Privacy Policy

Wellness Wingwoman Hayley
Last updated: 16 September 2026

Wellness Wingwoman Hayley respects your privacy and is committed to protecting the personal and health information you share with us.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you enquire about or use our services, visit our website, communicate with us, complete a form, make a booking, or interact with us through social media or advertising.

We handle personal and health information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs), and where applicable the Health Records and Information Privacy Act 2002 (NSW) and Health Privacy Principles (HPPs).

1. Information we may collect

The information we collect depends on how you interact with us and the services you receive.

This may include:

  • your name, date of birth and contact details;

  • email address and telephone number;

  • appointment and booking information;

  • payment and transaction information;

  • emergency contact information where relevant;

  • information you provide through website, enquiry, advertising or social media forms;

  • correspondence, messages and communications with us;

  • information about how you found or were referred to us; and

  • information reasonably required to provide or administer our services.

Because we provide wellness, massage, recovery, mobility and related services, we may also collect health information and other sensitive information where it is reasonably necessary to provide our services.

This may include information about your health history, injuries, pain, symptoms, mobility, movement restrictions, disability, pregnancy, medications, previous treatment, physical activity, training, recovery, contraindications and other information relevant to your treatment or service.

Health information is sensitive information and is handled with additional care. Australian privacy guidance recognises health information as sensitive information and requires health service providers to handle it accordingly.

2. How we collect information

Where practical, we collect personal information directly from you.

We may collect information when you:

  • contact us by telephone, SMS, email or social media;

  • complete an enquiry, lead, intake, consent or assessment form;

  • make or change an appointment;

  • attend a consultation, assessment or treatment;

  • provide information during a session;

  • interact with our website;

  • respond to advertising on platforms such as Facebook or Instagram;

  • communicate with us through our customer relationship management or booking systems; or

  • voluntarily provide photographs, videos, testimonials or other content.

In some circumstances, information may be provided by another person or organisation, such as a referring practitioner, support person, parent or guardian, disability support provider or other person involved in your care. Where appropriate, we will take reasonable steps to ensure you are aware of this collection.

3. Why we collect and use your information

We may collect, hold and use your information to:

  • respond to enquiries;

  • understand your needs and determine whether our services may be appropriate;

  • provide massage, recovery, mobility, movement assessment and related services;

  • plan and document treatment or services;

  • manage bookings and appointments;

  • communicate before or after an appointment;

  • provide relevant follow-up information;

  • process payments and maintain business records;

  • manage rebates, invoices or administrative requirements where applicable;

  • improve our services and client experience;

  • manage our website, CRM, booking and communication systems;

  • comply with professional, insurance, legal and regulatory obligations;

  • respond to complaints or enquiries; and

  • protect the health, safety and legal interests of clients and the business.

We will generally use health information for the purpose for which it was collected or another purpose permitted by law.

4. Marketing communications

We may send marketing communications about services, availability, education, events, promotions or other relevant updates where you have consented or where otherwise permitted by law.

Health information will not be used for direct marketing unless the required consent or other lawful basis applies. OAIC guidance specifically provides that health information cannot be used for direct marketing simply because a health provider possesses it.

You can unsubscribe from marketing communications at any time using an unsubscribe function where provided or by contacting us.

Opting out of marketing will not prevent us from sending communications reasonably necessary to administer your appointments, enquiries or services.

5. Social media, advertising and online forms

We may use platforms such as Facebook and Instagram to communicate with clients and advertise our services.

If you submit information through a Meta/Facebook/Instagram lead form or advertisement, the information you provide may be transmitted to us through Meta and our customer relationship management systems.

Those platforms may separately collect and process information according to their own privacy policies and terms.

Submitting an advertising enquiry does not require you to purchase or book a service.

6. Photographs, video, testimonials and client stories

We will seek appropriate permission before using identifiable client photographs, videos, testimonials, interviews or treatment-related content for promotional or educational purposes.

Consent to marketing or content use is separate from consent to receive treatment or services.

Where consent has been provided, you may contact us if you wish to discuss withdrawing that consent for future use. Withdrawal cannot necessarily reverse material that has already been lawfully published or distributed.

7. Disclosure of information

We do not sell personal or health information.

We may disclose information where reasonably necessary to organisations or service providers that help us operate the business, such as:

  • booking and appointment systems;

  • customer relationship management systems;

  • website and hosting providers;

  • email and communication providers;

  • payment processors;

  • accounting or administrative service providers;

  • information technology and data-storage providers;

  • insurers and professional advisers; and

  • government, regulatory or law-enforcement bodies where required or authorised by law.

Where another health professional or service provider is involved in your care, we will only disclose information where authorised by you or otherwise permitted or required by law.

8. Third-party and overseas service providers

Some technology providers used to operate our website, CRM, booking, email, advertising, communications or data-storage systems may store or process information using infrastructure located outside Australia.

Where required by applicable privacy law, we take reasonable steps in relation to the handling of personal information by third-party providers.

Because technology providers and their hosting arrangements may change, specific overseas locations may also change.

Before publishing this section, we recommend confirming the principal data-hosting locations of the systems currently used by Wellness Wingwoman Hayley.

9. Storage and security

Personal and health information may be stored electronically and, where applicable, in physical records.

We take reasonable steps to protect information from misuse, interference, loss, unauthorised access, modification or disclosure.

These measures may include appropriate account security, password protection, access controls, secure third-party systems and limiting access to information to people who require it for legitimate business purposes.

No method of electronic transmission or storage is completely risk-free, and absolute security cannot be guaranteed.

10. Retention of health records

We retain health information and other business records for periods required by applicable laws and professional or business obligations.

NSW law contains specific retention requirements for health information held by private health service providers, including different requirements depending on whether the information relates to an adult or a person who was under 18 when the information was collected.

When information is no longer required to be retained, we take reasonable steps to securely destroy or de-identify it where appropriate and permitted by law.

11. Accessing or correcting your information

You may request access to personal or health information we hold about you or ask us to correct information you believe is inaccurate, incomplete or out of date.

We may need to verify your identity before providing access or making a correction.

There may be limited circumstances in which access can be refused or restricted as permitted by law. If this occurs, we will handle the request in accordance with applicable privacy requirements.

NSW private health service providers are subject to specific rights concerning access to and correction of health information.

To request access or correction, contact us using the details below.

12. Cookies, analytics and website technology

Our website and third-party services may use cookies, pixels and similar technologies to operate the website, understand website usage, measure advertising performance and improve our services.

These technologies may collect information such as browser or device information, pages visited, referral sources and interactions with our website or advertising.

Where applicable, information collected by third-party platforms is also governed by their own privacy policies.

13. Links to other websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices or content of external websites and encourage you to review their privacy policies before providing personal information.

14. Privacy enquiries and complaints

If you have a question, concern or complaint about how we have handled your personal or health information, please contact us first so we can investigate and respond.

Privacy Contact
Hayley Kingsley
Chatswood West, NSW, Austrsuit@fiercelyrelentless.space

Please provide enough information for us to understand and investigate your concern.

If you are not satisfied with our response, you may have the right to contact an appropriate privacy regulator, including the Office of the Australian Information Commissioner (OAIC) or the Information and Privacy Commission NSW (IPC), depending on the nature of the matter.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, systems, business practices or legal obligations.

The current version will be published on our website with the date it was last updated.