☎️ 07 5345 5436
Privacy Policy - Beachfront Massage Therapy

Beachfront Massage Therapy

Gift cards available — any massage, any occasion. Buy Gift Cards
All our massages include a little hot stone therapy.
Menu

Privacy Policy

Privacy Policy

Beachfront Massage Therapy
ABN: 18 606 046 636
Version: 1.0  |  Last reviewed: 23 July 2026

Beachfront Massage Therapy (“I”, “me”, “my business”) is a sole trader owned and operated by Nitchamon Angkundee, committed to providing quality remedial massage therapy services. This policy explains how I collect, hold, use, and disclose personal information, in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). A copy of the Australian Privacy Principles can be accessed from the website of the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

This policy applies to all clients, prospective clients, and visitors to my website or clinic.

My main functions and activities involving personal information are:

  • providing remedial massage therapy services
  • managing client records, bookings and payments
  • operating my website
  • sending appointment reminders, follow-up care information, or occasional marketing communications where you have opted in to receive them.

If you have a concern about how I have handled your information, please contact me first using the contact details at the end of this policy.

Summary

  • I collect personal information, including health information, to provide massage therapy services to you safely and effectively.
  • I keep your information secure and only share it with others (such as your GP or another health professional) if you ask me to, or if the law requires it.
  • I store your information securely in my website’s own booking and clinical records system (hosted by Hostinger), and any paper records are kept in a securely locked location (see Overseas Disclosure below).
  • You can ask to see or correct your information at any time.

What information I collect

Depending on how you interact with me, I collect:

Personal information

  • Full name, date of birth, and contact details (phone, email, postal address)
  • Emergency contact details
  • Payment and billing information for invoicing purposes. I do not store full card details.
  • Health-fund membership and provider-claim details, so I can issue receipts for your private health insurance rebate.
  • Booking history and appointment preferences.

Sensitive information (health information)

I collect more detailed health information because it is necessary to provide safe and effective treatment. This includes:

  • relevant medical history, current injuries, conditions, medications, allergies, and pregnancy status
  • details you provide during consultations about symptoms and treatment goals
  • clinical notes I make during and after your treatment
  • referrals or reports from other health practitioners where relevant and with your consent.

I only collect health information that is relevant to providing you with safe treatment. I will not ask for more than I need.

How I collect personal and sensitive information

I collect information directly from you through:

  • online bookings through my website, or bookings made by phone
  • digital intake and consultation forms (including on a tablet at the clinic)
  • conversations during consultations and treatment
  • email or text message correspondence
  • my website.

I also collect information indirectly, for example:

  • via a referring health practitioner, if you have asked them to share relevant information with me
  • via my third-party payment provider, which confirms that a payment has been processed.

I will always try to collect information directly from you unless it is unreasonable or impractical to do so. When I collect personal information, I will explain why I am collecting it and how I plan to use it, unless it is already clear from the context.

How I hold and protect your information

Storage

I store your personal information using:

  • my website’s own booking and clinical records system — WooCommerce Appointments for bookings and a secure clinical notes system for treatment records — accessed only by me
  • my website and its database, which are hosted by Hostinger and protected by passwords and access controls
  • secure paper records, where used, kept in a locked location at my clinic that is not accessible to the public.

When your personal information is no longer needed for the purpose it was collected, I will take reasonable steps to destroy or permanently de-identify it. However, your personal information will be retained in your client file for a minimum of 7 years after your last appointment, in line with health record-keeping requirements.

Security

I take reasonable steps to protect your information from misuse, loss, unauthorised access, or disclosure, including:

  • password-protecting my digital devices and software accounts, including multi-factor authentication
  • storing paper records in a securely locked location that is not accessible to the public
  • limiting access to your information to myself only
  • using reputable software providers with their own security safeguards.

How I use your personal and health information

I use your personal and health information to:

  • assess your suitability for treatment and identify any contraindications
  • provide, plan, and tailor your treatment
  • manage bookings, reminders, and rescheduling
  • process payments and issue invoices/receipts, including receipts for private health insurance claims
  • communicate with you about appointments, follow-up care, or relevant business updates, where you have not opted out
  • comply with my legal, insurance, and professional association obligations (for example, record-keeping requirements of the Association of Massage Therapists).

I do not use or disclose your health information for marketing purposes without your express consent.

Who I share your information with

I only share your information with the following third parties, and only in the circumstances stated below:

  • other health practitioners involved in your care, but only with your consent (e.g. providing a report to your GP if you ask me to)
  • your private health fund, limited to the provider and treatment details needed for you to claim a rebate
  • my accountant or bookkeeper, limited to information necessary for invoicing and tax purposes
  • my professional indemnity insurer, if a claim arises
  • relevant authorities, if required by law (e.g. a court order, or mandatory reporting obligations).

Overseas disclosure

My website, including its booking system and clinical records, is hosted by Hostinger. Hostinger operates data centres in a number of countries, which means your information may be stored or processed on servers located outside Australia.

Card payments made through my website are handled by third-party payment providers, some of which may process your payment information on overseas servers. I do not store your full card details.

Where practicable, I will let you know if your information is likely to be sent overseas and, if you ask, which countries are involved.

Accessing and correcting your information

You can ask to access the personal information I hold about you, or ask me to correct it if it is inaccurate, out of date, or incomplete. To make a request, contact me using the details at the end of this policy. I will respond within a reasonable time (usually within 30 days).

There is no charge for requesting access or correction. If producing a copy involves significant time or cost, I may charge a small administrative fee. I will also require identification from you before releasing any requested information.

How to make a complaint

If you believe I have breached your privacy or mishandled your personal information, please contact me first using the details below. I will:

  • acknowledge your complaint within a reasonable time
  • investigate the issue and respond with an outcome, generally within 30 days
  • take reasonable steps to resolve the matter.

If you are not satisfied with my response, you can escalate your complaint to the Office of the Australian Information Commissioner (www.oaic.gov.au).

Contact details

For any questions, access/correction requests, or complaints about this policy:

Nitchamon Angkundee
Beachfront Massage Therapy
Phone: 0478 220 142
Email: beachfrontmassagetherapy@gmail.com
Address: 10/1776–1784 David Low Way, Coolum Beach QLD 4573

Changes to this policy

I will update this policy to reflect changes in my practices or legal obligations. The most current version will always be available on this page or on request. This policy was last reviewed on 23 July 2026.