Privacy Policy

Privacy Policy

Source Health and Wellness Pty Ltd
Effective date: 12 September 2026
Last updated: 12 September 2026

1. Purpose and scope

Source Health and Wellness Pty Ltd (ABN 30656486314) (we, us, our, or Source Health and Wellness) provides integrative and personalised health services, including consultations, health assessments, nutritional and environmental functional testing, and treatment planning. This Privacy Policy explains how we collect, hold, use and disclose personal information, including sensitive health information, when you use our website, make an enquiry or booking, complete a form, communicate with us, or receive our services.

We are committed to managing personal information openly and transparently. We handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), applicable Queensland health-records requirements, and other applicable laws.

2. Personal information we collect

The types of personal information we may collect include:

• Identification and contact information, such as your name, date of birth, address, telephone number, email address, emergency contact and next-of-kin details.
• Health information, including your medical history, current and previous health conditions, medications, allergies, test results, referrals, treatment history, lifestyle information, questionnaire responses, consultation notes and information relevant to your care.
• Billing and payment information, including appointment and invoice information, payment status, Medicare or private-health-fund details where relevant, and information needed to process payments.
• Communications and correspondence, including emails, SMS messages, telephone notes, website enquiries, feedback and complaints.
• Website and online-booking information, including information you enter when booking online or completing a website form, and limited technical information that may be generated when you use our website, such as IP address, browser type and website usage information.

We collect only information that is reasonably necessary for the services we provide, our legal obligations, and the operation and improvement of our practice.

3. How we collect information

We may collect personal information directly from you when you:

• make an enquiry, appointment or online booking;
• register as a patient or complete an intake, consent or review questionnaire;
• attend a consultation or communicate with us by telephone, email, SMS, video consultation, social media or in person;
• make a payment or submit an invoice or Medicare/private-health-fund information; or
• use our website or submit a website form.

We may also collect relevant information from another person or organisation where you authorise this, where it is reasonably necessary for your care, or where permitted or required by law. This may include your parent, guardian or authorised representative; referring practitioner; general practitioner; specialist; allied health practitioner; pathology or diagnostic provider; hospital; pharmacy; health fund; Medicare; or government agency.

4. Why we collect, use and disclose information

We collect, hold, use and disclose personal information to:

• provide safe, appropriate and personalised healthcare services;
• assess your health concerns, develop and review treatment plans, coordinate care and maintain clinical records;
• arrange appointments, send booking confirmations, reminders, intake-form links, follow-up communications and administrative notices;
• arrange or interpret relevant testing, referrals, prescriptions, treatment products or other services where clinically appropriate and authorised;
• process fees, payments, invoices, refunds, Medicare claims or private-health-fund matters where applicable;
• communicate with you, respond to enquiries, manage feedback and resolve complaints;
• comply with legal, professional, regulatory, taxation, insurance, accreditation and record-keeping obligations;
• maintain the security, quality and operation of our website, systems and services; and
• use de-identified or aggregated information for practice administration, quality improvement, training, audit and service planning.

We will seek additional consent where required for a use or disclosure that is not directly related to the purpose for which the information was collected, unless we are otherwise permitted or required by law.

5. Who we may disclose information to

We may disclose personal information only where reasonably necessary for the purposes described in this policy, with your consent, or where permitted or required by law. Recipients may include:

• practitioners, employees and contractors involved in providing or supporting your care;
• other healthcare providers, specialists, hospitals, pathology or diagnostic services, pharmacies and referral providers, where you authorise this or it is otherwise permitted or required;
• service providers that help us operate our practice, such as practice-management, online-booking, secure communications, information-technology, payment-processing, accounting, legal, insurance, accreditation and professional-advisory providers;
• Medicare, private health insurers, the Department of Veterans’ Affairs or other government bodies where relevant;
• regulators, courts, tribunals, law-enforcement agencies or other authorities where required or authorised by law; and
• another person or organisation where necessary to lessen or prevent a serious threat to the life, health or safety of an individual or to public health or safety, where permitted by law.

Our service providers must handle information appropriately and only for authorised purposes. We do not sell personal information or health information.

6. Overseas disclosures

We aim to use Australian-based systems for clinical and practice information where practicable. Some technology, communications, website-hosting, payment or support providers may process information from locations outside Australia, or may use overseas subcontractors. Where we are likely to disclose personal information overseas, we will take reasonable steps to ensure that the recipient handles it in accordance with applicable Australian privacy requirements, unless an exception applies under the Privacy Act 1988 (Cth).

If you would like information about the countries in which a particular provider may process information, please contact our Privacy Officer using the details below.

7. Website, online booking and links

Our website may contain links to external websites, including online-booking, payment, testing, social-media or information-provider websites. We are not responsible for the privacy practices, content or security of third-party websites. Please read the privacy policy of the relevant third party before providing information through its website.

Do not send urgent, highly sensitive or emergency information through standard email, website contact forms or social media. Email and the internet carry security risks and may not be secure methods of transmitting sensitive information.

8. How we protect information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Our safeguards may include secure practice-management systems, access controls, passwords, staff confidentiality obligations, secure storage, encryption or secure transmission where available, system monitoring and procedures for responding to suspected data breaches.

No method of electronic transmission or storage is completely secure. We encourage you to contact us by telephone if you are concerned about transmitting sensitive information electronically.

9. Retention and destruction

We retain health and other personal information for as long as required or permitted by applicable law, professional obligations and legitimate practice needs. Health records are generally retained for at least the applicable legal minimum period. When information is no longer required, we take reasonable steps to securely destroy or de-identify it, unless we are legally required to retain it.

10. Access and correction

You may request access to personal information we hold about you and request correction of information that you believe is inaccurate, out of date, incomplete, irrelevant or misleading.

Please make your request in writing to our Privacy Officer. We may need to verify your identity and may charge a reasonable fee for providing access where permitted by law. We will respond within a reasonable period. In limited circumstances, we may refuse access or correction as permitted by law; if so, we will provide written reasons and explain available options.

11. Privacy complaints

If you have a privacy concern or complaint, please contact our Privacy Officer in writing. We will acknowledge your complaint, investigate it and aim to respond within 30 days where practicable.

Privacy Officer
Source Health and Wellness Pty Ltd
Address: Suite 125, 6/1 Rabaul Street, Trinity Beach QLD 4879
Email: info@sourcehealthandwellness.com

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

• Website: https://www.oaic.gov.au/privacy/privacy-complaints
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our services, systems or legal obligations. The current version will be available on our website. The effective date at the top of this policy shows when it was last updated.