Effective date: 1st March 2025
Last updated: 1st March 2025

Heal & Rebuild Recovery Centre (“Heal & Rebuild”, “we”, “us”, “our”) respects your privacy and is committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, and store personal information when you use our website, contact us, or book/purchase services through our booking platform.

1) Who we are

Business name: Heal & Rebuild Recovery Centre
Address: 1187 The Horsley Dr, Wetherill Park NSW 2164
Email: info@healandrebuildrecoverycentre.com.au
Website: healandrebuildrecoverycentre.com.au

2) What personal information we collect

The types of personal information we may collect include:

2.1 Identity and contact details

• Name

• Email address

• Phone number

• Date of birth (if required for bookings)

• Address (if required for billing)

2.2 Booking and purchase information

• Appointment history, session type, preferences

• Membership or package details

• Payment status and transaction information (note: we typically do not store full card details ourselves)

2.3 Health-related information (sensitive information)

Depending on the service and safety requirements, you may choose to provide information related to your health, injuries, contraindications, or medical conditions (“Sensitive Information”).

We only collect sensitive information where it is reasonably necessary for providing services safely and with your consent (or as otherwise permitted by law).

2.4 Website and device information

When you use our website, we may collect:

• IP address

• Browser type and device identifiers

• Pages viewed, time on site, referral source

• Cookies and similar tracking data

2.5 Communications

• Messages you send us via contact forms, email, SMS, or social media

• Feedback, reviews, and enquiries

3) How we collect personal information

We collect personal information through:

• Direct interactions (forms, enquiries, bookings, in-person)

• The booking platform (e.g., Vagaro)

• Cookies and analytics tools used on our website

• Third parties where authorised (e.g., payment providers, booking providers)

4) Why we collect, use, and disclose personal information

We may use your personal information to:

• Provide and manage bookings, memberships, and services

• Process payments and prevent fraud

• Communicate about appointments (confirmations, reminders, changes)

• Provide customer support and respond to enquiries

• Maintain safety and suitability of services (where health information is relevant)

• Improve our services, facilities, and website experience

• Send marketing communications (where you have opted in or where permitted by law)

• Comply with legal obligations and resolve disputes

5) Booking platform and payments (Vagaro and others)

We use third-party service providers to manage bookings and payments, including Vagaro.

When you book or purchase via Vagaro, your information may be collected and handled under Vagaro’s policies and systems. We encourage you to review Vagaro’s terms and privacy practices directly.

We may receive booking details and customer information from Vagaro to administer your bookings and membership.

6) Disclosure of personal information

We may disclose personal information to:

• Booking and scheduling providers (e.g., Vagaro)

• Payment processors (to process transactions)

• IT, hosting, and website providers (to operate and secure our systems)

• Email/SMS providers (for appointment reminders and updates)

• Analytics providers (to understand website performance)

• Professional advisers (legal, accounting, insurance)

• Authorities where required by law or to protect rights/safety

We do not sell your personal information.

7) Cookies and analytics

Our website may use cookies and similar technologies to:

• Enable core site functionality

• Remember preferences

• Measure traffic and usage patterns

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the website.

8) Marketing communications

We may send updates, offers, or content if:

• you opt in, or

• it is otherwise permitted under Australian law.

You can opt out at any time by using the unsubscribe link (where available) or contacting us.

9) Storage and security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

These steps may include access controls, secure hosting, encryption in transit where applicable, and limiting access to authorised staff only.

However, no method of transmission over the internet or electronic storage is completely secure.

10) Overseas disclosure

Some third-party providers we use (such as booking platforms, analytics, email services, and cloud hosting) may store or process information outside Australia.

Where this occurs, we take reasonable steps to ensure your information is handled in a way that is consistent with the Australian Privacy Principles.

11) Data retention

We keep personal information only for as long as needed to:

• provide services,

• comply with legal and accounting obligations, and

• resolve disputes.

When no longer required, we take reasonable steps to destroy or de-identify the information.

12) Access and correction

You may request access to personal information we hold about you and request corrections if the information is inaccurate, out of date, incomplete, irrelevant, or misleading.

To request access or correction, contact us using the details in Section 16.

13) Sensitive information

Where we collect sensitive information (such as health information), we will:

• collect it only where reasonably necessary for safety and service delivery, and

• handle it with increased care and restricted access.

14) Links to other websites

Our website may include links to third-party websites (including booking providers). We are not responsible for the privacy practices of those websites. Please review their policies before providing personal information.

15) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be posted on our website with the updated effective date.

16) Contact and complaints

If you have questions, requests, or complaints about this Privacy Policy or how your personal information is handled, contact:

Heal & Rebuild Recovery Centre
Email: info@healandrebuildrecoverycentre.com.au

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).