Privacy
Privacy policy
What we collect, why we hold it, who else touches it, and how to get at your own record.
Your information
Plain English,
not boilerplate
This policy covers morningtonpeninsulamyotherapy.com.au and the clinic at 12/1140 Nepean Highway, Mornington. We are a private health service provider, which makes us an APP entity under the Privacy Act 1988 (Cth) whatever our size, and health information is sensitive information under that Act.
What we collect, and when
When you book online. Your name, email address, phone number and whatever you write in the note field. That goes straight into Cliniko, our practice management system, and becomes part of your clinical record. Nothing else on this site asks you for personal details.
When you are treated. Your health history, examination findings and treatment notes. This is health information and is held to the same standard as any other clinical record.
When you simply browse. Analytics and advertising cookies record which pages you saw, how you arrived and whether you went on to book. That data is pseudonymous — it is not tied to your name — but it is still information about you, and the pages you read here can indicate a health concern. That is exactly why it is spelled out rather than buried.
Who else touches it
Only the people and services that have to:
- Cliniko — practice management and clinical records, hosted in Australia.
- HICAPS and your health fund — when you claim on the spot, the item code and your membership details go to your insurer. Nothing about your history does.
- Google Analytics and Google Ads — page views and booking completions, so we know which pages work and what advertising is worth running.
- Meta (Facebook and Instagram) — a pixel that records the same page views and bookings for advertising measurement.
- Cloudflare — serves this website and logs the requests needed to keep it up and block abuse.
Google, Meta and Cloudflare process data overseas. We never sell your information, and we never send your name, contact details or anything clinical to an advertising platform. If you would rather no advertising or analytics cookies were set at all, your browser's tracking protection or an ad blocker will stop them before this page loads, and nothing on the site stops working.
Why we hold it
To treat you safely, to bill and claim correctly, to contact you about your appointment, and to meet the record-keeping we are legally required to do. Advertising data exists so we do not waste money advertising to the wrong people.
How long we keep it
Clinical records are kept for at least seven years from your last appointment, and for a patient treated as a child, until they turn 25 — that is the legal minimum for health records in Victoria, not a preference. Analytics and advertising data expires on the platforms' own schedules, typically between two and twenty-six months.
Seeing or correcting your record
You can ask for a copy of what we hold about you, ask us to correct anything wrong, and complain if you think we have mishandled it. Call 03 5947 4896 or write to us at the clinic address. We will respond within 30 days. If we refuse access we will tell you why, in writing.
If you are not satisfied with our response you can take it to the Office of the Australian Information Commissioner (1300 363 992), or, for health records specifically, to the Victorian Health Complaints Commissioner (1300 582 113).
Security, honestly stated
Clinical records sit in Cliniko behind individual staff logins. This website holds no database of its own — booking details pass through to Cliniko and are not stored here. Everything is served over HTTPS. No system is perfect; if something ever went wrong in a way that put you at serious risk, we are required to notify you and the Information Commissioner, and we would.
Changes
If this policy changes materially we will update this page and the date below.
Last updated: 5 September 2026.
Questions about your record?
Call the clinic and ask. You are entitled to see what we hold about you.