Privacy Policy
The Magic Bean Naturopath
Last updated: 3 September 2026
The Magic Bean Naturopath respects your privacy and is committed to protecting the personal and health information you provide to us.
This Privacy Policy explains how we collect, hold, use and disclose your personal information when you visit our website, contact us, book an appointment or receive naturopathic services from us.
The Magic Bean Naturopath operates in Brisbane, Queensland, Australia.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), to the extent they apply to us.
1. What is personal information?
Personal information is information or an opinion about an individual who is reasonably identifiable.
Because we provide naturopathic health services, the information we collect may include health information, which is considered sensitive information under Australian privacy law.
2. What information do we collect?
Depending on the services you use, we may collect:
your name and contact details, including address, telephone number and email address;
date of birth or age;
information necessary to arrange and manage your appointments;
billing and payment information;
information about your health, symptoms and health concerns;
medical and health history;
information about medications, supplements and other treatments;
information about allergies, intolerances and relevant lifestyle factors;
information about pathology, test results or other health information that you provide to us;
information relevant to your naturopathic assessment and treatment;
information contained in correspondence between you and us;
information about products or treatments recommended or supplied to you;
information required for shipping products to you; and
any other information that you voluntarily provide to us that is reasonably necessary for providing our services.
We only seek information that is reasonably necessary for the purposes for which we collect it.
3. How do we collect your information?
We may collect information:
directly from you when you book an appointment;
during consultations;
through forms or questionnaires you complete;
when you contact us by telephone, email, text message or other communication method;
when you make a payment;
when you provide health records, test results or other information to us;
through our online booking and practice-management platform, Halaxy;
through third-party services used to arrange or supply products or treatment recommendations, including Ariya Health; and
from another person or healthcare provider where you have authorised them to provide information to us, or where permitted or required by law.
Where reasonably practicable, we collect health information directly from you.
4. Why do we collect and use your information?
We collect and use your information for purposes including:
arranging and managing appointments;
providing naturopathic consultations and health services;
assessing your health and health goals;
developing and documenting your naturopathic treatment plan;
communicating with you about your care;
preparing treatment recommendations and, where appropriate, treatment scripts or product orders;
arranging the supply and delivery of products;
processing payments and managing deposits, cancellations and refunds;
maintaining accurate clinical and administrative records;
complying with our legal and professional obligations;
responding to enquiries and complaints;
managing our business and accounts;
preventing fraud, misuse or security incidents; and
other purposes that you would reasonably expect in connection with providing our services.
We may also use your personal information where required or authorised by law.
5. Health information
Health information is particularly sensitive.
We will only collect, use and disclose your health information in accordance with applicable privacy laws and for purposes reasonably connected with providing and managing your health services, unless another use or disclosure is authorised or required by law or you have otherwise consented.
You should provide us with information that is accurate and complete and tell us about relevant changes to your health, medications, supplements, allergies or other circumstances that may affect your care.
6. Disclosure to other healthcare providers
We will not generally disclose your health information to another healthcare provider without your consent unless the disclosure is otherwise permitted or required by law.
For example, where appropriate, you may ask us to provide relevant information to your GP or another healthcare professional involved in your care.
If we believe disclosure is necessary to prevent a serious threat to your life, health or safety and it is not practicable to obtain your consent, information may be disclosed where permitted by law.
7. Third-party service providers
We use third-party providers to help us operate our practice and provide services to you.
These providers may include:
Halaxy
We use Halaxy Pty Ltd for booking, practice management, health records and related services.
Halaxy may collect and store information including contact information, billing information and health information recorded in your patient record.
Halaxy states that patient data is stored in Australia, but that personal information may be disclosed to recipients located outside Australia in certain circumstances, including through particular integrations and service providers.
Halaxy also uses third-party service providers and subprocessors in connection with its services.
For further information, you should review Halaxy's current privacy policy and collection notice.
Ariya Health
We may use Ariya Health ACN 164 519 528 in connection with treatment scripts, product recommendations, ordering and supply of products.
Ariya Health may collect personal information required to provide goods and services to you.
Ariya Health states that it may collect sensitive information where necessary for a lawful purpose, including providing its services, and that it may transfer personal information overseas in circumstances permitted by its privacy policy.
For further information, you should review Ariya Health's current privacy statement.
Other service providers
We may also use other service providers for functions such as:
payment processing;
website hosting and technical services;
email and communications;
appointment reminders;
accounting;
shipping and delivery; and
information technology and security.
We will take reasonable steps to ensure that third parties handling personal information on our behalf do so in a manner consistent with applicable privacy requirements.
8. Overseas disclosure
Some third-party technology and service providers we use may be located outside Australia or may use infrastructure located outside Australia.
As a result, your personal information may be disclosed to or accessed by overseas recipients where reasonably necessary to provide our services or operate our business.
Depending on the services used, overseas recipients may be located in countries including the United States and other countries in which our service providers operate.
Where we disclose personal information overseas, we will take reasonable steps to comply with our obligations under the Australian Privacy Principles.
9. Payment information
Payments for appointments may be processed through Halaxy and/or its payment-processing providers.
We do not ordinarily need to retain your complete credit or debit card details ourselves.
Payment providers may collect and process payment information in accordance with their own privacy policies and terms.
10. Website information and cookies
When you visit our website, certain technical information may be collected automatically, such as your IP address, browser type, device information and information about how you interact with the website.
We may use cookies and similar technologies to help operate the website, remember preferences, understand website usage and improve our services.
You may be able to control cookies through your browser settings. Disabling cookies may affect some website functionality.
Where information collected through cookies or similar technologies constitutes personal information, we will handle it in accordance with applicable privacy laws.
11. Direct marketing
We may send you information about our services where permitted by law.
We will not use your health information for direct marketing unless we have obtained any consent required by law.
You can ask us to stop sending you marketing communications at any time.
12. How we store and protect your information
We may hold personal information electronically and, where applicable, in physical records.
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure.
These measures may include appropriate security controls, access restrictions, secure systems and the use of reputable third-party service providers.
However, no electronic storage or transmission system can be guaranteed to be completely secure.
13. How long do we keep your information?
We retain personal and health information for as long as reasonably necessary to provide our services, meet our legal and professional obligations, resolve disputes and maintain appropriate business and clinical records.
Where information is no longer required, we will take reasonable steps to securely destroy or de-identify it, subject to any legal or professional record-keeping requirements.
14. Accessing your information
You generally have a right to request access to personal information we hold about you.
You can contact us to request access to your information.
We may need to verify your identity before providing access.
In some circumstances, the law allows or requires us to refuse access to particular information. If this occurs, we will explain the reason where we are legally permitted to do so.
15. Correcting your information
We take reasonable steps to ensure that personal information we hold is accurate, complete and up to date.
If you believe information we hold about you is inaccurate, incomplete or out of date, please contact us and request a correction.
We will consider your request and take reasonable steps to correct information where appropriate.
16. Privacy complaints
If you have a concern or complaint about how we have handled your personal information, please contact us first so that we can investigate and attempt to resolve the matter.
Please provide sufficient information for us to understand your concern.
We will acknowledge and investigate your complaint and aim to respond within a reasonable period.
If you are not satisfied with our response, you may have the right to make a complaint to the Office of the Australian Information Commissioner (OAIC).
17. Anonymity and pseudonymity
You may contact us generally without identifying yourself where it is lawful and practicable to do so.
However, it may not be practicable to provide a naturopathic health service without identifying you, particularly where we need to create and maintain a clinical record, process a payment, arrange products or communicate with you about your care.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal obligations or services.
The current version will be published on our website and will include the date it was last updated.
19. Contact us
If you have questions about this Privacy Policy, wish to access or correct your information, or wish to make a privacy complaint, please contact:
The Magic Bean Naturopath
Brisbane, Queensland, Australia
Email: tia@themagicbean. com.au
Website: themagicbean.com.au
You can also contact the relevant third-party provider directly about information they hold in their own systems.
Privacy Policy last updated: 3 September 2026