The Savage Self-care Coach

Purpose and Scope

This policy explains how Abigail Burton, trading as The Savage Self-Care Coach, collects, uses, stores, protects and discloses personal information and health information.

It applies to information collected from prospective, current and former clients, program participants, customers and other people who interact with The Savage Self-Care Coach.

Information I Collect

I collect only the information reasonably necessary to operate my business and provide services safely and effectively.

Depending on the nature of the interaction, this may include:

• name, contact details and identifying information;
• information provided through enquiries, prospective-client screening, enrolment and intake forms;
• health history, diagnosed conditions, symptoms, allergies, medications, supplements and relevant test results;
• dietary, lifestyle, sleep, stress, movement and health-goal information;
• consultation notes, recommendations, appointment history and service records;
• payment, invoice and transaction information; and
• correspondence, feedback and other communications.

How and Why Information Is Collected

Where reasonable and practicable, I collect information directly from the person it relates to. Information may be collected through website forms, questionnaires, consultations, email, telephone, messaging services, appointment-booking systems and payment providers.

Where services are provided to a person under 18, relevant information will be collected with the involvement and consent of their parent or legal guardian.

Information is collected and used to:

• respond to enquiries and assess suitability for services;
• provide clinical nutrition and related services;
• personalise services according to the client’s circumstances and goals;
• manage enrolment, appointments, payments and service-related communication;
• maintain appropriate records and support continuity and safety of care;
• meet legal, insurance and professional obligations; and
• operate and improve the business.

If information reasonably required for the safe provision of a service is not provided, I may be unable to accept the person as a client or provide some or all of the requested service.

Use and Disclosure

I treat personal information and health information as confidential.

Information may be used for the purpose for which it was collected or for a directly related purpose that the individual would reasonably expect.

Information will only be disclosed to a third party:

• where the individual has provided consent, including where they have authorised information to be shared with another healthcare professional;
• where disclosure is required or authorised by law; or
• where disclosure is reasonably necessary to address a serious risk to the health or safety of the individual or another person.

Service providers may handle information on my behalf where reasonably necessary to provide website forms, email, appointment booking, video consultations, payment processing or data storage. These providers are only given access to information reasonably required to perform their authorised function.

I do not sell or rent personal information.

Personal information will not be used for marketing unless the person has subscribed, consented or the communication is otherwise permitted by law. Marketing communications will include a way to unsubscribe.

Storage, Security and Retention

Information may be stored using secure electronic systems, including cloud-based service providers and encrypted local storage.

I take reasonable steps to protect information from loss, misuse, unauthorised access, modification and disclosure. Access to identifiable client information is limited to me and service providers requiring access to perform an authorised function.

Health records relating to an adult client will generally be retained for at least seven years after the last health service was provided. Health information collected while a client was under 18 will be retained until the client reaches 25 years of age or for at least seven years after the last health service was provided, whichever is later.

Other personal information will be retained only for as long as reasonably required or as required by law. When information may lawfully be disposed of and is no longer required, it will be securely destroyed or permanently de-identified.

Overseas Processing and Storage

Some service providers used by The Savage Self-Care Coach may process or store information outside Australia, including in the United States and other countries in which those providers operate.

Where information is handled outside Australia, I will take reasonable steps to use reputable service providers and safeguard the information in accordance with applicable privacy requirements.

Access and Correction

Individuals may request access to personal information or health information I hold about them and may request correction where information is inaccurate, incomplete, out of date or misleading.

Requests should be made in writing using the contact details below. I may need to verify the person’s identity before providing access or making a correction.

Access or correction may be limited or refused where permitted or required by law. If this occurs, written reasons will be provided where required.

Privacy Enquiries and Complaints

Privacy enquiries, requests to access or correct information, and complaints about the handling of personal information may be submitted through the contact form available on The Savage Self-Care Coach website at:
https://abigailrburton.com/contact/

Please do not include detailed health information in the initial contact form submission. I will respond with an appropriate method for providing any additional information required.

I will acknowledge and investigate privacy complaints and aim to respond within a reasonable period.

If a person is dissatisfied with the response, they may contact:

• the Office of the Australian Information Commissioner at www.oaic.gov.au; or
• the Victorian Health Complaints Commissioner at www.hcc.vic.gov.au where the complaint concerns health information or the provision of a health service.

Applicable Law

Personal information and health information are handled in accordance with applicable laws, including the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Health Records Act 2001 (Vic), including the Health Privacy Principles.

Policy Updates

This policy may be updated to reflect changes in legal requirements, business operations or the services and technology used by The Savage Self-Care Coach.

The current version will be made available through the business website. Where a change materially affects a current client, I will provide notice of the change.