Privacy Policy

Last updated: 15/09/2026

Kiri O’Connor / Soul Hum respects your privacy and is committed to protecting your personal and health information.

This Privacy Policy explains how I collect, use, store, protect and disclose information in connection with my Biodynamic Craniosacral Therapy practice.

1. Privacy obligations

My practice operates in Victoria and may handle personal and health information in connection with providing health services.

I aim to comply with applicable privacy obligations, including the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Health Records Act 2001 (Vic), as applicable to my practice.

2. Information I collect

Depending on your interaction with my practice, I may collect:

  • your name and contact details;

  • date of birth or age where relevant;

  • emergency contact details;

  • health and wellbeing information;

  • relevant medical history;

  • medications and other relevant treatment information;

  • information relevant to your sessions;

  • appointment and treatment records;

  • billing and payment information;

  • information provided through enquiry, intake or consent forms;

  • correspondence between you and my practice; and

  • information required to manage appointments and provide my services.

I aim to collect only information that is reasonably necessary for my practice and the services I provide.

3. How information is collected

Information may be collected directly from you through:

  • appointments;

  • intake and consent forms;

  • online booking forms;

  • email;

  • telephone;

  • text messages;

  • payment and invoicing processes; and

  • other communications with my practice.

Where appropriate and legally permitted, information may also be received from another person or health professional.

4. Why I collect information

I may collect and use your information to:

  • provide and manage your sessions;

  • understand information relevant to your care;

  • communicate with you about appointments;

  • maintain appropriate professional records;

  • process payments and invoices;

  • manage administrative matters;

  • respond to questions or complaints;

  • meet applicable professional, legal or insurance requirements; and

  • address circumstances involving safety where permitted or required by law.

5. Collection of health information

Health information is sensitive information.

I generally collect health information directly from you and with your consent, where required.

Before or at the time information is collected, I aim to provide appropriate information about why it is being collected and how it may be handled.

6. Use and disclosure

I generally use information for the purpose for which it was collected or for another purpose permitted or required by law.

I will not ordinarily disclose your health information to another health professional without appropriate authority or consent, unless disclosure is otherwise permitted or required by law.

Where you request or authorise communication with another practitioner, I may share relevant information with that practitioner within the scope of your authorisation.

7. Service providers and technology

I may use external providers to operate aspects of my practice, including:

  • appointment booking;

  • practice-management or record-keeping systems;

  • payment processing;

  • accounting;

  • email and communications;

  • website hosting;

  • online forms; and

  • secure cloud storage.

Some providers may store or process information outside Australia.

The specific providers used by my practice are listed below where relevant:

Where applicable, I take reasonable steps to ensure that information handled by service providers is managed consistently with my privacy obligations.

8. Website analytics and cookies

My website may use cookies or analytics technologies to help the website function and to understand how visitors use the website.

Current services used: The cookies Squarespace uses

These services may collect technical information such as device, browser and website-use information.

9. Marketing

If I send marketing communications, I will do so in accordance with applicable laws.

You may unsubscribe from marketing communications at any time.

Health information will not be used for direct marketing unless I have the appropriate consent or another lawful basis.

10. Security

I take reasonable steps to protect information from misuse, interference, loss and unauthorised access, modification or disclosure.

These measures may include secure systems, passwords, access controls and appropriate physical security.

No electronic system can be guaranteed to be completely secure.

11. Access to your information

You may request access to personal or health information I hold about you, subject to applicable legal exceptions.

You may also request correction of information that is inaccurate, incomplete or out of date.

Requests can be made using the contact details below.

12. Retention of records

I retain records for the periods required or permitted by applicable law, professional requirements and insurance arrangements.

When records are no longer required, I will take reasonable steps to securely destroy or de-identify them where appropriate.

13. Privacy complaints

If you have a concern about the way your information has been handled, please contact me first.

I will consider your complaint and respond within a reasonable period.

Privacy contact:
Kiri O’Connor
kiri@soulhum.com.au
0402 939 932

If your concern cannot be resolved directly, you may have the right to make a complaint to the relevant privacy or health-complaints authority.

14. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time.

The current version will be published on this website.