Privacy Policy
Last updated: [founder to insert date]
Who we are
One Iron Physiotherapy is operated by Blake Smoothy, an AHPRA-registered physiotherapist trading under ABN 94 770 896 757. We provide online physiotherapy services across Australia via live video consultation.
What information we collect
We collect personal and health information you provide during booking, consent, and intake: name, contact details, health history, movement and injury information, and swing video footage. Health information is sensitive information under the Australian Privacy Act 1988.
Why we collect it
We collect this information solely to provide physiotherapy services — to assess your needs, deliver your program, and communicate with you about your care. We do not use health data for marketing or analytics.
How we store and protect it
All data is stored in Australia (Supabase, ap-southeast-2 region). Data is encrypted at rest and in transit. Access to health records is restricted to your treating physiotherapist and necessary support systems via role-level security controls. Swing videos and intake data are stored in a private, access-controlled file store and accessible only to you and your physiotherapist.
Sharing your information
We do not sell or share your information with third parties for commercial purposes. We use the following service providers to deliver our service: Supabase (database and storage, AU region), Stripe (payment processing), and a transactional email provider. Each is bound by appropriate data processing terms. We may disclose information if required by law.
Retention
Health records are retained for a minimum of 7 years in accordance with Australian physiotherapy registration standards. You may request access to or correction of your records at any time.
Your rights
Under the Australian Privacy Act 1988, you have the right to access and correct your personal information. Contact us at the address below to make a request. We will respond within 30 days.
Analytics
We may use PostHog analytics to understand how visitors use this site. No health information, intake answers, or identifying health data is sent to any analytics system. Only anonymous, non-sensitive funnel events (e.g. page views, booking step completions) are tracked.
Contact
Privacy enquiries: hello@oneironphysio.com.au or [postal address — founder to insert].