Privacy Policy

The Concussion Naturopath

Last updated: 30 April 2026

This privacy policy sets out how I, Louise Cork, trading as The Concussion Naturopath (78778181238), collect, use, store and disclose your personal information. It applies to all clients and prospective clients of The Concussion Naturopath, including those who interact with my website at theconcussionnaturopath.com, complete intake forms, book consultations, or correspond with me by email.

I am committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Personal information I collect

I collect personal information that is reasonably necessary to provide naturopathic services to you. Because naturopathic care involves a detailed clinical history, the information I collect is more extensive than for many other businesses, and a significant portion of it is health information, which is treated as sensitive information under the Privacy Act.

The categories of personal information I may collect include:

  • Identifying information, such as your full name, date of birth, address, contact phone numbers and email address

  • Health information, including current symptoms, medical and surgical history, history of head impacts and concussion, mental health history, medications, supplements, allergies, family medical history, lifestyle factors, dietary information, sleep patterns, exercise patterns, and reproductive and hormonal history where relevant

  • Pathology results, imaging reports, specialist letters, hospital discharge summaries and other clinical documents you provide

  • Microbiome test results and other functional testing reports where these form part of your care

  • Information about your goals, concerns and preferences in relation to your health

  • Billing and payment information processed through my booking and payment platforms (I do not store full credit card details)

  • Records of our consultations, including written treatment notes and clinical recommendations

  • Correspondence between us, including emails and messages sent through my booking platform

2. How I collect personal information

Wherever practical, I collect personal information directly from you. This includes information you provide:

  • When you complete the new client intake form prior to your first consultation

  • During telehealth consultations

  • In subsequent intake updates, symptom tracking forms, food and lifestyle diaries, or follow-up questionnaires

  • When you upload pathology, imaging or specialist reports

  • When you contact me by email or through forms on my website

  • When you book or pay for an appointment

With your consent, I may also collect information about you from other health practitioners involved in your care, such as your general practitioner, specialist, osteopath or psychologist.

3. How I use your personal information

I use your personal information for the primary purpose of providing naturopathic care, including to:

  • Conduct an initial and ongoing clinical assessment

  • Develop and adjust your individualised treatment plan

  • Order and interpret functional or pathology testing where indicated

  • Communicate with you about your care, appointments, results and recommendations

  • Process payments and issue invoices and receipts

  • Maintain accurate clinical records as required by professional and legal standards

  • Comply with legal, regulatory and professional obligations

I may also use de-identified information for case review, ongoing professional development, supervision, and the development of clinical content (such as blog posts or presentations). De-identified means that the information cannot reasonably be used to identify you. I will never use information that identifies you for marketing or content purposes without your express written consent.

4. Disclosure of personal information

I will only disclose your personal information in limited circumstances:

  • With your consent, to other health practitioners involved in your care

  • With your consent, to laboratories or testing providers where pathology or microbiome testing is part of your care plan

  • To service providers who help me run the practice, such as my practice management software, telehealth platform, email provider, payment processor, and accounting software (these providers are bound by their own privacy and security obligations and are described in section 5)

  • Where disclosure is required or authorised by law, including under court order or subpoena

  • Where disclosure is necessary to lessen or prevent a serious threat to your life, health or safety, or to the life, health or safety of another person

I do not sell, rent or trade your personal information.

5. Service providers and overseas storage

To deliver telehealth services, I rely on a number of cloud-based service providers. Some of these providers store data on servers located outside Australia. By engaging my services, you acknowledge and consent to your information being stored and processed by these providers, including overseas, where applicable.

The main service providers I use include:

  • Simple Clinic which stores client records, intake forms and clinical notes

  • Zoom for video consultations

  • Squarespace, which hosts my website

  • Alyveya (GoHighLevel), which manages email subscriptions and digital product delivery

  • Stripe and other payment processors used by my booking platform

  • Google Workspace, used for email correspondence and document storage

Each of these providers maintains its own privacy and security standards. I select providers that comply with Australian privacy requirements or equivalent standards, but I cannot guarantee the practices of every overseas provider.

6. Storage and security of your information

I take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification and disclosure. These steps include:

  • Storing clinical records in password-protected, encrypted practice management software

  • Using secure, end-to-end or transport-encrypted telehealth platforms for video consultations

  • Using strong, unique passwords and multi-factor authentication on all accounts containing client information

  • Restricting access to your information to me alone, except where disclosure is permitted under this policy

  • Securely destroying or de-identifying information when it is no longer required to be retained

Health information is required by law to be retained for a minimum of seven years from the date of last contact, and longer in certain circumstances (for example, if you were a minor at the time of treatment).

7. Notifiable data breaches

If I become aware of an eligible data breach, as defined in the Privacy Act, I will notify you and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, in accordance with the Notifiable Data Breaches scheme.

8. Cookies and website analytics

My website uses cookies and similar technologies to improve your browsing experience and to help me understand how visitors use the site. The information collected through cookies is generally not personally identifiable. You can manage or disable cookies through your browser settings, although some parts of the website may not function as intended if cookies are disabled.

I may also use analytics tools, such as Google Analytics, which collect aggregated, de-identified data about website usage.

9. Telehealth and your responsibilities

Because consultations are conducted online, there are some aspects of privacy that are within your control rather than mine. I encourage you to:

  • Conduct your consultation from a private, quiet space where you cannot be overheard

  • Use a secure, private internet connection rather than public Wi-Fi

  • Avoid sharing your account login or appointment link with others

  • Let me know in advance if anyone else will be present in the room with you during the consultation, such as a family member or support person

10. Access to and correction of your information

You have the right to request access to the personal information I hold about you, and to request correction of any information that is inaccurate, incomplete, out of date, irrelevant or misleading.

To make a request, please email me at [hello@theconcussionnaturopath.com]. I will respond within a reasonable time, generally within 30 days. There may be a small administrative fee for fulfilling extensive access requests, which I will discuss with you in advance.

In limited circumstances, I may decline to provide access (for example, where doing so would pose a serious threat to the life or health of any person, or where the request is frivolous or vexatious). If I decline, I will provide written reasons.

11. Complaints

If you have a concern about how I have handled your personal information, please contact me first at [hello@theconcussionnaturopath.com]. I will acknowledge your complaint and aim to respond within 30 days.

If you are not satisfied with my response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

  • Website: oaic.gov.au

  • Phone: 1300 363 992

  • Post: GPO Box 5288, Sydney NSW 2001

12. Changes to this policy

I may update this privacy policy from time to time to reflect changes in my practices, services, or legal obligations. The current version will always be available on my website. The date at the top of this policy indicates when it was last updated.

13. Contact

For any questions about this privacy policy, or to make a request relating to your personal information, please contact:

Louise Cork

The Concussion Naturopath

Email: [hello@theconcussionnaturopath.com]

Website: theconcussionnaturopath.com