PRIVACY POLICY
This website, www.creativelifehealth.com, is owned and operated by Carrie Merchant, T/A Creative Life Health (ABN 63 586 416 424).
If you have any questions or need further information, please contact:
Carrie Merchant
Email: carrie@creativelifehealth.com
Phone: 0427 864 630
⸻
Overview
This page explains my Privacy Policy. It describes how I collect, use, and manage your personal and sensitive information — both when you engage with me as a client and when you interact with this website.
I comply with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth) and the Notifiable Data Breaches Scheme.
⸻
Personal Information I Collect
If you engage with me via this website, email, or in person, I may collect personal information such as:
• Name, date of birth, and occupation
• Address, phone number, and email address
• Details of your personal or work circumstances that are relevant to my services
• Interests or preferences related to your care or wellbeing
I will only collect sensitive information (such as health information) when it is necessary for the provision of services and with your consent.
No sensitive information will be collected from minors without the consent of a parent or guardian.
⸻
How I Collect Your Information
I may collect your personal information by various means, including:
• Online questionnaires or booking forms
• During consultations (in person or online)
• During workshops or other events
• Through email correspondence or phone calls
• From other health practitioners (with your consent)
• From third-party providers such as pathology laboratories or supplement suppliers
⸻
Use of Personal and Sensitive Information
I use the personal and sensitive information I collect to:
• Provide Naturopathic and Kinesiology services
• Respond to enquiries
• Monitor client satisfaction
• Improve my services and resources
I may share relevant information with trusted third parties, but only with your consent or where required by law.
⸻
Use of Artificial Intelligence (AI) Tools
I may use AI-assisted tools (such as ChatGPT or similar systems) to support my professional work, including case analysis, pathology interpretation, and treatment planning.
Only information necessary for your care is ever used, and wherever possible, it is de-identified before being entered into these systems.
AI tools are used solely to assist my clinical reasoning — they do not make automated decisions about your care.
I take reasonable steps to ensure that any AI or digital tools I use comply with privacy and data protection standards consistent with the Australian Privacy Principles.
⸻
Third-Party and Cloud Services
I may store and process information using secure, password-protected cloud-based software or other third-party providers (such as booking, communication, or client management systems).
These providers may be located in Australia or overseas (for example, in the United States or Europe).
I take reasonable steps to ensure these providers maintain privacy and confidentiality standards equivalent to Australian law.
Third parties who may access limited information (with your consent) include:
• Other health care providers
• Pathology laboratories
• My client management software provider
• My accountant or solicitor
• Independent contractors such as website or virtual assistants
• Supplement suppliers and distributors
I may also disclose information if required by law (for example, in response to a subpoena or court order) or where there are reasonable grounds to suspect unlawful activity or serious misconduct.
⸻
Website Analytics and Cookies
This website may use analytics tools or cookies to understand visitor activity and improve the website experience.
These tools collect non-identifiable information such as page visits, device type, or general location.
You can disable cookies through your browser settings if you prefer.
⸻
Protecting Your Information
I take all reasonable steps to protect the confidentiality of your personal and sensitive information while it is in my possession or control.
I do not knowingly share your personal or sensitive information with any third party other than service providers who assist me in providing services to you.
Where I share information with service providers, I do so only if they have agreed to maintain privacy and confidentiality standards consistent with this policy.
⸻
Data Breach Response
If a data breach occurs that may result in harm, I will take immediate steps to contain it.
If the breach is likely to result in serious harm, I will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches Scheme.
⸻
Destruction Policy
All archived sensitive information is securely destroyed or deleted after 7 years, unless required by law to be kept longer.
⸻
Notification of Change
If I update this Privacy Policy, the revised version will be posted on this website with the new date noted below.
Last updated: November 2025
