Privacy Policy

1 About Us

Heal Young Massage PTY LTD (ABN 54 608 862 013) operates a remedial massage and exercise science practice at 21 Meridien Avenue, Varsity Lakes QLD 4227. The practice is operated by Hill Yang (Remedial Massage Therapist MMA #031045 · ESSA Accredited Exercise Scientist AES #17005).

For privacy enquiries, contact us at:

2 Information We Collect

We collect two categories of information:

Personal information

• Full name, date of birth, and contact details (email, phone, address)
• Emergency contact information
• Health fund membership details and HICAPS card information
• Payment information (processed securely — we do not store card numbers)

Health information (sensitive information)

• Medical history, current conditions, medications, and allergies
• Presenting complaints, symptoms, and relevant past injuries
• Clinical notes, assessment findings, and treatment records
• Referral letters or reports from other treating practitioners
• Movement assessment data, force plate findings, and ultrasound observations
• Pregnancy status where clinically relevant

Website and technical information

• IP address, browser type, and device information
• Pages visited and time spent on our website (via analytics — see Section 8)
• Information submitted through online contact or booking forms

3 How We Collect Your Information

We collect information in the following ways:

• Online intake forms — completed via our booking system (JaneApp) before your appointment
• In-clinic consultation — verbal history and physical assessment during your appointment
• Online bookings — through JaneApp at healyoungmassage.janeapp.com.au
• Email and phone — when you contact us directly
• Referrals — information provided by another practitioner with your consent
• Website — through cookies and analytics tools when you browse healyoungmassage.com.au

We only collect information that is reasonably necessary for us to provide our services. Where possible, we collect health information directly from you.

4 Why We Collect and Use Your Information

We use your personal and health information to:

• Assess your presenting concerns and provide appropriate remedial massage or exercise science services
• Maintain accurate and complete clinical records of your care
• Process health fund claims through HICAPS
• Send appointment reminders and follow-up communications
• Comply with our professional and legal obligations
• Respond to your enquiries and provide customer support
• Improve our services and website (using de-identified or aggregated data only)

We will not use your information for direct marketing without your explicit consent, and we will never sell your personal information to third parties.

5 Disclosure of Your Information

We may share your information with third parties only in the following circumstances:

Health funds and payment processors

We transmit health fund claim data through HICAPS to process rebates on your behalf. This requires disclosing your membership number, treatment details, and provider information.

Referring practitioners

With your explicit consent, we may share relevant clinical information with your GP, specialist, or other treating practitioners to support coordinated care.

Service providers

• JaneApp (practice management and booking platform) — stores your personal and health information on your behalf. JaneApp is bound by its own privacy policy and applicable data protection laws.
• Payment processors — payment transactions are handled securely by third-party processors. We do not store your card details.

Legal obligations

We may disclose information without your consent if required or authorised by law — for example, in response to a court order, mandatory reporting obligation, or where we believe disclosure is necessary to prevent serious harm to you or another person.

We do not disclose your information to overseas recipients except where our service providers (such as cloud storage) may store data on international servers. We take reasonable steps to ensure such providers apply equivalent privacy protections.

6 Storage and Security

Your records are stored electronically within JaneApp, which uses industry-standard security including encryption in transit and at rest, and role-based access controls.

Clinical records are retained for a minimum of 7 years from the date of your last appointment, or until you turn 25 years of age (whichever is later), in accordance with Queensland health record retention guidelines.

We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access. If we become aware of a data breach that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

7 Your Rights

Access to your information

You have the right to request access to the personal and health information we hold about you. Requests should be made in writing to hill@healyoungmassage.com.au. We will respond within 30 days. In some circumstances we may charge a reasonable fee to cover the cost of providing access.

Correction of your information

If you believe that any information we hold about you is inaccurate, out of date, incomplete, or misleading, please contact us and we will take reasonable steps to correct it. If we decline to correct information, we will explain why and note your request in your record.

Withdrawal of consent

Where we rely on your consent to process information, you may withdraw that consent at any time. Please note that withdrawal may affect our ability to provide services to you.

8 Website Analytics and Cookies

Our website (healyoungmassage.com.au) uses cookies and analytics tools to understand how visitors use the site. This may include tools such as Google Analytics or similar services, which collect anonymised data about page views, traffic sources, and device types.

You can disable cookies through your browser settings. Disabling cookies will not affect your ability to use our booking system or contact us, though some website features may be affected.

We do not use website analytics data to identify individual visitors, and we do not combine it with your clinical or personal records.

9 Links to Third-Party Websites

Our website may contain links to external sites, including our online booking platform (JaneApp), health fund portals, and professional association websites. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10 Privacy Complaints

If you have a concern about how we have handled your personal or health information, please contact us in the first instance so we can attempt to resolve the matter:

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service offerings. The current version will always be published on our website with the effective date noted at the top. For significant changes, we will notify current clients via email.