Last updated: September 2026

​

MD Exercise Physiology is committed to protecting your privacy and handling your personal and health information responsibly.

This Privacy Policy explains how we collect, use, store and disclose personal information when you use our website, contact us or receive services from MD Exercise Physiology.

​

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where applicable, we also comply with relevant state health privacy legislation, including the Health Records Act 2001 (Vic).

​

Information we collect

​

We may collect personal information including your:

​

• Name, date of birth and contact details

• Address and emergency contact information

• Health history, medical conditions, injuries, symptoms and treatment information

• Referral information and details provided by your GP, specialist or other health professional

• Exercise, movement and assessment information

• Appointment and attendance information

• Medicare, DVA, NDIS, WorkCover, TAC, ReturnToWorkSA, private health or other funding information where relevant

• Payment and billing information

• Information submitted through our website, contact forms, booking systems or correspondence

• Website usage information such as device information, browser type and pages visited.

• Health information is considered sensitive information and is handled with additional protections under Australian privacy law.

​​

How we collect information

​

We generally collect information directly from you when you:

​​

• Book or attend an appointment

• Complete a registration or health questionnaire

• Contact us by phone, email, website form or in person

• Use our online booking system

• Participate in an assessment or Exercise Physiology program.

• With your consent, or where otherwise permitted by law, we may also receive information from your GP, specialist, allied health provider, insurer, funding body, representative or other healthcare professional.

 

Why we collect your information

 

We collect and use information where reasonably necessary to:

​

• Provide Exercise Physiology and related health services

• Assess your health, movement, physical capacity and exercise needs

• Develop, monitor and adjust your exercise program

• Manage appointments and communicate with you

• Process payments, rebates, referrals and funding arrangements

• Communicate with other healthcare providers involved in your care where appropriate

• Meet clinical, insurance, legal and regulatory requirements

• Respond to enquiries and complaints

• Improve our services and website

• Send service updates or marketing communications where you have consented or where permitted by law.

​

Sharing your information

​

We may disclose personal information where reasonably necessary to provide or administer your care, including to healthcare professionals, referring practitioners, insurers, government funding agencies and other authorised parties.

​

We may also use trusted third-party service providers for services including website hosting, online bookings, communications, analytics, secure data storage and payment processing.

​

We do not sell your personal or health information.

​

We will not disclose your health information for an unrelated purpose unless you have consented or the disclosure is otherwise permitted or required by law.

 

Online bookings and third-party services

​

Our website may connect to third-party platforms, including online booking, website hosting, analytics and communication services.

These providers may collect or process information in accordance with their own privacy policies and contractual arrangements with us.

Some technology providers may store or process information outside Australia.

​

Australian Privacy Principle 1 specifically requires an organisation to state whether overseas disclosure is likely and, where practicable, identify the relevant countries.

​

Website analytics and cookies

​

Our website may use cookies and similar technologies to understand how visitors use the website, improve performance and measure marketing activity.

This may include analytics services that collect information such as pages visited, approximate location, device type, browser information and referral source.

You can control cookies through your browser settings. Disabling some cookies may affect how parts of the website operate.

​

Marketing communications

​

We may send email or SMS marketing where you have provided consent or where otherwise permitted by law.

You can unsubscribe at any time using the unsubscribe option provided or by contacting us.

Australian businesses sending commercial email or SMS generally need consent, must identify the sender and must provide a functional way to unsubscribe.

​

Storage and security

​

We take reasonable steps to protect personal and health information from misuse, interference, loss, unauthorised access, modification or disclosure.

Information may be stored electronically or in physical records using systems and providers appropriate to the nature of the information.

Where information is no longer required, we will securely destroy or de-identify it where legally permitted and subject to applicable health record retention requirements.

​

Private health providers covered by the Privacy Act are also subject to the Notifiable Data Breaches scheme where an eligible breach is likely to cause serious harm.

​

Accessing or correcting your information

​

You may request access to personal or health information we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.

We may need to verify your identity before processing a request.

In some circumstances, access may be restricted or refused where permitted by law. If this occurs, we will explain the reason where required.

Victorian private health service providers are also subject to specific rights of access under the Health Records Act 2001.

​

Privacy complaints

​

If you have a question or concern about how we have handled your personal information, please contact us first so we can investigate and respond.

​

If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner or the relevant state health privacy regulator.

​

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal obligations or information-handling practices.

The current version will be published on this website.