Privacy Policy

Last updated: 2 November 2026

Lemon Tree Wellness is my massage clinic and gift shop in Alice Springs. I'm Aimée McLeod, and I run it as a sole trader. Your privacy matters to me, and this policy explains how I collect, use, store and share your personal and health information.

I follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles. The Northern Territory doesn't have a separate health records law for private practitioners, so the Privacy Act is the law that applies to my clinic.

What I Collect

For massage clients:

  • Your name, date of birth, address, phone and email
  • Your health history, medications, injuries, pregnancy details and anything else relevant to your treatment
  • My treatment notes from each visit
  • Your health fund details if you claim a rebate
  • Emergency contact details
  • Your email for my newsletter, if you're happy to join

For gift shop customers:

  • Your name, contact details and delivery address for online orders
  • Your order history
  • Your email if you sign up for news and offers

I don't keep your card details. Payments are handled securely by my payment providers: my NAB HICAPS terminal (which also processes health fund claims), Live Payments, TimelyPay, Stripe, PayPal and Afterpay. I accept cash, Visa, Mastercard and American Express.

How I Collect It

Mostly from you directly, through your online booking, your intake form, conversations during your appointment, gift shop orders, and any messages you send me by email, text, Facebook or Instagram. Please don't send detailed health information through social media messages. It's best shared on your intake form or in person. With your permission, I may also receive information from another health practitioner, such as your midwife or GP.

Why I Collect It

I use your information to:

  • Give you a safe massage that's customised to you
  • Manage bookings, reminders and payments
  • Process health fund claims
  • Fill and send gift shop orders
  • Send you my newsletter with news and offers. I'll always ask before adding you. You can unsubscribe any time
  • Meet my legal, insurance and tax obligations

If you'd rather not share some details, just tell me. It may mean I can't treat you safely or process a health fund claim.

Who Sees Your Information

I'm the only person who sees your records and treatment notes.

I only share your information:

  • With your health fund, through HICAPS, when you claim on the spot
  • With services I use to run my business: Timely (bookings and some client records), Gmail (booking emails), Mailchimp (newsletter) and Shopify (gift shop orders)
  • With another health practitioner, only with your consent
  • When the law requires it, or to prevent a serious threat to someone's health or safety

I never sell your information, and I never share your health information for marketing.

Photos and Reviews

I only take photos or videos of you for marketing with your permission, and I'll always tell you how I plan to use them. You can change your mind at any time.

If you leave me a Google review, I may share it on my website. Reviews are public, so please don't include health details you'd rather keep private.

Information Stored Overseas

Some services I use may store data outside Australia. Timely is a New Zealand-based company, and Shopify, Google (Gmail), Mailchimp and Meta (Facebook and Instagram) store data overseas, mainly in the United States. I choose services with strong security, and they're required to protect your information.

How I Keep It Safe

My treatment notes and intake forms are handwritten and kept locked away. Some are also uploaded to Timely, which is password protected. I'm the only person who can access them.

How Long I Keep It

I keep client records for 7 years after your last appointment. This includes babies and children. After that, I securely destroy them.

Payment, invoice and gift shop order records are kept for 5 years, as the ATO requires.

Seeing and Correcting Your Records

You can ask to see or get a copy of your records at any time. Just email me. I'll respond within 30 days. If something's wrong or out of date, let me know and I'll fix it.

Data Breaches

If a breach is likely to cause you serious harm, I'll let you know and report it to the Office of the Australian Information Commissioner, as the law requires.

Website

My website may use cookies and analytics to see how it's used and to run the shop cart. You can turn off cookies in your browser.

Questions or Concerns

If you have a question or a concern about your privacy, please contact me first and I'll do my best to sort it out.

Email: hello@lemontreewellness.com
Phone or text: 0414 878 709

If you're not happy with my response, you can contact:

  • Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992
  • Health and Community Services Complaints Commission (NT): hcscc.nt.gov.au, 1800 004 474

Changes to This Policy

I may update this policy from time to time. The latest version will always be on this page.