Prevail Exercise Physiology
Privacy Policy
Prevail Exercise Physiology (“we,” “us,” “our” — Louis Sakrzewski-Hetherington, ABN 66 352 996 140) is committed to protecting the privacy and confidentiality of clients’ personal information, in compliance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the NDIS Quality and Safeguarding Framework. As a health service provider, we are covered by the Privacy Act regardless of business size.
1. What we collect
Only what is necessary to provide services and meet legal obligations: name, address, contact details, date of birth; health and medical information (diagnoses, medications, assessment findings, clinical notes); NDIS plan details and funding information; emergency contacts; and information about services required or received.
2. How we collect it
Directly from you during intake, assessment and service delivery; from third parties involved in your care (GP, specialists, support coordinators, plan managers, family) with your consent; and from forms and documents you provide.
3. How we use it
To deliver exercise physiology services and supports; to manage and administer services including billing and payment; to communicate with you and those involved in your care; to meet legal, professional (ESSA) and regulatory obligations; and for quality assurance and safety.
4. Disclosure
We may disclose information to: your GP, referrers and treating team; your support coordinator or plan manager (for billing and coordination); the NDIA / NDIS Commission and other agencies where required; and other parties with your consent or as required by law. Clinical note bodies are de-identified as standard practice. We do not sell or trade personal information.
5. Storage, security & retention
Reasonable steps are taken to protect information from misuse, loss, unauthorised access, modification or disclosure. Clinical records are retained for at least 7 years from the last entry (for clients under 18, until age 25), then securely destroyed. In the event of a data breach likely to result in serious harm, we will follow the Notifiable Data Breaches scheme, notifying affected individuals and the OAIC.
6. Access & correction
You may request access to, or correction of, your personal information at any time using the contact details below; we will respond within a reasonable timeframe.
7. Complaints
Contact us first (details below). If unsatisfied, you may contact the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992) or the NDIS Quality and Safeguards Commission (ndiscommission.gov.au, 1800 035 544).
8. Website analytics and cookies
This website uses Google Analytics to understand how people find and use the site — for example which pages are read and whether visitors reach the enquiry form. This is entirely separate from your clinical records and is never linked to them.
Google Analytics places cookies in your browser and collects your device and browser type, approximate (city-level) location, the pages you view, and which links you click. Google does not store your full IP address. We do not send Google your name, email address, phone number, health information, or anything you type into the enquiry message box. When an enquiry form is submitted we record only two non-identifying categories — the type of enquirer and the likely funding source — so we know which services people need.
Advertising and remarketing features are switched off, so this information is not used to build advertising profiles or follow you around the internet.
If you would rather not be measured, you can block cookies in your browser settings or install Google's Analytics Opt-out Browser Add-on. The website works exactly the same either way.
9. Online booking and website forms
The free 15-minute chat is booked through Cal.com, a scheduling service. When you book, Cal.com collects your name, email address, phone number, the category you choose for “I’m enquiring as,” and anything you write in the notes field. Your chosen time is checked against our appointment calendar so we are not offered to you when we are already busy, and once confirmed the booking is added to that calendar. A booking is a request until we confirm it.
The enquiry and referral forms elsewhere on this site are delivered to us by Web3Forms, which passes what you submit to our email address.
Both are third-party providers based outside Australia, so information you enter into them may be stored or processed overseas, including in the United States. Using these forms indicates your consent to that disclosure for the purposes of Australian Privacy Principle 8. If you would rather your information not leave Australia this way, please phone 0400 111 299 or email us instead — we are happy to book you in directly, and you will not be disadvantaged for asking.
Please keep these forms to the basics. They are not a secure channel for detailed health information, and you do not need to provide any at this stage — we will cover all of that with you directly, in a setting suited to it.
10. Changes
This policy may be updated from time to time; the current version is available on request and at prevailep.com.au.
Contact
Louis Sakrzewski-Hetherington · Prevail Exercise Physiology
Paddington, Brisbane QLD 4064
Phone: 0400 111 299
Email: hello@prevailep.com.au