Privacy Policy

Miracle Life Chiropractic (ABN 63 667 026 155) 6/23 Doherty Street, Brendale QLD 4500 · (07) 3198 4111 · info@miraclelifechiropractic.com.au

Effective date: 6 August 2026 · We review this policy at least annually, and whenever our systems or the law change.

As a health service provider, we are covered by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) regardless of our size. This policy explains what personal information we collect, why, and how we look after it. It applies to our patients, our website visitors, and people who attend our events.

What we collect

  • Identity and contact details — your name, date of birth, address, phone number and email, plus emergency contact and, where relevant, Medicare, private health fund or DVA details.
  • Health information — your health history, examination findings, imaging and reports, clinical notes and care plans. These clinical records are held in our practice management systems.
  • Appointment information — bookings, attendance, reminders and scheduling history.
  • Website and event forms — when you submit a form on our website or register for one of our events, we collect what the form asks for: typically your name, mobile number, email and your reason for attending.
  • Correspondence — SMS and email messages between you and the practice.
  • Website analytics and advertising data — we use, or plan to use, Google Analytics and the Meta (Facebook) Pixel, which collect information such as your device, browser, pages visited and interactions via cookies and similar technologies (see “Cookies and online advertising” below).
  • Payment information — details of payments you make to us. Card payments are processed by our payment providers; we don’t store your full card number.

Where practical, we collect your information directly from you. Sometimes we receive it from someone else with your consent — for example, a referral from your GP or another health practitioner, or a report from a radiology provider.

Why we collect it

Our primary purpose is providing you with chiropractic care — assessing, advising and treating you safely.

We also use your information for directly related secondary purposes you’d reasonably expect: managing appointments (including reminders), sending service messages about your care or our practice, billing and payments, health fund and Medicare claims, and running the practice (quality improvement, staff training, record keeping and meeting our legal obligations).

Marketing is different. We will only send you marketing — newsletters, offers, event invitations — with your consent. Every marketing message includes a simple way to opt out (such as an unsubscribe link or replying STOP), and we honour opt-outs promptly. Opting out of marketing never affects your care.

Who we share it with

We do not sell your personal information. Ever.

We may disclose your information to:

  • Other health providers involved in your care — such as your GP, a specialist or a radiology provider — with your consent or at your request (for example, a referral).
  • Service providers we use to run the practice — practice management and booking software, communications platforms, IT support, payment processors and accounting/professional advisers. They may only use your information to provide their service to us.
  • Anyone else where the law requires or permits it — for example, a court order, or to lessen a serious threat to someone’s life, health or safety.

Overseas disclosure (APP 8)

Some of the service providers we use store data outside Australia:

  • GoHighLevel — our marketing and communications platform (used for things like web forms, event registrations, SMS/email messages and contact management) — is hosted in the United States.
  • Some cloud infrastructure providers behind our website and business tools may also store data overseas, including in the United States.

This means your contact details and messages handled through those platforms may be stored on overseas servers. Your health and clinical records are held in Australian systems (Spinalogic and Zurili) and are not stored on GoHighLevel. Overseas providers may not be bound by the Australian Privacy Principles; we choose reputable providers with strong security practices and limit what they hold to what’s needed.

How we keep it secure

We take reasonable steps to protect your information: password-protected, access-controlled practice systems; staff access limited to what their role needs; encrypted connections to our website and cloud services; and confidentiality obligations on our team and providers. No system is completely immune to risk, but if a data breach ever occurred that was likely to cause you serious harm, we would notify you and the OAIC as the law requires.

How long we keep it

We keep health records for at least 7 years from the last entry for adults, and for patients who were under 18, until they turn (or would have turned) 25 — the standard adopted for private practices in Queensland, consistent with health records laws elsewhere in Australia. When information is no longer needed and no longer required to be kept, we destroy or de-identify it securely.

Anonymity

Where it’s lawful and practical, you can deal with us anonymously or under a pseudonym — for example, a general enquiry about our services or fees. For clinical care this isn’t practical: we need to know who you are to treat you safely and keep accurate records.

Cookies and online advertising

Our website uses, or plans to use, cookies and similar technologies:

  • Google Analytics — helps us understand how the site is used so we can improve it.
  • Meta Pixel — helps us measure and improve our advertising on Facebook and Instagram.

These tools may collect device and browsing information and, in the Pixel’s case, share it with Meta for ad measurement and personalisation. You can opt out by: blocking or clearing cookies in your browser; using Google’s Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout); and adjusting your ad preferences at facebook.com/adpreferences or via youradchoices.com.au. We don’t use these tools on your clinical records.

Access and correction

You have the right to ask for access to the personal information we hold about you, and to ask us to correct anything that’s inaccurate, out of date, incomplete or misleading. Just contact us (details above) — in person, by phone or by email. We’ll respond within 30 days. We don’t charge to make a request or to correct information; if copying or compiling records involves real cost, we may charge a reasonable fee and will tell you first. In limited cases the law lets us refuse access (for example, where it would seriously threaten someone’s safety); if so, we’ll explain why in writing.

Complaints

If you’re concerned about how we’ve handled your information, please contact us first — we take it seriously and will do our best to put it right:

We’ll acknowledge your complaint promptly and aim to respond within 30 days. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC):

  • Phone: 1300 363 992
  • Post: GPO Box 5288, Sydney NSW 2001
  • Online: www.oaic.gov.au (privacy complaint form)

Changes to this policy

We update this policy from time to time. The current version will always be on our website, with its effective date shown above.

Internal review note (remove before publishing): OAIC guidance flags new privacy-policy content requirements about automated decision-making commencing 10 December 2026 — check whether any practice systems make automated decisions and update this policy at the next review.

Scroll to Top