Privacy Policy
Last updated 1 October 2026
Sage Physiotherapy & Wellness (“Sage”, “we”, “us”) is a physiotherapy practice based in Truganina, Victoria, providing clinic, mobile and telehealth physiotherapy. This policy explains what personal and health information we collect, why we collect it, who it is shared with, and the rights you have over it.
As a health service provider we are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and by the Health Records Act 2001 (Vic) and the Health Privacy Principles. The small business exemption in the Privacy Act does not apply to health service providers — these obligations apply to us regardless of our size or turnover.
1. What we collect
When you use the enquiry form on this website
- Your name
- Your contact details — the phone number or email address you choose to give us
- The message you write
- Your IP address and the date and time of the submission, recorded automatically with the enquiry to protect the form against spam and abuse
Please don’t include detailed health information in the enquiry form. A short note about what you need help with is enough — we’ll take a proper history when we speak.
When you book or attend an appointment
- Contact and identity details needed to arrange your care
- Health information — your history, symptoms, assessment findings, treatment and progress notes
- Where relevant, referral, Medicare, NDIS or private health insurance details needed for your funding arrangement
2. What this website does not do
This website uses no cookies, no analytics, no advertising or tracking pixels, and no third-party trackers of any kind. We do not build a profile of you, and we do not track you across other websites. Nothing is stored on your device by this site.
3. Who your information is shared with
We do not sell your information, and we do not disclose it for marketing. Information is shared only where it is necessary to provide your care, run the practice, or where the law requires it.
- Halaxy — our online booking and practice management provider. If you book through the “Book online” button you are taken to Halaxy’s platform, and the details you enter there are handled under Halaxy’s own privacy policy as well as ours.
- Our website provider — when you submit the enquiry form, the details are stored on the website’s server and sent to the practice as a notification through our website provider’s secure messaging system, so that enquiries are not missed.
- Google Fonts — the typefaces on this site are served by Google. Your browser requests them from Google when the page loads, which makes your IP address visible to Google. No other information is sent.
- Your other health practitioners — such as your GP or a specialist, only with your consent, or where disclosure is permitted or required by law.
- Funding bodies — such as Medicare, the NDIS or your insurer, where this is needed to process a claim you have asked us to make.
4. How we use your information
- To respond to your enquiry and arrange appointments
- To assess, plan, deliver and review your physiotherapy care
- To process payments and funding claims
- To meet our professional, insurance and legal obligations
5. Storage and security
This website is served over an encrypted HTTPS connection. Enquiries submitted through the form are stored on the website’s server in a file that is not publicly accessible. Clinical records are kept in our practice management system, with access limited to those who need it to provide or support your care.
No system can be guaranteed completely secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the relevant regulator as required under the Notifiable Data Breaches scheme.
6. How long we keep it
Under the Health Records Act 2001 (Vic), health information must be kept for at least seven years from the date of your last service. Where the patient was a child, records must be kept until that person turns 25. Website enquiries that do not lead to an appointment are kept only as long as needed to deal with the enquiry and to keep a record of correspondence.
7. Accessing and correcting your information
You have the right to ask for access to the personal and health information we hold about you, and to ask us to correct it if it is wrong, out of date or incomplete. Call 0450 084 704 to make a request.
We will ask you to verify your identity. In most cases we will respond within 30 days. There are limited circumstances in which access may be refused or given in another form — for example where providing it would pose a serious threat to someone’s life or health, or unreasonably affect another person’s privacy. If we refuse, we will tell you why and how you can have that decision reviewed.
8. Anonymity
You can contact us with a general enquiry without giving your name. We cannot provide physiotherapy treatment anonymously, because we are required to keep accurate clinical records.
9. Making a complaint
If you are concerned about how we have handled your information, please raise it with us first on 0450 084 704 so we have the chance to put it right.
If you are not satisfied with our response, you can take it further:
- Health Complaints Commissioner (Victoria) — administers the Health Records Act 2001 (Vic) and handles complaints about health information held by private health service providers — hcc.vic.gov.au
- Office of the Australian Information Commissioner — for complaints under the Privacy Act 1988 (Cth) — oaic.gov.au
10. Changes to this policy
We may update this policy from time to time. The current version will always be published on this page with the date it was last updated.
11. Contact us
Sage Physiotherapy & Wellness
Truganina, Victoria 3029
Phone 0450 084 704