Privacy Policy

About this policy

Flame Tree Chiropractic ("we", "us") respects your privacy. This policy explains how we collect, use, store and share your personal and health information.

We are a health service provider at 10 Ayshford Street, Casula NSW 2170. We handle your information under the Privacy Act 1988 (Cth), including the Australian Privacy Principles, and the Health Records and Information Privacy Act 2002 (NSW).

Business name: Flame Tree Chiropractic · ABN: 50 645 145 124

What we collect

We collect only the information we need to provide safe care and run our clinic. This may include:

• Contact details: name, date of birth, address, phone, email and emergency contact.

• Health information: medical history, symptoms, medications, test results, imaging, clinical notes, treatment records and referrals from other practitioners.

• Funding details: health fund, Medicare number and referral details (such as a GP management plan referral), where relevant.

• Payment details: processed through our payment providers. We do not store full card numbers.

• Website information: basic usage data, such as pages visited and device type.

If we treat a child, we collect information from their parent or guardian.

You can choose to deal with us anonymously or under a pseudonym where that is practical. For most clinical care it is not, because we need to identify you to treat you safely and claim rebates.

How we collect it

We usually collect information directly from you: when you book online, complete intake forms, call us, or attend an appointment.

We may also collect it from others with your consent or where the law allows, such as your GP, specialists, other practitioners, your health fund, or a parent or guardian.

Why we use it

We use your information to:

• assess, treat and care for you;

• manage bookings, reminders and follow-ups;

• process payments, health fund claims and Medicare rebates;

• communicate with your GP or other practitioners involved in your care, with your consent;

• meet our legal, professional and insurance obligations;

• improve our services and website.

We do not sell your personal information.

Who we share it with

We share your information only where needed for the purposes above, with your consent, or where the law requires or allows it. This may include:

• other practitioners within our clinic involved in your care;

• your GP, specialists or other health providers;

• your health fund and Medicare, to process claims;

• trusted service providers who help us operate, such as our practice management and booking system (Cliniko), payment processors, IT and website providers;

• government agencies, courts or regulators, where required by law.

Where data is stored: our practice management system, Cliniko, stores data for Australian accounts in Australia. Some of our other service providers, such as email, website and social media platforms, may store data on servers outside Australia. Where this happens, we take reasonable steps to make sure your information is protected.

Storage, security and retention

We store your records electronically in secure systems with password protection and restricted staff access. Paper records, if any, are kept secure.

As required in NSW, we keep health records of adults for at least 7 years after their last visit. For patients under 18, we keep records until they turn 25. After that, we destroy or de-identify them securely (IPC NSW).

If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by law.

Accessing and correcting your information

You can ask to see or get a copy of the information we hold about you, or ask us to correct it. Contact us using the details below.

We will respond within a reasonable time, usually 30 days. We may need to confirm your identity first. In limited cases the law allows us to refuse access; if so, we will tell you why. We may charge a reasonable fee for copies, but not for making the request.

Our website, cookies and online shop

Our website may use cookies and analytics tools to understand how visitors use it. This data does not identify you personally, and you can disable cookies in your browser.

Online bookings are handled by Cliniko, which manages your information under its own privacy policy.

Our website may link to other sites, such as Instagram, Facebook and Google Maps. We are not responsible for their privacy practices.

Marketing and communications

We send appointment reminders by SMS or email. With your consent, we may also send occasional clinic news or offers. You can opt out at any time using the unsubscribe link or by contacting us. Opting out of marketing does not affect appointment reminders.

Questions and complaints

If you have a question or concern about your privacy, contact our Privacy Officer first. We aim to resolve complaints within 30 days.

• Privacy Officer: Dr Hany Attia, Principal Chiropractor

• Phone: 0491 121 440

• Email: admin@flametreechiro.com.au

• Address: 10 Ayshford Street, Casula NSW 2170

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au) or the Information and Privacy Commission NSW (ipc.nsw.gov.au).

Changes to this policy

We may update this policy from time to time. The current version is always on our website.

Last updated: October 2026