Privacy Policy

What we collect

The information we collect depends on how you interact with us.

If you contact us through the website or by email:

• Your name
• Your email address
• Your phone number (if you provide it)
• Whatever you choose to tell us in your message

If you book a consultation:

• The above, plus date of birth and address
• Emergency contact details
• Responses to our pre-consultation questionnaire (your health history, current concerns, medications, allergies, dietary preferences, and related information)
• Your food and symptom diary, if you complete one
• Payment reference (e.g. bank transfer details — we do not store card numbers)

During and after consultations, we may also hold:

• Notes taken by Claire during your sessions
• Any test results (bloodwork, hormone panels, stool tests, etc.) that you send to us
• A record of recommendations we have made (supplements, tests, lifestyle changes)
• A record of our email correspondence with you

We do not collect more than we need. If you prefer not to share something, you can tell us — you’re under no obligation, and we’ll work with what you’re comfortable providing.

How we use your information

We use your information only to:

• Provide the services you’ve booked
• Communicate with you about your appointments and care
• Keep accurate clinical records of our work together, as any responsible practitioner would
• Issue invoices or receipts when you ask for them
• Improve our own understanding of your health picture over time

We do not sell your information. We do not rent it, swap it, or pass it to marketers. We do not use it to train any artificial intelligence system, and any AI tools we use in the business operate under agreements that prohibit such use.

Where your information is stored

Your information lives in the following places:

Our practice management system

This is a secure, password-protected system built specifically for Nourishing Me. The underlying database is hosted on Australian servers in Sydney (the closest data-centre region to our Torquay practice) by Supabase, a commercial database provider. Only Claire can access it. Backups are taken regularly and also stored in Australia.

Claire’s email

All correspondence between you and Claire is held in her Gmail account, protected by a strong password and two-factor authentication. Google’s own privacy and security terms apply to this storage.

Physical paper

Claire takes session notes on paper during consultations, then transfers them into the practice management system afterwards. Paper notes are stored securely at the practice premises and are destroyed once they have been transferred.

Who else sees your information

In short: almost no one.

We use a small number of service providers to run the business — hosting, video-conferencing, payment processing, and email delivery. Where your information passes through these providers, it does so only for the purpose of delivering the service you’ve asked for, and only to the minimum extent needed.

The service providers we currently use are:

• Supabase — database and file storage, hosted on Australian servers in Sydney
• Vercel (United States) — website hosting. Only your name, email, and website interactions touch this layer; clinical information does not.
• Google (Gmail) — email correspondence
• Zoom (United States) — video consultations, when you book a virtual session
• Anthropic (United States)— AI tooling that supports Claire’s practice (for example, drafting general content). Contractually prohibited from retaining or training on any data we send. Your clinical information is not sent to AI tools unless you have specifically asked us to do so.

If we ever add a new service provider that handles your information, we’ll update this policy and, where it’s material, we’ll let you know.

We will never share your information with a third party for any other reason — except where we are compelled to by law (for example, a court order), or where you have given us specific permission.

Your rights over your information

You have the right to:

• Ask us what information we hold about you
• Ask us to correct anything that’s wrong
• Ask us to delete your information, subject to any legal record-keeping obligations we have
• Ask us to stop contacting you
• Withdraw your consent at any time

To exercise any of these rights, email Claire at claire@nourishingme.com.au. We’ll respond within a reasonable time — usually within a week. There’s no cost to you for making a request.

How long we keep it

We keep client records for seven years after your last appointment, which is the standard retention period for health-related records in Australia. After that, we destroy them securely.

If you contact us but never become a client, we keep your correspondence for a shorter period — usually 12 months — and then delete it.

You can ask us to delete your records sooner, and we will, unless we’re legally required to retain them.

How we keep it safe

We take reasonable steps to protect your information from loss, misuse, or unauthorised access. These steps include:

• Strong, unique passwords on every system
• Two-factor authentication on email, the practice management system, and all third-party accounts that support it
• Encrypted connections (HTTPS) on every website interaction
• Encrypted storage for databases and backups
• Regular review of who has access to what

No system is ever perfectly secure. If we ever become aware of a breach that affects your information, we will tell you promptly and tell you what we’re doing about it.

Children

Our services are offered to adults. Where a parent or guardian engages us on behalf of a child, the parent or guardian is the client for the purposes of this policy and consents on the child’s behalf. Information about the child is held to the same standard as any other client’s information.

Changes to this policy

We may update this policy from time to time, for example to reflect a new service provider or a change in how we work. The date at the top of the policy tells you when it was last updated. If a change is significant and affects how we use information you’ve already given us, we’ll contact you directly to let you know.

Questions or complaints

If you’ve got a question about this policy, or a concern about how we’ve handled your information, please contact Claire directly:

• Email: claire@nourishingme.com.au
• Post: 13 Bombora Street, Torquay VIC 3228

If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.