Body Belonging Clinic

Privacy Policy

This policy explains how Body Belonging Clinic, operated by Lauren Lynch, handles personal information under the Privacy Act 1988 and the Australian Privacy Principles.

Last updated: 26 July 2026. This policy covers the ADHD Hub website, Body Belonging Clinic's clinical service and the current Anchor web tool. It should be read with the short notice shown where information is collected.

What we collect

Depending on how you interact with us, we may collect:

  • name, email address, phone number, address and communication preferences;
  • booking, referral, billing, Medicare and appointment information;
  • health information you choose to provide, including history, assessments, treatment notes, risk information and correspondence with other practitioners;
  • identity information where relevant to respectful support, such as cultural, disability, sexuality or gender information;
  • website information such as pages visited, approximate location, device, browser, security logs and analytics choice; and
  • feedback, complaint, access or correction requests.

An email submitted on an ADHD website may reveal a health-related interest even if you provide no clinical details. Please do not put clinical, crisis or other sensitive information into the email updates form.

How we collect information

We usually collect information directly from you: through the website, Zanda booking, email, telephone, forms and sessions. With your consent or where permitted by law, we may receive information from a referrer, GP, other treating practitioner, funder, advocate, parent or support person.

You may browse the hub without identifying yourself. For clinical support we need enough accurate information to provide a safe service and meet professional, billing and record-keeping obligations. If you do not provide it, some services may not be available.

Why we use and disclose it

We use or disclose information where reasonably necessary to:

  • respond to enquiries, assess fit, book and provide services;
  • maintain clinical records and coordinate support with your consent;
  • process payments, rebates, funded-service requirements and administration;
  • send updates you expressly requested and manage unsubscribe requests;
  • keep the website, Anchor and clinic systems secure and reliable;
  • improve services using aggregated or de-identified information where practical;
  • respond to risk, emergencies, complaints or legal obligations; and
  • protect a person from a serious threat where disclosure is authorised by law.

We do not sell personal information. We do not send email addresses, form entries or clinical information to Google Analytics.

Service providers and overseas handling

We use contracted providers to operate the clinic and website. Access is limited to what is needed for their service. Current providers include:

  • Zanda online booking, practice administration and clinical records.
  • Supabase website email-list database and supporting infrastructure.
  • Netlify website hosting, form processing and security logs.
  • Google Analytics optional, consent-based website measurement.

Our website email-list database (Supabase) currently stores information in Singapore. More broadly, some providers are headquartered or use support, backup or processing locations outside Australia. Likely overseas handling may include the United States and other locations listed in the providers' current privacy and infrastructure documentation. Hosting regions and subprocessors can change, so we review this provider register and will update this policy when a material data flow changes.

Clicking the booking link leaves this website. Zanda's own collection notice and privacy terms apply to information entered there.

Website analytics and cookies

Google Analytics loads only after you choose “Allow analytics.” If you decline, the hub continues to work. Necessary browser storage may still be used for security, basic functionality and remembering your analytics choice.

Email updates

We send hub or Anchor updates only when you ask for them. Messages identify Body Belonging Clinic and include an unsubscribe option. You may also unsubscribe by emailing admin@bodybelongingclinic.com.au. We aim to action unsubscribe requests promptly and within the period required by Australian spam law.

Anchor

The current Anchor web tool is intended as a general wellbeing aid. Its reminder settings are designed to stay on the user's device. The ADHD Hub may separately collect an email address if you join Anchor updates. Anchor is not a clinical record, monitoring service, crisis service, diagnostic tool or treatment. Read the Anchor privacy notice before use.

Security, retention and deletion

We use access controls, reputable service providers, encrypted connections, system updates and other reasonable safeguards appropriate to sensitive health information. No online system can be guaranteed completely secure. If a data breach is likely to cause serious harm, we will assess and respond under the Notifiable Data Breaches scheme.

Clinical and financial records are retained for the periods required by law, professional obligations, Medicare or funding arrangements. Email-list information is retained while you remain subscribed or while reasonably required to evidence consent and honour suppression requests. When you unsubscribe, we delete your email-list contact details within 12 months, other than a minimal suppression record we keep to honour your unsubscribe. Information no longer required is securely destroyed or de-identified where lawful.

Access and correction

You may request access to personal information we hold or ask us to correct it. Contact the Privacy Officer using the details below. We may need to verify your identity. If an exception applies, we will explain the decision where legally permitted.

Privacy questions and complaints

Contact: Privacy Officer, Body Belonging Clinic
Email: admin@bodybelongingclinic.com.au
Phone: +61 493 117 185

Please describe the issue and the outcome you are seeking. We will acknowledge and investigate it, and ordinarily aim to respond within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner. Clinical complaints have additional pathways described on our feedback and complaints page.

Changes to this policy

We review this policy at least annually and when a material system, product or information flow changes. The updated date at the top records the latest review. A copy in another accessible format is available on request.