Privacy Policy

Lawrey Calabro (trading as Lawrey Calabro Naturopathy)

ABN 32 605 102 379  |  Last updated 1 November 2026

Introduction

Lawrey Calabro and Lawrey Calabro Naturopathy (ABN 32 605 102 379) (we, our and us) is committed to protecting your personal information. This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit www.lawreycalabronaturopath.com (the Website), contact us, purchase products or use our naturopathic and Telehealth services (the Services).

We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth), the Australian Privacy Principles and, where applicable, the Health Records Act 2001 (Vic). Please contact us using the details at the end of this policy if you have questions.

This policy explains our practices. It does not replace any consent we must obtain to collect or use sensitive information, and using our Website does not waive your privacy rights.

1 Types of personal information we collect and hold

Depending on your dealings with us, we may collect the following information where reasonably necessary for our activities:

• Personal and contact details, including your name, date of birth, address, email address, phone number and emergency contact details.

• Health and lifestyle information, including your symptoms, medical history, family history, allergies, medications, supplements, current treatments, dietary and lifestyle information, relevant images and test results.

• Appointment, consultation, referral and treatment records, correspondence, feedback and complaints.

• Billing, purchase, delivery and payment information, and account or portal details where relevant.

• Website usage information, such as your IP address, browser, device, pages visited and communication preferences.

• Relevant qualifications, work experience or business information if you apply to work with us or supply goods or services.

We collect only information reasonably necessary for the relevant purpose. Health information is sensitive information and receives additional protection under privacy law.

Where lawful and practicable, you may deal with us anonymously or use a pseudonym. We generally need to identify you to provide safe, appropriate individual care and maintain accurate health records.

2 How we collect personal information

We generally collect information directly from you through enquiries, booking and intake forms, consultations, Telehealth appointments, email, telephone, Website forms, purchases and other correspondence.

Where appropriate and permitted by law, we may also collect information from your authorised representative, parent or guardian, referring practitioner, other involved healthcare providers, pathology or diagnostic services, or service providers assisting us.

When collecting information from someone else, we take reasonable steps to ensure you are aware of the collection where required. We obtain consent for collecting health information unless an applicable legal exception permits collection without consent.

If you do not provide information we reasonably need, we may be unable to provide some Services, respond fully to your enquiry or carry out your instructions.

Records may be held electronically or in hard copy. If we receive unsolicited information, we assess whether we could lawfully have collected it and, where required and lawful and reasonable, destroy or de-identify it.

3 Why we collect and use personal information

We collect, hold, use and disclose personal information to provide and administer our Services. This may include assessing your needs, providing naturopathic care, arranging relevant testing and referrals, maintaining clinical records, communicating about appointments and care, processing orders and payments, and responding to enquiries or complaints.

We may also use relevant information to manage and improve our business and Website, maintain security, prevent fraud, meet legal and professional obligations, and consider employment or supplier arrangements.

We use or disclose health information for the purpose for which it was collected; for a directly related secondary purpose you would reasonably expect; with your consent; or as otherwise required or permitted by law. We explain additional purposes at collection where required.

4 Heidi AI scribe and consultation documentation

We use Heidi, an artificial intelligence (AI) scribe, to support the consultation process and help prepare clinical documentation. This allows your practitioner to focus more fully on your consultation while assisting with the preparation of consultation notes.

Before using Heidi, we will explain how it works and ask for your consent, including consent to process relevant personal and health information through Heidi for transcription and documentation. We will only use Heidi with your consent. You may decline or ask us to stop using it at any time during the consultation, and we will take notes manually instead without affecting your access to care.

With your consent, Heidi processes consultation conversations and relevant information to generate draft clinical notes. Your practitioner reviews and corrects those notes before they become part of your clinical record. Heidi supports documentation; your practitioner remains responsible for clinical decisions and the accuracy of the final record.

Declining or withdrawing consent prevents further use of Heidi for your consultation. It does not automatically delete clinical records already created, which remain subject to applicable retention requirements. Further information about how Heidi handles information is available at www.heidihealth.com in its Privacy Policy. You can also contact us with questions before deciding whether to consent.

5 Cookies and website analytics

Our Website is hosted through Alveya. Information you submit through Website forms, and technical information associated with your visit, may be processed through Alveya and its service providers to operate the Website and manage enquiries. The information involved depends on the Website features you use.

Our Website may use cookies and similar technologies to support functionality, remember preferences and understand how visitors use it. These technologies may collect device identifiers, IP addresses and browsing information.

You can manage or disable cookies through your browser settings, although some Website features may not function properly. Where analytics or advertising tools are enabled, their providers may also process information under their own privacy policies. We will provide further notices or obtain consent where required.

We do not treat acceptance of this policy as consent to use health information for targeted advertising.

6 Who we share personal information with

Where necessary and permitted by law, we may disclose relevant information to:

• Healthcare practitioners, pathology and diagnostic providers, and other providers involved in your care.

• Service providers supporting bookings, practice management, Telehealth, email, IT, cloud storage, payments, product fulfilment and business administration.

• Authorised employees and contractors, professional advisers and insurers, where they need the information for their role.

• Your authorised representative, or another person with your consent or appropriate legal authority.

• Regulators, courts or other parties where required or permitted by law, including permitted disclosures to address a serious threat to life, health or safety.

• A prospective purchaser or successor to the practice, only where permitted by law and subject to appropriate confidentiality and health-record transfer requirements.

We limit disclosures to information relevant to the purpose and take reasonable steps to protect information handled by service providers. We do not disclose information to relatives or emergency contacts merely because they are related to you; consent or another lawful basis is needed.

7 Preventing unauthorised disclosure

We take reasonable steps to prevent unauthorised access to or disclosure of personal information, including harmful online publication. If a privacy incident occurs, we assess and respond to it and notify affected individuals and regulators where required by law.

8 Communication and marketing

We may send appointment reminders, care-related communications and administrative messages as part of providing our Services.

Where we have the necessary consent or another lawful basis, we may send newsletters, information about our Services, workshops or other marketing communications. We obtain consent before using or disclosing health information for direct marketing.

You may unsubscribe from marketing using the unsubscribe facility in a message or by contacting us. Opting out of marketing does not prevent necessary communications about your appointments, care or account. We do not provide your personal information to other organisations for their own direct marketing.

9 How we store and protect personal information

We use SimpleClinic as our clinic management software to support the administration of our practice and management of client records. Relevant personal and health information is held and processed through SimpleClinic for these purposes. Reviewed consultation notes, including notes prepared with Heidi where you have consented, may form part of your clinical record held in SimpleClinic.

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Appropriate measures include restricting access to authorised people, securing records and devices, and assessing the privacy and security arrangements of service providers.

No internet transmission or storage system is completely secure. Email, online forms, social media and Telehealth platforms carry privacy risks. Please avoid sending sensitive health details through public social media channels and contact us to discuss an appropriate way to provide information. These risks do not remove our legal responsibilities.

We retain personal information for as long as needed for the purposes for which it was collected and to meet applicable legal, clinical, insurance and recordkeeping obligations. We securely destroy or de-identify information when it is no longer required and lawful to do so. Health records may need to be retained even if you request deletion.

10 Links to other websites

Our Website may contain links to third-party websites and services. Those organisations have their own privacy practices, which we do not control. Please review their privacy policies before providing personal information.

11 Accessing and correcting personal information

You may contact us to request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We take reasonable steps to maintain accurate records.

We may need to verify your identity or the authority of a representative before responding. We respond within a reasonable time and meet applicable legal time limits. We do not charge for making an access or correction request. Where a charge for providing access is lawful, we explain any reasonable charge in advance.

If we refuse access or correction, we provide reasons and information about available complaint options, except where the law allows otherwise. You may also ask us to associate a statement of your requested correction with the record where required by law.

You may request deletion, but there is no unrestricted right to have health records erased. We explain any retention obligations or other lawful reasons preventing deletion.

12 Privacy complaints

If you have a concern about how we handle your personal information, please contact Lawrey Calabro using the details below. Written complaints help us investigate, but please let us know if you need assistance making a complaint.

We will acknowledge your complaint, investigate and aim to respond within 30 days. If more time is needed, we will explain why and provide an update.

If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992. Generally, you should first complain to us and allow a reasonable opportunity to respond. For matters involving Victorian health information, you may also contact the Victorian Health Complaints Commissioner at hcc.vic.gov.au.

13 Overseas storage and disclosure

Our practice operates in Australia. However, some third-party providers we use for clinic management, AI-assisted documentation, website hosting, email and other business services may store, process or access personal information, including health information where relevant, outside Australia. The countries involved depend on the provider and the services used.

Where overseas disclosure occurs, we take reasonable steps required by applicable privacy laws to protect your information and ensure appropriate handling by overseas recipients. Our use of third-party services does not remove our legal privacy responsibilities.

You may contact us for further information about the providers handling your information and their overseas arrangements. We will include the countries in which overseas recipients are likely to be located in this policy where practicable.

14 Changes to this policy

We may update this policy to reflect changes in our practices or legal obligations. The current version will be made available on our Website with its update date. Where a change requires notice or fresh consent, we will take the steps required by law. You may request a copy using the contact details below.

15 Contact details

Privacy contact: Lawrey Calabro

Business: Lawrey Calabro (trading as Lawrey Calabro Naturopathy)

ABN: 32 605 102 379

Email: [email protected]

Phone: 0435 394 565

Website: www.lawreycalabronaturopath.com

Postal address:
Lawrey Calabro Naturopathy
C/- Waterman Eastland
175 Maroondah Hwy
Ringwood VIC 3134

Last updated: 1 November 2026