Your information, handled with care.

Last updated: 23 August 2026

Halotherapy ("we", "us", "our") is a Gold Coast nursing service operated by Hayley Earnshaw, Registered Nurse, providing Low-Level Laser Therapy (LLLT) and therapeutic ultrasound at our Palm Beach clinic and as a mobile service. Because we provide a health service, we handle your information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and applicable Queensland health records requirements.

This policy explains what we collect, why, how it is stored, who it is shared with, and your rights.

What we collect

Depending on how you interact with us, we may collect:

• Contact details: your name, phone number, email address and home address (for mobile visits).
• Health information: relevant medical history, current symptoms, medications, treatment notes and consent records collected through our intake forms and during consultations. Health information is "sensitive information" under the Privacy Act and is only collected with your consent.
• Payment information: records of invoices and payments. Card details are processed by our payment provider and are never stored by us.
• Website data: anonymous usage statistics such as pages visited, device type and general location, collected through cookies and similar technologies (see "Cookies, analytics and advertising" below).

How we collect it

• Directly from you, when you book online, complete an intake or consent form, or contact us by phone, email, SMS or social media.
• During your appointments, as clinical notes.
• Automatically, through our website analytics when you browse this site.
• Occasionally from a third party with your consent, for example a referring health practitioner.

Why we collect it

• To provide safe, appropriate nursing care and keep accurate clinical records.
• To manage bookings, reminders, invoicing and receipts.
• To communicate with you about your care.
• To meet our legal and professional obligations as a registered health practitioner, including record-keeping requirements.
• To understand how our website is used, and to measure the effectiveness of our marketing.

We do not sell, rent or trade your personal information to anyone.

Who we share it with

We use a small number of trusted service providers to run the practice:

• Cliniko (practice management and online bookings): your booking details and clinical records are stored securely in Cliniko, with data for Australian practices hosted in Australia.
• Stripe (payments): processes card payments. Your card details go directly to Stripe and are handled under Stripe's own privacy policy.
• Google (email and website analytics) and Meta (Instagram and advertising, where used): receive limited technical data as described under "Cookies, analytics and advertising".

Beyond these providers, we only disclose your information where you have consented (for example a letter to your GP), where it is directly related to your care, or where we are required or permitted by law to do so. We do not disclose health information overseas.

Cookies, analytics and advertising

This website uses:

• Google Analytics to collect anonymous statistics about how visitors use the site.
• Embedded services such as our Cliniko booking form and Instagram feed, which may set their own cookies when loaded.
• Advertising tools from platforms such as Google and Meta, which we may use to measure whether our ads are working and to show ads to people who have visited this site. These tools use cookies or similar identifiers and collect technical data such as your device, browser and pages viewed. They never receive your clinical or health information.

You can control or delete cookies through your browser settings, opt out of Google Analytics via Google's browser opt-out, and manage ad personalisation in your Google and Meta account settings. The website works normally without cookies; only the embedded booking and social features depend on them.

How we store and protect it

Clinical records are stored in Cliniko, protected by encryption in transit and at rest, two-factor authentication and access controls. Email and business records are held in secured, access-controlled accounts. Paper records are not kept. We take reasonable steps to protect all personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

As a health service provider we are required to retain clinical records for at least 7 years from your last visit, or for a client under 18, until they turn 25. When information is no longer required, it is securely deleted.

Marketing communications

We will only send you marketing or newsletter emails if you have opted in, and every message will include a way to unsubscribe. Appointment confirmations and reminders are part of your care and are sent to everyone with a booking.

Access and correction

You may request access to the personal information we hold about you, and ask us to correct anything that is inaccurate or out of date. Contact us using the details below and we will respond within 30 days. There is no charge to make a request; in limited cases the law allows or requires us to refuse access, and if so we will tell you why in writing.

Questions and complaints

If you have a question or believe we have mishandled your information, please contact us first:

• Email: [email protected]
• Phone: 0413 482 231
• Post: Halotherapy, 80 Townson Avenue, Palm Beach QLD 4221

We take complaints seriously and will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

Changes to this policy

We may update this policy from time to time, for example if our tools or legal obligations change. The current version will always be published on this page with the date it was last updated.