessary to provide or manage services you have requested—such as appointment reminders, booking confirmations, invoices or information relating to an existing consultation - are not considered marketing communications merely because they are sent electronically.
 

13. Unsolicited Information

If we receive personal information that we did not solicit, we will assess whether we could have collected that information under the Australian Privacy Principles.
 

Where the information could not have been collected lawfully and is not contained in a Commonwealth record, we will take reasonable steps to destroy or de-identify it where required by law.
 

14. Your Privacy Choices

Where it is lawful and practicable to do so, you may choose not to identify yourself or may use a pseudonym when dealing with us.

However, in many circumstances we will need to know your identity and relevant information to provide a naturopathic consultation, maintain appropriate clinical records, communicate with you and meet our legal or professional obligations.
 

If you choose not to provide information that is reasonably necessary for us to provide our services, we may be unable to provide some or all of those services.
 

15. Privacy Questions and Complaints

We welcome questions about how we handle personal information.
 

If you have a question, concern or complaint about our privacy practices or believe that we have not handled your personal information in accordance with the Privacy Act or Australian Privacy Principles, please contact us:

Grace Armstrong - Naturopathy
Email: gracearmstrong.naturopath@gmail.com
 

Please provide sufficient information about your concern to allow us to investigate it.

We will acknowledge and investigate privacy complaints and respond within a reasonable period.
 

If you are not satisfied with our response, or if your complaint has not been resolved, you may contact the Office of the Australian Information Commissioner (OAIC).

Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
 

The OAIC may investigate complaints about the handling of personal information under the Privacy Act.
 

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, privacy practices or applicable laws.
 

The most current version will be made available on our website and will include the date it was last updated.
 

Where appropriate, we may take additional steps to notify affected individuals of significant changes.
 

17. Contact Us

If you have any questions about this Privacy Policy, your personal information, or our privacy practices, please contact:

Grace Armstrong - Naturopathy
ABN: 52 514 459 829

Email: gracearmstrong.naturopath@gmail.com
 

We will endeavour to respond to privacy enquiries and requests within a reasonable timeframe.
 

Related privacy information

This Privacy Policy should be read together with any privacy notice, consent form or other information provided to you at or before the time your personal information is collected.