Privacy Policy

At APEX. Chiro Gregory Hills ("we", "us", "our"), we are committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you visit our clinic, use our website, make an appointment, receive chiropractic care, or otherwise interact with us.

By using our services, you acknowledge that your personal information will be handled in accordance with this Privacy Policy.

To provide safe and effective chiropractic care, we may collect several types of personal information.

Personal information: Full name, Date of birth, Gender, Occupation
Emergency contact details: Contact Information, Residential address, Email address, Telephone number

Health information
As a chiropractic clinic, we collect health information relevant to your care, including: Medical history, Current symptoms, Previous injuries, Previous surgeries, Current medications, Allergies, Family health history (where relevant).

Health information is classified as sensitive information under Australian privacy law.

Lifestyle information
As a chiropractic clinic, we collect lifestyle information relevant to your care, including: Exercise habits, Occupational information, Imaging reports, X-rays findings, Clinical examination findings, Chiropractic assessments, Treatment records, Progress notes, Referrals, Correspondence with other health care providers.

Financial information
Where applicable we collect: Payment records, Transaction history, Private health insurance details, Medicare or insurer claim information where required, Stripe payment confirmations. We do not store complete credit card information.

Technical information
When you visit our website we may collect: IP address, Browser type, Device information, Website usage information, Cookies.

Communication information
Correspondence records, Feedback, and Inquiries made through our website, social media or email.

Under the Privacy Act 1988 and Australian Privacy Principles, we only collect and use personal information where reasonable necessary for our functions as a healthcare provider. 
We collect personal information in several ways including:
Information you provide — when you complete patient registration forms, attend consultations, book appointments, contact us, email us, telephone the clinic, or complete health questionnaires. 
Online booking — appointments booked through Cliniko require certain personal and health information so that appointments can be scheduled and managed appropriately. 
Payments — payments process through Stripe, private health insurance claiming systems, cash payments and insurance billing generate transaction records required for accounting and legal purposes. 
Website — our website may automatically collect technical information through cookies and standard website technologies.
During treatment — throughout your care we record clinical observations, examination findings, treatment notes and recommendations to support your ongoing healthcare.
 
We collect your information for: Providing chiropractic care, Assessing your condition, Developing treatment plans, Delivering chiropractic treatment, Maintaining clinical records, Health information is collected because it is necessary to provide healthcare services. 
Appointment management including: Schedule appointments, Confirm bookings, Send reminders, Manage cancellations, Contact you regarding changes to appointments
Processing payments including: Process payments, Issue receipts, Manage insurance billing, Meet taxation obligations
Legal and regulatory obligations: We retain records to comply with Australian healthcare record requirements, Taxation laws, Professional standards, Insurance obligations, Legal requests where required. 
Marketing communications:
With your consent, we may use your email address or phone number to send clinic news, health education, practice updates, promotions and special offers. Marketing communications are managed using GoHighLevel, and every marketing email includes an unsubscribe options. You may opt out at any time without affecting your access to healthcare services. Clinical communications such as appointment reminders, recall notices, treatment follow-ups and administrative messages are considered part of providing your healthcare and are not marketing communications. 

We only share your information where necessary to provide health care services or where required by law. Your information may be shared with:

Cliniko — Our patient management system used for Appointment scheduling, Clinical records, Patient communications. Cliniko stores date within Australia. 
Stripe — Used for secure online payment processing. Stripe is PCI DSS compliant and securely processes payment transactions. 
GoHighLevel — Used to manage marketing communications and patient engagement. The clinic periodically reviews GoHighLevel's current data hosting arrangements to ensure they remain appropriate. 
Associate practitioners — Authorised chiropractors working within the clinic may your records where necessary to provide your care. Access is restricted to healthcare professionals who require the information to perform their duties.
Insurance companies — Where necessary, information may be shared with insures for Claims processing, Verification of treatment, and Payment administration. We will only provide information reasonable necessary for these purposes unless otherwise required by law or authorised by you. 
Government authorities — Where required by Australia law, we may disclose information to courts, regulators or government agencies.

We store patient information securely using digital and paper records with appropriate safeguards, including restricted access, password-protected systems and secure storage. We take reasonable steps to protect your information from unauthorised access, misuse or disclosure. 
We retain your records for the period required by Australian law and professional obligations before securely destroying or de-identifying them. 

You may request access to or correction of your personal information by contacting us. If you believe your privacy has been breached, please contact us so we can investigate your concerns.

Our website may use cookies to improve functionality and user experience. You can manage cookies through your browser settings.

We treat patients under 18 years of age. Personal information for children is collected and managed with the consent of a parent or legal guardian where required.

We may update this Privacy Policy from time to time. The latest version will always be available on our website. Where changes are significant, we will take reasonable steps to notify patients. If you do not agree with this Privacy Policy or any future updates to it, please exit this website immediately.