*Effective Date: 17/09/2025
Not Just Bendy Hypermobility Services (“NJB,” “we,” “us,” or “our”) is committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This Privacy Policy explains how we collect, store, use, and disclose information about:
- Visitors to our website and social media platforms.
- Clients engaging with our clinical and administrative services.
- Staff, contractors, and job applicants.
By using our services or our website, you agree to the terms of this Privacy Policy.
1.Collection of Information
a. Website visitors
When you visit our website www.notjustbendy.com, we may collect:
- Technical data (IP address, browser type, operating system, device information).
- Interaction data (pages visited, time on site, referring websites).
- Contact form submissions, newsletter sign-ups, and social media engagement.
We use cookies, analytics, and tracking technologies (such as Google Analytics, Facebook Pixel, and similar tools) to improve user experience and tailor our services. You may disable cookies through your browser, although some site features may not function correctly.
Please note that any personal information you share publicly on our social media platforms (for example, in comments, reviews, or direct messages) may also be collected by us. However, these platforms are governed by their own privacy policies, and we recommend reviewing them before engaging.
b. Clinical & Administrative Clients
When you become a client, we collect personal, health, and administrative information including:
- Identifiers: name, date of birth, contact details, emergency contact.
- Health: medical history, clinical notes, diagnostic reports, referrals.
- Administrative: Medicare, NDIS, private health insurance, billing information.
- Consent forms: treatment agreements, service agreements, feedback, photo/video release forms.
We may also collect sensitive information with your consent, where necessary for providing treatment (e.g., health records, psychosocial disability information for NDIS).
c. Children & Minors
Where services are provided to children or minors, we require consent from a parent or legal guardian to collect, store, and use their personal information. Records relating to minors are managed with additional care and are retained in line with legal obligations.
d. Staff & Applicants
We collect information from staff and applicants, including personal details, employment history, and compliance documents, for recruitment and workplace management.
2. How We Collect Information
We generally collect information directly from you or your authorised representative via:
- Forms (online or paper), consultations, email, and phone.
- Our practice management software and digital platforms, including:
- HotDoc for online bookings, recalls, and appointment reminders.
- Nookal for practice management, scheduling, and clinical records.
- Snapforms for consent forms, including photo/video release forms.
- On-form for video recordings used by your therapist in your clinical management.
- AI-assisted note support and documentation tools to streamline clinical record keeping.
- Task management and communication platforms for internal administration.
This list is not exhaustive and may change as our technology and systems evolve. We ensure that any third-party providers we engage are bound by confidentiality obligations and take reasonable steps to safeguard your personal information.
We may also receive information from referring doctors, allied health professionals, NDIS plan managers, or publicly available sources where lawful.
3. How We Use Information
We use information for:
- Delivering clinical care and documenting health records.
- Managing billing, claims, and funding processes (NDIS, Medicare, insurers).
- Communicating appointment reminders, service updates, and clinical advice.
- Training, mentoring, and internal quality improvement.
- Website analytics and social media engagement.
- Marketing (where you have opted in).
- We will only use information for the purpose it was collected, or for related purposes you would reasonably expect, unless otherwise required by law.
We will only use information for the purpose it was collected, or for related purposes you would reasonably expect, unless otherwise required by law.
4. Disclosure of Information
We do not sell your information. We may disclose information to:
- Treating practitioners and multidisciplinary team members (with consent).
- Plan managers, Medicare, insurers, or funding agencies (for billing/reporting).
- IT and service providers (bound by confidentiality and security obligations).
- Regulatory or legal authorities, where required by law.
Some of our IT providers may store data overseas. Where this occurs, we take steps to ensure your information is safeguarded in accordance with Australian law.
5. Storage & Security
- Clinical data is stored securely in encrypted, access-controlled systems.
- Physical records (if any) are stored in locked facilities.
- Staff are trained in confidentiality and secure handling of data.
- We regularly review and update data security practices.
When information is no longer required, we will securely destroy or de-identify it.
6. Unsolicited Information
If we receive information we did not request, we will assess whether it could lawfully have been collected. If not, we will securely destroy or de-identify it.
7. Marketing & Newsletters
We may contact you with updates, newsletters, or service information. You can opt out of marketing communications at any time by following unsubscribe instructions or contacting us directly.
8. Business Transfers
If NJB merges with, or is acquired by, another business, your personal information may be transferred as part of that process. Privacy obligations will remain in place.
9. Access & Correction
You may request access to, or correction of, your personal information at any time by contacting us in writing at reception@notjustbendy.com.
We will respond within a reasonable timeframe, and may charge a reasonable fee if extensive work is required. If we cannot provide access, we will explain why.
10. Complaints
If you are concerned about our handling of your personal information, please contact us:
Privacy Officer
Not Just Bendy Hypermobility Services
Freeway Office Park 2, Building 9, Level 1, 2728 Logan Road, Eight Mile Plains QLD 4113
Email: reception@notjustbendy.com
Phone: +61 7 3123 4826
If unresolved, you may contact the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au or call 1300 363 992.
11. Updates to this Policy
This Privacy Policy may be amended from time to time to reflect changes in law, technology, or practice. The latest version will always be available on our website.