Privacy Policy

1. Who we are

Massage Mentor is operated by Therapeutic Touch Mastery Pty Ltd (ABN 12 684 156 643) (“we”, “us”). This policy explains how we handle personal information across our website, mobile app and therapist portal, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). As a provider of a health-related service we do not rely on the small-business exemption.

2. Whose information this covers

Therapists who hold an account with us, and their clients whose information a therapist enters or imports. Therapists are responsible for having a lawful basis and the client’s consent to record that information in Massage Mentor.

3. Information we collect

Therapist accounts: name, email, password (hashed), clinic details, and (where provided) business and professional-registration details.

Client information entered or imported by therapists: contact details, date of birth, treatment plans, session notes, outcomes and health-safety flags. This is health information — “sensitive information” under the APPs, attracting the highest level of protection.

Usage information: technical logs needed to run and secure the service. We log request metadata by default and do not log request or response bodies containing client data in normal operation.

4. How we use it

To provide and improve the service, authenticate users, deliver appointment confirmations and reminders, provide support, and meet our legal obligations. We do not sell personal information. Direct marketing is sent only with consent and every message includes a working unsubscribe (Spam Act 2003); you can opt out at any time.

5. Third parties & overseas disclosure

We share information only with service providers who help us run Massage Mentor (for example hosting, email delivery and payment processing) [processor list to confirm], and where required by law. Some of these providers — including our current hosting provider — store or access data outside Australia (including in the United States); where they do, we take reasonable steps to ensure APP 8 (cross-border disclosure) obligations are met.

6. Storage, security and location

Information is stored with our hosting provider, which is currently located in the United States, and protected in transit (TLS) and at rest. Where information is stored or accessed outside Australia, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles (APP 8). We maintain access controls and a breach-response plan. No system is perfectly secure, but we work to protect your information and to respond quickly if something goes wrong.

7. Retention

Health records are retained for the periods required by applicable state health-records law (for example the Victorian Health Records Act 2001 and NSW HRIPA 2002), generally a minimum of seven years from last contact, and longer for records relating to minors (typically until age 25). Deletion is implemented as retention-aware archival where the law requires it, so “delete” may mean archive rather than erase.

8. Cookies & analytics

We use essential cookies for sign-in and security. Any analytics we add will be described here and configured to respect your choices [analytics tooling to confirm].

9. Access, correction and complaints

You may request access to or correction of your personal information (APP 12 and 13) by emailing support@massagementor.com.au. If you are a therapist’s client, you can also ask your therapist directly. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10. Data breaches

We maintain a breach-response plan and will assess and notify eligible data breaches in accordance with the Notifiable Data Breaches scheme.

11. Changes & contact

We may update this policy; material changes will be notified in the app or by email and the “last updated” date above will change. Questions? Email support@massagementor.com.au.