Holistica Massage & Health Supplies — Privacy Policy

Services: Mobile massage therapy, corporate massage, health and massage products.

1. Purpose of This Policy

Holistica Massage & Health Supplies (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Notifiable Data Breaches Scheme.

This policy explains how we collect, use, store, and protect your personal and health information.

2. What Information We Collect

We collect personal information that is reasonably necessary to provide our services.

2.1 Personal Information

Holistica may collect the following personal information:

  • Name
  • Phone number
  • Email address
  • Residential or workplace address (for mobile bookings)
  • Date of birth
  • Gender (if provided)
  • Emergency contact details
  • Payment information (invoices, receipts)
  • Health information relevant to treatment, including medical history, injuries, contraindications, and other details provided in the client’s health history form

2.2 Sensitive & Health Information

As a health service provider, we collect health information such as:

  • Injuries, pain areas, and treatment goals
  • Medical conditions, allergies, or contraindications
  • Pregnancy status
  • Massage treatment notes
  • Client intake form responses

This information is classified as sensitive information and requires explicit consent.

2.3 Website & Digital Information

  • Contact form submissions
  • Draft quote and quote submissions
  • Booking form details
  • IP address, browser type, device information
  • Analytics data (e.g., Google Analytics)
  • Cookies and tracking data (if enabled)

3. How We Collect Information

We collect information through:

  • Online booking forms
  • Intake and consent forms
  • Email, SMS, or phone communication
  • Corporate booking lists provided by workplaces
  • Website forms
  • In-person consultations
  • Payment processing systems
  • Encrypted cloud-based customer management system

4. Why We Collect Your Information

We collect your information to:

  • Provide massage therapy and related services
  • Assess suitability for treatment
  • Maintain accurate treatment records
  • Manage bookings and communication
  • Process payments and invoices
  • Comply with legal and professional obligations
  • Improve our services and website
  • Provide marketing updates (only with consent)

We do not sell, rent, or trade your information.

5. Consent

By engaging our services, completing an intake form, or submitting information through our website, you consent to the collection and handling of your personal and health information.

You may withdraw consent at any time, except where information must be retained for legal or clinical reasons.

6. How We Store & Protect Your Information

We take “reasonable steps” to protect your information, including:

6.1 Digital Security

  • Password-protected systems
  • Multi-factor authentication
  • Encrypted devices
  • Secure cloud storage
  • Regular software updates
  • Restricted access to authorised personnel only
  • Client information is stored in a secure, encrypted cloud-based customer management system

6.2 Physical Security

  • Locked filing cabinets
  • Secure disposal (shredding)
  • No client files left unattended

6.3 Contractor Access

Contractors must sign confidentiality agreements and follow Holistica Massage & Health Supplies’ privacy and data handling procedures.

7. Disclosure of Information

We may disclose your information to:

  • Your workplace (for corporate bookings) — only attendance data, never health information
  • Other health professionals — only with your explicit consent
  • Service providers such as:
    • Booking platforms
    • Payment processors
    • Email or SMS providers
    • Cloud storage providers
  • Legal authorities if required by law

We do not disclose health information to employers, insurers, or third parties without your consent unless legally required.

8. Data Retention

We retain records in accordance with Australian health record requirements:

  • Adult records: 7 years from last treatment
  • Clients under 18: until age 25
  • Financial records: 7 years
  • Website form submissions: retained only as long as necessary

After this period, records are securely destroyed or permanently de-identified.

9. Notifiable Data Breaches

If a data breach is likely to cause serious harm, we will:

  1. Immediately take steps to contain the breach
  2. Assess the nature and impact
  3. Notify affected individuals
  4. Notify the Office of the Australian Information Commissioner (OAIC)
  5. Take action to prevent future breaches

10. Access to Your Information

You may request:

  • Access to your personal or health information
  • Corrections to inaccurate information
  • Deletion of information (where legally permitted)

Requests can be made via email. We may require identity verification.

11. Marketing Communications

We may send marketing communications such as emails, SMS messages, postal mail, or other promotional materials with your consent. You may opt out of marketing communications at any time.

12. Cookies & Website Tracking

Our website may use cookies or analytics tools to improve user experience.

You can disable cookies in your browser settings.

If we use Meta Pixel, Google Analytics, or similar tools, this will be disclosed on the website.

13. Complaints

If you believe your privacy has been breached, contact us immediately.

We will investigate and respond promptly.

If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC).

14. Contact Us

Holistica Massage & Health Supplies
South Australia
Email: joanna@holisticamassagesupplies.com.au
Phone: 0494 737 007

Version 1 – 21 June 2026