Privacy Policy

The Joint & Muscle Co

​

Last updated: 5 June 2026

 

1. Introduction

The Joint & Muscle Co (“we”, “our”, “the clinic”) is committed to protecting your privacy and ensuring your personal and health information is handled in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, store, and protect your information when you visit our clinic, use our website, or interact with us online.

​

2. Information We Collect

We collect information necessary to provide safe, effective chiropractic and musculoskeletal care.

Personal information

• Full name

• Date of birth

• Address and contact details

• Emergency contact

• Medicare/DVA details (if applicable)

• Payment information (processed securely; we do not store card numbers)

​

Health information (sensitive information)

• Medical history and presenting concerns

• Treatment notes and clinical findings

• Imaging reports, referrals, and test results

• Lifestyle, exercise, and wellbeing information

• Information provided by other healthcare practitioners (with your consent)

 

Digital information

• Online booking details

• Contact form submissions

• Website analytics (IP address, browser type, cookies)

• Social media interactions

​​

3. How We Collect Information

We collect information through:

• Patient intake forms

• Consultations and treatment sessions

• Online bookings (e.g., Cliniko)

• Email, SMS, and phone communication

• Website forms and analytics

• Referrals from other practitioners (with consent)

​

4. Why We Collect Your Information

We collect your information to:

• Provide chiropractic and musculoskeletal assessment, diagnosis, and treatment

• Maintain accurate clinical records

• Communicate with you about appointments and care

• Coordinate care with other practitioners (with your consent)

• Process payments and manage accounts

• Meet legal, regulatory, and insurance obligations

• Improve our services and patient experience

• Send optional health updates or promotions (you may opt out anytime)

​​

5. Use and Disclosure of Information

We may use or disclose your information for:

​

Clinical care

• Sharing information with other treating practitioners

• Referrals, imaging requests, or reports

• Communication with your GP or specialist (with consent)

• Administration

• Appointment reminders

• Billing and payment processing

• Insurance claims

• Quality assurance and staff training

​

Administration

• Appointment reminders

• Billing and payment processing

• Insurance claims

• Quality assurance and staff training

​​

Legal requirements

• We may disclose information when required by:

  • Law

  • Court order

  • Public health or safety obligations

  • Professional indemnity insurers (where legally permitted)

​​

We do not sell or trade your personal information.

​

6. Storage and Security

We take reasonable steps to protect your information from loss, misuse, unauthorised access, modification, or disclosure.

​

This includes:

• Secure practice management software (e.g., Cliniko)

• Encrypted devices and password protection

• Staff confidentiality agreements

• Secure disposal of paper records

• Restricted access to clinical notes

​​

7. Access and Correction

You have the right to:

• Access your personal or health information

• Request corrections to inaccurate or incomplete information

• Requests must be made in writing. Proof of identity may be required.

​​

8. Website, Cookies & Online Bookings

Our website may use cookies and analytics tools to improve performance and user experience.

Online bookings may collect:

• Contact details

• Appointment preferences

• Relevant health information

​​

Links to other websites.

• Our website may contain links to other websites. We do not have any control over those websites

• We are not responsible for the protection and privacy of any personal information which you provide whilst visiting those websites.

• Those websites are not governed by this Privacy Policy.

​​

9. Marketing Communications

We may send you:

• Appointment reminders

• Clinic updates

• Educational content

• Special offers or events

​​

You can unsubscribe at any time.

​

We will never send marketing without your consent.

 

 

10. Third‑Party Providers

We may use trusted third‑party services such as:

• Cliniko (practice management)

• Stripe/Square (payments)

• Mailchimp (email newsletters)

• Website hosting providers

• Analytics tools

​​

Some providers may store data overseas but must comply with privacy and security standards. Those websites are not governed by this Privacy Policy.

​

11. Your Rights and Control Over Your Information

You have full rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) to access, manage, and control the personal and health information we hold about you.

​

You may exercise the following rights at any time:

​

1. Right to Access Your Information

You may request access to the personal or health information we hold about you.

This includes:

• clinical notes

• treatment history

• referral letters

• reports

• administrative records

We will provide access within a reasonable timeframe. Proof of identity may be required.

​

2. Right to Request Corrections

If you believe any information we hold is inaccurate, incomplete, or outdated, you may request that it be corrected.

We will update your records promptly unless there is a lawful reason not to.

​

3. Right to Withdraw Consent

You may withdraw consent for:

• marketing communications

• sharing information with other practitioners

• participation in care plans

• receiving SMS/email reminders

Withdrawing consent will not affect the care you receive.

  

4. Right to Restrict Use or Disclosure

You may request that we limit how your information is used or disclosed, including:

• limiting information shared with insurers

• restricting communication with other practitioners

• limiting what is recorded in your file

​​

We will comply unless restricted by law or clinical safety requirements.

​

5. Right to Anonymity or Pseudonymity

Where lawful and practical (e.g., general enquiries), you may choose not to identify yourself.

For clinical care, full identification is required for safety and legal reasons.

​

6. Right to Request Deletion (Where Permitted)

You may request deletion of non‑clinical information (e.g., marketing data).

Clinical records must be retained for the minimum legal period under Australian health record retention laws.

​

7. Right to Know How Your Information Is Used

You may ask us at any time:

• what information we hold

• how it is stored

• who it has been shared with

• why it was collected

• how long it will be retained

​​

We will provide this information clearly and transparently.

​

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, technology, or our clinic operations.

Any updates will be published on our website.

​

We encourage you to check our website regularly to ensure you are aware of any updates or changes to this policy. 

​

Your continued use of our services after updates are posted indicates acceptance of the revised policy.

​

Your continued use of our services after updates are posted will be taken as acceptance of the revised policy.

​

13. Complaints

If you have concerns about how your information has been handled, please contact us directly. Request an internal review. We will respond promptly and work to resolve the issue.

 

14. Contact Us

The Joint & Muscle Co 

Email: info@thejointmuscleco.com.au

Phone: 041 888 37921