Privacy Policy
K-Flow Therapy
Last updated: January 2026
K-Flow Therapy is committed to protecting your privacy.
This Privacy Policy explains how we collect, use, store, and protect your personal and health information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).
1. Who We Are
K-Flow Therapy is operated by a sole trader.
Business name: K-Flow Therapy
ABN: 20 225 042 323
Address: 1/53 Cherry Street, Werribee VIC
Privacy contact: Sam Noh
Email: info@k-flowtherapy.com
2. What Information We Collect
a) Online Booking Information
When you book an appointment online, we may collect:
Full name
Contact number
Email address
Full address
Date of birth
Marketing email consent (optional)
b) Handwritten Consent & Intake Forms
At your first visit, you may be asked to complete handwritten consent and intake forms, which may include:
Full name
Contact number
Email address
Full address
Date of birth
Health conditions
Medications
These forms are not completed online.
c) Additional Health Information During Treatment
Additional health information may be collected verbally or through clinical notes during consultation and treatment, including:
symptoms and pain levels
movement findings
relevant changes in your health
3. How We Collect Your Information
We collect information when you:
book an appointment online
complete handwritten consent or intake forms in clinic
provide information verbally during consultation or treatment
communicate with us by phone, email, or in person
4. How We Use Your Information
Your personal and health information is used to:
manage bookings and appointments
provide safe and appropriate massage and myotherapy treatment
maintain accurate clinical records
communicate with you about appointments, reminders, or follow-ups
meet legal, professional, taxation, and insurance obligations
We do not sell, rent, or trade your personal or health information.
5. Confidentiality During Treatment
Any information shared by you during your consultation or treatment session is treated as confidential.
This includes:
personal conversations
health discussions
any concerns you choose to share
Information discussed during a session is not shared with third parties, unless:
it is necessary to provide safe and appropriate care,
you give your consent, or
we are legally required to do so.
6. Storage of Records & Paper Forms
Handwritten consent and intake forms are scanned and securely uploaded to our clinical management system (Cliniko).
After scanning, paper forms are securely shredded.
Additional health information collected during treatment is documented and stored electronically in Cliniko.
7. Record Retention & Legal Obligations
We are legally required to retain client health records under Australian health, taxation, and insurance regulations.
Adults (18+): records are kept for at least 7 years from the date of your last treatment
Clients under 18: records are kept until you turn 25 years old
Records may also be retained:
as evidence of treatment provided, and
for private health insurance audits or compliance checks
Records are kept only for as long as required and are securely disposed of when no longer needed.
8. Booking, Payments & Third-Party Systems
We use trusted third-party systems to operate the clinic:
Cliniko – online booking, clinical records, email and SMS reminders
HICAPS – private health insurance claims and payments
Squarespace – website hosting
K-Flow Therapy does not store credit card details.
Some information may be stored on secure servers located outside Australia, depending on the service provider. These providers are required to meet appropriate privacy and security standards.
9. Marketing & Advertising (No Health Information Used)
K-Flow Therapy does not use personal or health information for advertising or marketing purposes.
Health information is never used in:
advertisements
promotional materials
marketing campaigns
Marketing emails are sent only if you opt in, and they do not contain health-related information.
10. Sharing Health Information With Consent
In some situations, limited health information may need to be shared to support your care or meet administrative requirements (for example, with another practitioner, a trainer, or an insurer).
Health information is only shared if:
the purpose has been clearly explained to you, and
you have provided written consent by signing a consent form.
If you do not provide consent, your health information will not be shared, unless required by law.
This section does not apply to advertising or marketing.
11. Social Media & Marketing Content
K-Flow Therapy does not share any personal or health information on social media or for marketing purposes without your explicit written consent.
This includes:
health conditions or injuries
treatment outcomes or progress
before-and-after descriptions
photos, videos, or testimonials that could identify you
If consent is not provided, nothing will be shared, and this will not affect your treatment.
You may withdraw consent at any time by notifying us in writing.
12. Who Can Access Your Information
Client records are accessible by the clinic owner.
The practitioner providing your treatment may access relevant information only for the purpose of delivering safe and appropriate care.
Practitioners operate as independent contractors.
Access is strictly limited to what is necessary.
13. Accessing or Correcting Your Information
You have the right to:
request access to your personal information, and
request corrections if information is inaccurate or outdated.
Please contact info@k-flowtherapy.com.
14. Privacy Concerns or Complaints
If you have a concern about how your information is handled, please contact:
Sam Noh
📧 info@k-flowtherapy.com
We will respond within a reasonable timeframe and work to resolve the issue.
15. Changes to This Policy
This Privacy Policy may be updated from time to time.
The most current version will always be available on our website.