Privacy Policy

Soar Solutions Physiotherapy ("we", "us", "our") is committed to protecting your privacy in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). This policy explains what personal information we collect, why we collect it, and how we handle it.

1. What information we collect

When you submit a booking request through our website, we collect:

• Your name, email address, and phone number
• Your preferred contact method
• For a mobile session, your suburb, street address, postcode, and unit or apartment if applicable
• Your preferred appointment date and time
• The physiotherapy service you are requesting
• Health information: a description of your condition, injury, or goal that you choose to provide
• How you heard about us (referral source)

We also collect basic website usage data through Vercel Analytics (cookieless, privacy-first analytics) to understand how visitors use the site.

While you complete the booking form, a draft of the information you enter (excluding the consent checkboxes) is stored in your browser's local storage. The draft is removed after a successful submission and can also be cleared through your browser settings.

2. Why we collect this information

We use your personal information to:

• Contact you to confirm and schedule your physiotherapy appointment
• Deliver physiotherapy services tailored to your condition and needs
• Send you a booking confirmation email
• Comply with legal and professional obligations as an AHPRA-registered health practitioner

We will not use your information for marketing purposes without your separate consent.

3. Who we share your information with

To operate our booking system and send confirmation emails, your information is processed by the following third-party service providers. These services may store or process data outside Australia:

• Resend - our email delivery service. Your name, email, and booking details are passed to Resend to send your confirmation email.
• Vercel - our website hosting provider. The booking request is processed by a Vercel serverless function before it is recorded and the confirmation emails are sent.

We take reasonable steps to ensure these providers handle your information securely and in accordance with applicable privacy laws. We do not sell your personal information to any third party.

4. How long we retain your information

We retain booking-request information only for as long as it is reasonably needed to arrange and administer services and to meet applicable legal and professional obligations. Clinical records created after treatment may be subject to different retention requirements. When information is no longer required, we take reasonable steps to delete or de-identify it.

5. Your rights

Under the Australian Privacy Act, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your information (subject to legal retention requirements)
• Make a complaint about how we have handled your information

To exercise any of these rights, contact us at info@bondijunction.physio. We will respond within 30 days.

6. Cookies and analytics

This website uses Vercel Analytics, a cookieless, privacy-first analytics tool that does not use cookies or store personally identifiable information. It collects aggregate data such as page views and visit duration.

We load fonts from Google Fonts (fonts.googleapis.com). Google may log the request, but we do not share personal information with Google through this service.

7. Security

All data transmitted between your browser and our website is encrypted via HTTPS. Our booking endpoint requires a server-side shared secret before a row can be added to the private Google Sheet. Access to booking records and booking-notification emails is limited to authorised account holders.

We use the access controls provided by our service providers to restrict stored booking information. Integration credentials are kept in protected server-side environment settings and script properties rather than exposed in the website's browser code. These safeguards protect access to readable booking records; personal and health information is not stored as one-way hashes because authorised account holders need to read it to respond to booking requests.

8. Complaints

If you believe we have breached your privacy, please contact us first at info@bondijunction.physio. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

9. Contact