top of page

NURTURE YOUR ESSENCE

Privacy Policy

(Last updated 3 June 2026)

The Privacy Policy applies to all personal information collected by Nurture Your Essence (we, us or our).

Scope

We require that our staff comply with this policy in relation to any personal information they handle. We also use our best endeavours to ensure that contractors comply with their obligations with respect to any personal information to which they may have access or which may be disclosed to them. We may collect personal information from any individual with whom we may have contact, including prospective clients, job applicants and representatives from current and prospective suppliers and service-providers.

Types of information

The Privacy Act 1998 (Cth) (Privacy Act) defines the types of information, including Personal Information and Sensitive Information.

Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable:

  • Whether the information or opinion is true or not; and

  • Whether the information or opinion is recorded in a material form or not.

If the information does not disclose your identity or enable your identity to be ascertained, it will in most cases not classified as ‘Personal Information’ and will not be subject to this privacy policy.

Sensitive Information is defined in the Privacy Act as including information or opinion about such things as an individual’s racial or ethnic origin, political opinions, membership of a pollical association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

Information we collect on our website (www.nurtureyouressence.com.au)?

  • The kind of Personal Information that we collect from you will depend on how you use the website. The Personal Information which we collect and hold about you may include your contact details if you submit a request for us to contact you or make a booking via our website.

  • The information we collect from visits to our website is otherwise generally anonymous. We generally do not use such information to identify specific individuals. However, due to the nature of the Internet, such information may contain details which may identify a particular individual.

Information we collect from our clients

  • We collect a variety of information regarding our clients in the provision of their services which may include the following types of client information:

  1. name, pronouns, date of birth, contact details, details of next of kin or emergency contact, payment details and other information relevant to the client’s health needs, such as communication preferences, preferred language, gender identity, interests and interaction history;

  2.  where relevant, NDIS details, including participant number, plan details, plan manager, support           coordinator;​​​​​

  3. where relevant, information regarding your healthcare received from other health practitioners.

  • We may also collect sensitive information regarding clients, such as medical/ health histories, racial or ethnic origin and sexual orientation.

How we collect your Personal Information

  • We may collect Personal Information from you whenever you input information into the Website, related app or provide it to us in any other way.

  • To the extent reasonably practicable and reasonable for us to do so, we collect personal information about you from you personally; or if you are a child, your guardian. However, sometimes we may be given information from a third party. In cases like this, we will take steps to make you aware of the information that was provided by a third party.

  • We will only collect personal information when we specifically ask for that information, except in circumstances where personal information is volunteered to us or otherwise supplied to us without us asking for such information. Where we collect personal information on an unsolicited basis, we will comply with our statutory obligations in the Privacy Act.

  • We may collect personal information about you from a variety of sources using a variety of means, including:

  1. a form (either physical or online) that is completed and submitted to us;

  2.  a telephone, email or in-person inquiry or discussion about us, the products and/or services that we provide;​​​​​

  3. if applicable, from your guardian or responsible person;

  4. from other healthcare providers;

  5. a referral form when you are referred to us by another health practitioner;

  6. mail correspondence, emails and other electronic means (including by accessing our website and the use of the “contact us” form on our website);

  7. through publicly available sources of information;

  8. in the course of conducting market research, including customer satisfaction surveys;

  9. in the course of the provision of services; and

  10. from current and prospective suppliers of goods and/or services to us.

  • We may also collect data from our website using various technologies, including ‘cookies’. A ‘cookie’ is a text file our website transmits to an individual’s browser which is stored on the individual’s computer as an anonymous tag identifying the individual’s computer (but not the individual) to us. The browser may be configured to disable cookies, but some parts of our website may not function properly (or at all) if cookies are disabled.

Purpose of collection

  • We collect Personal Information in accordance with our statutory obligations, we only use personal information for:

  1. the primary purpose for which the information was collected;

  2. a secondary purpose that is related to the primary purpose for which you would reasonably expect us to use the collected information; or​​​​​

  3. as otherwise permitted or authorised by law.

  • We will take reasonable steps to make you aware of the purpose for which the information collected may be used, by notifying you about all relevant matters before or at the time of collection, including by reference to this privacy policy.

  • We may use the personal information we collect about you for one or more of the following purposes:

  1. to provide you with services and products;

  2. processing transactions and administering customer accounts (including by processing of invoices, bills, statements of account and related financial matters necessary to enable us to provide products and/or services under relevant contractual arrangements);​​​​​

  3. addressing queries, claims and resolving complaints;

  4. to send information updates, marketing materials and newsletters

  5. to monitor and improve our services, our website, our other means of communicating with our current and prospective clients;

  6. carrying on our ordinary business;

  7. to fulfil obligations to government authorities;

  8. to comply with any law, rule, regulation, lawful and binding determination, decision or direction of a regulator; and

  9. to directly market our services.

  • We do not use sensitive Personal Information in direct marketing activity. Our direct marketing material will include a simple means by which you can request not to receive further communications of this nature, such as unsubscribe button link

To whom may we disclose personal information

  • We may disclose personal information collected from you to third parties but only with your consent (unless otherwise specified by law) on an as-needs basis in order to:

  1. fulfil one or more of the purposes for which the information was collected;

  2. any secondary purpose related to the primary purpose of collection; or​​​​​

  3. otherwise as required or authorised by law.

  • we may also disclose personal information about you:

  1. when required by law or court order, or other governmental order or process to disclose;

  2. where we believe in good faith that the law compels us to disclose information;​​​​​

  3. if we consider it reasonably necessary to do so in order to identify, contact or bring legal action against any third party whom we suspect or know is causing harm to, or interference with the services we provide, our information technology systems and equipment, or our property;

  4. in order to lessen or prevent a serious threat to your life, health or safety or public health or safety, where it is impractical to obtain your consent;

  5. in order for us to take appropriate action in relation to suspected unlawful activity or serious misconduct;

  6. to locate a person reported as missing;

  7. to assert a legal or equitable claim;

  8. to conduct an alternative dispute resolution process; or

  9. to third parties in the event our respective businesses and/or assets are sold or offered for sale.

  • When we engage third parties to provide products and/or services to us, such as IT service providers, such third parties may have access to personal information we hold about individuals. We do not authorise those third parties to use any personal information disclosed to or accessed by the third party for any purpose other than to facilitate the third party’s completion of its obligations owed to us.

Dealing with us anonymously and pseudonymously

In accordance with the current law, you do not need to provide us with your personal information and you may interact with us both on an anonymous and pseudonymous basis. However, if you wish to receive services, we will need to collect identifying information in order to comply with our professional and regulatory obligations. Further, we reserve the right to verify your identity as part of our response to a request to access and/or correct personal information we hold about you, or as part of our complaints-handling process. If we are unable to verify your identity, or you continue to engage with us in an anonymous or pseudonymous basis, we may be unable to satisfy your request or complete our complaints-handling process.

Security, Action and Correction

  • We store your Personal Information in a way that reasonably protects it from unauthorised access, misuse modification or disclosure. When we no longer require your Personal Information for the purpose for which we obtained in, we will take reasonable steps to destroy and anonymise or de-identify it. Most of the Personal Information that is stored in our client files and records will be kept for a maximum of 7 years to fulfil our record keeping obligations.

  • We implement industry-standard security measures including encryption, access controls and secure data centres to protect your Personal Information. When deletion is required, we use secure erasure methods including digital shredding and physical destruction of storage media. For digital records, we employ 14 day retention for active data and 7 years for archived data, after which automated purge protocols permanently remove the information using government-approve deletion standards.

  • The Australian Privacy Principles:

  1. Permit you to obtain access to the Personal Information we hold about you in certain circumstances (Australian Privacy Principle 12); and

  2. Allow you to correct inaccurate Personal Information subject to certain exceptions (Australian Privacy Principle 13).​​​​​

  • Where you would like to obtain such access, please contact us in writing on the contact details set out in the bottom of this privacy policy.

Complaint procedure

If you have a complaint concerning the manner in which we maintain the privacy of your Personal Information, please contact us on the contact details set out at the bottom of this policy. All complaints will be considered by Lisa Mendicino and Debbie Langer and we may seek further information from you to clarify your concerns. If we agree that your complaint is well founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner.

Document and Response Timeline

We will acknowledge receipt of your complaint within 3 business days and provide you with a reference number. Our privacy team will investigate your complaint and maintain detailed records of all communications and findings. We aim to resolve all privacy complaints within 10 business days. If additional time is required, we will notify you in writing. All complaint documentation will be retained for 12 months following resolution. If the matter requires escalation, our Privacy Officer will personally review your case within 7 business days of the escalation request.

Overseas transfer

Your personal information will not be disclosed to recipients outside of Australia unless you expressly request us to do so. If you request us to transfer your Personal Information to an overseas recipient, the overseas recipient will not be required to comply with the Australian Privacy Principles and we will not be liable for any mishandling of your information in such circumstances.

GDPR

In some circumstances, the European Union General Data Protection Regulation (GDPR) provides additional protection to individuals located in Europe. The fact that you may be located in Europe does not, however, on its own entitle you to protection under the GDPR. Our website does not specifically target customers located in the European Union, and accordingly the GDPR does not apply.

How to contact us about privacy

If you have any queries, or if you seek access to your Personal Information, or if you have a complaint about our privacy practices, you can contact us through debbie@nurtureyouressence.com.au.

bottom of page