Privacy policy.

What information we collect

We collect personal information necessary to deliver physiotherapy services and meet professional and legal obligations. This includes your name, contact details, date of birth, health information, the reason for your appointment, and information about your funding arrangements (Medicare, WorkCover, CTP, private health insurance, Support at Home).

How we use your information

Your information is used to assess and treat your condition, communicate with you about appointments, process claims with funding bodies and insurers, comply with legal and professional obligations (including AHPRA registration and Medicare requirements), and improve the quality of our services. We do not use your information for advertising or marketing without your consent.

How we store and protect your information

Personal and health information is held in our clinical records. Our electronic clinical records are held in Halaxy, the practice management system described below. Halaxy states that data is stored in Australia and is secured at rest and in transit. Access is limited to Shaun Chew and anyone he authorises. Paper records (where used) are kept in locked storage. We retain records for the minimum periods required by Australian law for health practitioners.

Who we share information with

We share information with your treating doctors, care coordinators, and funding bodies only as necessary and where you have provided consent. We do not sell or trade your information. The service providers listed below also handle some of your information in the course of providing those services. In specific circumstances (court orders, mandatory reporting obligations) we may be required to disclose information by law.

Third-party service providers

We use the following providers to run this website and our appointment book. Each holds only the information needed for its purpose.

• Halaxy is our practice management and online booking system. If you book online you are taken to Halaxy's own website, where you enter your contact details, appointment preference, the reason for your visit, any referral or funding details, and any payment details. That information is collected by Halaxy under its own privacy policy (opens in a new tab), not by this website.
• Resend delivers the messages you send through our contact form to our business email address.
• Vercel hosts this website and processes standard server request logs.

Vercel and Resend are United States companies. Anything you send us through this website, including what you write in the contact form, is handled by them on servers in the United States. Vercel also serves this website from data centres in other countries, and its request logs may be handled in the country closest to you.

Halaxy works differently. When you book online you leave this website and enter your details on Halaxy's own site, so Halaxy collects that information directly from you rather than receiving it from us, and Halaxy's own privacy policy governs how it is handled. Halaxy Pty Ltd (ACN 633 220 612) is an Australian company. Its Australian privacy policy, which we last checked on 6 September 2026, states that Halaxy is bound by the Australian Privacy Principles, that your data is stored in Australia, and that Halaxy may disclose personal information to recipients outside Australia, including providers in the United States, the United Kingdom, New Zealand and the European Union used for hosting, payments, messaging and system monitoring. It states that Halaxy requires those recipients to comply with local privacy laws and contractual security obligations.

We recommend reading Halaxy's Australian privacy policy (opens in a new tab) before you book. If you would prefer not to use an online service, you can book and enquire by phone on 0466 708 219.

Your rights

You have the right to access your health records, request corrections, and lodge complaints. To exercise these rights, contact us on 0466 708 219 or via the contact form. Complaints unresolved with us can be escalated to the Office of the Australian Information Commissioner (OAIC) or AHPRA where appropriate.

Updates to this policy

We may update this policy from time to time. The current version is dated on this page and will be applied prospectively.

Last updated: 6 September 2026.