Privacy Policy

Michael & David Black Chiropractic Group
Hobea Pty Ltd as trustee for the Black Chiropractic Trust
ABN 35 432 213 941
www.blackchiropractic.com.au | Effective 30 October 2026

1. Introduction

Michael & David Black Chiropractic Group (‘we’, ‘us’ or ‘our’) is operated by Hobea Pty Ltd as trustee for the Black Chiropractic Trust. We provide chiropractic services through Dr Michael Black at Aura Chiropractic Toorak and Manningham Road Chiropractic Centre in Doncaster, Victoria. We are committed to protecting personal information, particularly sensitive health information. This policy explains how we collect, hold, use and disclose information in accordance with the Privacy Act 1988 (Cth), Australian Privacy Principles, Health Records Act 2001 (Vic) and other applicable laws. It applies to patients, prospective patients, website visitors and people contacting our practice.

2. Personal Information We Collect

We may collect names, dates of birth, contact and emergency-contact details; medical history, symptoms, examination findings, diagnoses, clinical notes, referrals, imaging reports and healthcare correspondence; Medicare, private health insurance and billing information; appointment and communication records; and information submitted through website enquiries or online bookings. Website technologies may collect browser, device, IP address and usage information. We collect information reasonably necessary for our services and lawful operations.

3. How We Collect Information

We generally collect information directly from you during registration, consultations, bookings, telephone calls, emails and website enquiries. Where appropriate and legally permitted, we may also receive information from GPs, specialists, other healthcare providers, insurers, carers or authorised representatives. We generally seek consent to collect sensitive health information unless an exception applies.

4. How We Use Your Information

We use information to assess and provide chiropractic care; maintain clinical records; monitor progress; coordinate with other healthcare professionals; arrange appointments and reminders; process payments, Medicare and insurance claims; respond to enquiries; comply with professional and legal obligations; and administer and improve our practice. We do not use sensitive health information for unrelated marketing without consent or another lawful basis.

5. Disclosure of Information

Where authorised or permitted by law, relevant information may be shared with healthcare practitioners involved in your care; Medicare, insurers and claims administrators; diagnostic providers; practice management, technology and administrative providers; and professional advisers, regulators or authorities. We limit disclosures to what is necessary and do not sell patient personal information.

6. Clinical Records and Security

We use electronic practice management systems, including Cliniko, to manage clinical records and appointments. We take reasonable steps to protect information from loss, misuse and unauthorised access or disclosure through access controls, confidentiality procedures and appropriate service providers. Victorian private-sector health records generally must be kept at least seven years after the last service for adults, or until age 25 for records relating to children, subject to applicable requirements. When lawful and appropriate, records are securely destroyed or de-identified. No electronic system is completely risk-free.

7. Website Analytics and Cookies

Our website may use cookies and Google Analytics to understand general website use and improve content and functionality. Such technologies may collect pages visited, time spent, browser and device information, approximate location, IP addresses and technical identifiers. Google may process information overseas under its privacy practices. We do not currently run paid Google Ads or Facebook/Meta advertising campaigns. Visitors can control cookies in browser settings and may use Google’s analytics opt-out tools. We do not intentionally transmit identifiable clinical records or sensitive patient health information to analytics or advertising services. Actual analytics configuration remains subject to verification.

8. Online Bookings and Third-Party Services

Online appointment bookings and linked external services may process information necessary to deliver those services. Third-party providers have their own privacy policies, which we encourage visitors to review.

9. Overseas Processing and Disclosure

Some cloud and technology providers may store or process personal information outside Australia. Where information is disclosed overseas, we take reasonable steps to comply with applicable Australian privacy obligations, including APP 8 where relevant. Specific overseas recipients and countries should be confirmed against our current service-provider arrangements and disclosed where required and practicable.

10. Access to Records

You may request access to personal and health information held about you, subject to legal exceptions. We may verify your identity before providing records. Reasonable fees may apply where permitted by law and will be explained in advance. Requests will be handled within applicable statutory timeframes.

11. Correction of Information

You may request correction of information that is inaccurate, incomplete or out of date. We will consider requests under applicable law. Where a clinical entry should not be altered, a supplementary statement or notation may be appropriate.

12. Communications and Marketing

We may contact you by telephone, SMS or email about appointments, follow-up care, billing and practice administration. Educational information or practice updates may be provided where legally permitted. You may opt out of marketing communications at any time. We comply with applicable Spam Act 2003 (Cth) requirements.

13. Privacy Complaints

Please contact us if you have concerns about the handling of your information. We will investigate and aim to respond within 30 days. You may also contact the Office of the Australian Information Commissioner (www.oaic.gov.au; 1300 363 992) or the Health Complaints Commissioner Victoria (www.hcc.vic.gov.au), depending on the nature of the complaint.

14. Data Breaches

We investigate suspected privacy incidents, take steps to contain and address them and meet applicable notification requirements, including the Notifiable Data Breaches scheme where relevant.

15. Changes to This Policy

We may update this policy when laws, technologies or practice arrangements change. The current version and its date will be published on our website.

16. Contact Us

Michael & David Black Chiropractic Group
Hobea Pty Ltd ATF Black Chiropractic Trust | ABN 35 432 213 941
Dr Michael Black, Chiropractor
Aura Chiropractic Toorak — Shop 32, Level 2, Trak Centre, 443–449 Toorak Road, Toorak VIC 3142
Manningham Road Chiropractic Centre — 171 High Street, Doncaster VIC 3108
Email: [email protected]
Website: www.blackchiropractic.com.au