Legal
Privacy policy
StressFracturePhysio is a Sydney physiotherapy practice. We handle health information, so we take privacy seriously. This policy explains what we collect, why, where it is kept and what your rights are. We are bound by the Privacy Act 1988 (Cth), the Australian Privacy Principles, and the NSW Health Records and Information Privacy Act 2002.
What we collect
- Contact details you give us: name, email, phone.
- Health information you share so we can treat you: your history, symptoms, imaging and test results, training and activity data, questionnaires, and your rehabilitation program and progress.
- Account information if you log in to this site: your email address and the sign in links or codes we send it.
- Newsletter sign up: your email and the consent you gave, if you subscribe.
- Technical information that any website receives, such as IP address, browser type and the pages requested. Our host, Cloudflare, processes this to serve and protect the site.
Why we collect it
- To assess, treat and communicate with you, and to build and update your rehabilitation program.
- To run your account and keep it secure.
- To send you the emails you have asked for. Every marketing email has an unsubscribe link.
- To meet our legal and professional obligations as registered health practitioners.
We do not sell personal information, and we do not use it for advertising.
Where it is stored
- Clinical records and bookings are held in Cliniko, a practice management system hosted in Australia.
- Website accounts, programs and newsletter subscriptions are held in Supabase in the Sydney region, with access rules that let you see only your own data and let your treating clinicians see the patients they treat.
- This website is served by Cloudflare. Traffic is encrypted in transit.
- Email we exchange with you is kept in our practice mailboxes.
Who we share it with
Your treating clinicians at StressFracturePhysio, and, with your agreement, other practitioners involved in your care such as your GP, sports doctor, podiatrist or dietitian. We may also disclose information where the law requires it. The service providers above process information on our behalf and under contract; they do not use it for their own purposes.
How long we keep it
Health records are kept for at least seven years from your last visit, or until you turn 25 if you were under 18 when treated, as NSW law requires. Newsletter details are kept until you unsubscribe. Website accounts are removed on request.
Cookies and tracking
The site uses no advertising cookies. Page views and page speed are measured with cookie-free analytics (Cloudflare Web Analytics), which counts visits without setting cookies, fingerprinting your device or identifying you. If you log in, your session is stored in your browser so you stay signed in. That is the only data this site keeps on your device.
Your rights
You can ask to see the personal information we hold about you, and ask us to correct it. You can unsubscribe from emails at any time. If you have a concern about how we have handled your information, contact us first and we will respond within 30 days. You may also complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Contact
Privacy questions: info@stressfracturerehab.com.