Privacy Policy

Myotherapy operates an online directory that helps people find practitioners and clinics. In this policy, “we”, “us” and “our” refer to Myotherapy (ABN 29 790 082 072), and “you” refers to anyone who uses the directory, including people searching for services and practitioners or clinics maintaining a listing.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles to the extent they apply to us. Practitioners and clinics are separately responsible for personal information they collect or hold through their own clinical or business activities.

We collect personal information only where it is reasonably necessary to operate, secure and administer the directory. Depending on how you use the platform, information may be collected:

• directly from you when you create an account or send us a message through the contact form;
• automatically when you use the website, through sign-in cookies and the listing views and booking link clicks we count; and
• from practitioners or clinics when they provide information and documents for a listing or verification process.

We use personal information for purposes connected with operating the directory, including managing accounts and listings, displaying search results, showing practitioners how often their listing is viewed and booked, verifying practitioner or clinic information, administering subscriptions, replying to contact form messages and maintaining platform security.

We may also use or disclose information for another purpose where you have consented, where you would reasonably expect that use or disclosure and it is permitted by law, or where the use or disclosure is otherwise required or authorised by law.

Some information provided through a health-services directory may be sensitive information or health information under Australian privacy law. For example, a message sent through our contact form may contain information about a person's symptoms, condition, treatment needs or health history.

You are not required to provide health information to search the directory. If you voluntarily include health information in a message to us, we use it only to reply to you. We do not use it for targeted advertising or to create a clinical health record.

We disclose personal information only where reasonably necessary for the operation of the directory or where permitted or required by law. This may include:

• hosting, infrastructure, email, support and security providers;
• payment processors used to administer practitioner subscriptions; and
• regulators, law enforcement bodies, courts or other parties where disclosure is required or authorised by law.

Service providers receive only the information reasonably necessary for the services they provide to us.

Practitioners or clinics may be required to provide documents supporting information displayed on their listing, such as qualifications, professional association membership, insurance or applicable screening documents.

A verified status or badge communicates only the verification actually performed. It is not an endorsement, and it does not guarantee clinical quality or treatment outcomes.

Myotherapy uses cookies to keep practitioners, clinics and our team signed in. We do not use advertising cookies.

We use Google Analytics to understand how visitors use our public website, such as which pages are viewed, how people find us, and the type of device and browser used. Google Analytics sets its own cookies (named _ga) to do this. We do not send Google your name or contact details, and we do not use Google Analytics for advertising. This information is processed by Google, including in the United States. You can opt out with Google's browser add-on at tools.google.com/dlpage/gaoptout.

Listing views and booking link clicks shown to practitioners are counted by our own servers, not through Google Analytics.

You can clear or block cookies in your browser settings. Some parts of the directory, such as staying signed in, may not work without them.

We use service providers to host, process, secure and communicate information.

Some service providers may process or receive personal information outside Australia. For example, Google Analytics data is processed by Google in the United States. Where personal information is likely to be disclosed to overseas recipients, we take the reasonable steps required by Australian privacy law in relation to that disclosure.

We retain personal information only for as long as it is reasonably required for the purpose for which it was collected, for legitimate business and complaint-handling needs, or to comply with applicable legal obligations.

You can ask us to delete your account and listing by emailing [email protected].

You may contact us to request access to personal information we hold about you or to ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond within a reasonable period and may need to verify your identity before acting on a request.

Where lawful and practicable, you may interact with us anonymously or using a pseudonym. You may also opt out of direct marketing communications where applicable.

You may ask us to delete information. Australian privacy law does not create a general right to erasure in every circumstance, so we may need to retain information where it remains necessary for a lawful purpose or where retention is required by law. Where information is no longer required, we will handle it in accordance with our destruction and de-identification obligations.

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include encryption in transit, secure password hashing, access controls, logging and other security safeguards appropriate to the information we hold.

If an eligible data breach occurs and is likely to result in serious harm, we will take the steps required under the Notifiable Data Breaches scheme, including notifying affected individuals and the Office of the Australian Information Commissioner where required.

The directory is primarily intended for adults. Myotherapy does not knowingly create user accounts for children under 16. Where a child requires treatment, a parent or guardian should ordinarily manage the enquiry or booking, subject to the practitioner's own consent and privacy obligations.

If you believe we have collected personal information about a child in circumstances that are inconsistent with this policy, please contact us so we can review and address it.

We may update this Privacy Policy when our information-handling practices, technology or legal obligations change. The current version and its effective date are shown at the top of this page.

Where a change materially affects how we handle personal information, we will take reasonable steps to notify affected account holders or otherwise bring the change to their attention.

For all privacy questions, access or correction requests, and privacy complaints, please contact Myotherapy by email at [email protected]. This is our only contact method for privacy enquiries.

We will acknowledge privacy complaints promptly and aim to provide a substantive response within 30 days. If you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner (OAIC).