Privacy Policy

This Privacy Policy explains how Pivot Point, operated by Makayla Potts (“we”, “us”, “our”) of 181 Melbourne Rd, Rippleside VIC 3215, collects, uses, stores, discloses and protects your personal information, including your health information.

As a provider of a health service that holds health information, we are bound by the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs), and — because we operate in Victoria — by the Health Records Act 2001 (Vic) and the eleven Health Privacy Principles (HPPs). These obligations apply to us regardless of our size or turnover.

1. The information we collect

Depending on how you interact with us, we may collect:

• Contact details — your name, email address, phone number and postal address.
• Health information — your health history, symptoms, presenting conditions, treatment goals, the treatment provided and clinical notes. This is sensitive information and is given a higher level of protection under the law.
• Booking & payment details — appointments you request, services chosen, and payment information processed through our booking provider.
• Funding details where relevant — for example private health fund or NDIS information you choose to provide so we can support your claim or plan.
• Website information — limited technical and usage information, and any feedback or messages you submit through this site.

We only collect health information with your consent and where it is necessary to provide your care.

2. How we collect it

We collect information directly from you wherever possible — through our online booking form, in person during your appointment, by phone or email, and through this website. Our online bookings and clinical records are managed through Cliniko, a practice-management platform whose data is hosted in Australia.

If you provide information about another person (for example a child you are booking for), we rely on you having their consent to do so.

3. Why we collect and use it

We use your information to:

• assess, plan and provide your treatment safely;
• manage your bookings, reminders and payments;
• maintain accurate clinical records;
• communicate with you about your appointments and care, and respond to your enquiries;
• support private health fund or NDIS claims where you ask us to; and
• meet our legal, professional and insurance obligations.

We will only use or disclose your information for the primary purpose it was collected, for a directly related purpose you would reasonably expect, or where you have consented or the law requires or permits it.

4. Disclosure to others

We do not sell your information, and we do not disclose it for marketing by others. We may share information with:

• Service providers who help us operate — our booking and records platform (Cliniko), payment processors, and our website hosting and database providers;
• Other health practitioners involved in your care, your GP, or your health fund / NDIS — only with your consent;
• Others where required or authorised by law, or to lessen a serious threat to someone’s life, health or safety.

5. Storage, security and overseas hosting

Your clinical and booking records are held in Cliniko, which stores its data in Australia. This website and its feedback database are hosted by infrastructure providers (including Vercel and Neon) whose servers may be located overseas, including in the United States. Where information is handled outside Australia, we take reasonable steps to ensure it is protected to a comparable standard.

We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access, modification or disclosure — including access controls, encryption in transit, and limiting who can see your records.

6. Data breaches

We are covered by the Notifiable Data Breaches scheme. If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as required by law.

7. Accessing and correcting your information

You can ask to see the personal and health information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. Contact us using the details below. We will respond within a reasonable time and will let you know if there is any reason we cannot give access, as permitted by law.

8. Cookies and website analytics

This site uses only the cookies necessary for it to function (such as keeping you signed in to a preview). We do not use your website activity to build a marketing profile of you. If we introduce analytics in future, we will update this policy.

9. Marketing communications

We will only send you marketing messages if you have agreed to receive them. Appointment confirmations and reminders are part of providing your care and are not marketing. You can opt out of any marketing at any time using the unsubscribe link or by contacting us.

10. Contact us and making a complaint

If you have a question about your privacy, or would like to access, correct or complain about how we have handled your information, please contact us first:

Pivot Point — Makayla Potts
181 Melbourne Rd, Rippleside VIC 3215
admin@pivotpointtherapies.com
0404 139 333

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) or, for health records in Victoria, the Health Complaints Commissioner (Victoria).

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version, with its effective date, will always be available on this page.