Privacy Policy

Effective date: June 2026

1. We respect your privacy

Nightcap Natural Medicine (“we”, “us”, “our”), operated by Therese Latta, respects your right to privacy. This policy sets out how we collect, use, hold, disclose and protect your personal information.

“Personal information” means information we hold which is identifiable as being about you. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and we handle health information consistent with our professional and record-keeping obligations as a natural medicine practitioner.

2. What personal information we collect

We only collect personal information that is reasonably necessary to provide naturopathic services and to manage our practice and professional obligations, including:

• Identification and contact details (name, address, phone number, email, date of birth)
• Information from enquiries you have made
• Communications between us
• Medical history
• Test results
• Booking and consultation records (held in SimpleClinic)

Health information. Much of the above is health information, which is “sensitive information” under the Privacy Act and is given a higher level of protection. We collect health information only with your consent and only where it is reasonably necessary to provide you with safe and effective naturopathic care. You are not obliged to provide it, but if you choose not to, we may be unable to provide effective treatment.

Purpose of collection: to provide tailored health care plans, manage bookings, and process payments.

3. How we collect your personal information

We collect personal information in a variety of ways, including when you interact with us electronically or in person, when you access our website, when you make a booking, and when we provide our services to you. Where it is reasonable and practicable, we collect personal information directly from you.

4. Use of your personal information

We use your information to provide our services to you, to manage your care and bookings, to process payments, and to improve our services.

We may also notify you of opportunities or health information we think you may be interested in.

Periodically we will send a newsletter via Mailchimp, concerning clinic updates and promotions, and every such communication will include a simple way to opt out / unsubscribe. We do not use your sensitive health information for marketing.

5. Disclosure of your personal information

We do not sell your personal information. We will only use and disclose it for the purpose of providing naturopathic care, except:

• Service providers — third-party providers who assist us in delivering our services may access your information solely for that purpose. These include our online booking platform (SimpleClinic), our website host, our website anti-spam provider (CleanTalk), our telehealth platform (Zoom), and our payment processor (Square).
• Other healthcare providers — where you consent or where reasonably necessary for your care (for example, functional testing laboratories, your GP or specialists).
• Legal compliance — where required or authorised by law, or to protect the safety of you or others (for example, in response to a court order or a serious threat to life, health or safety).

Overseas disclosure. Some of our service providers store or process personal information on servers located outside Australia, including in the United States. Our practice management and booking platform (SimpleClinic) is based in Australia, but it and we rely on overseas providers for functions such as email and marketing (Mailchimp), accounting (Xero), telehealth (Zoom) and payment processing (Square). Where personal information is disclosed overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

6. Security of your personal information

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Information is stored securely, and electronic records are password protected. Payment card details are handled directly by our payment provider (Square) and are not stored by the clinic.

No method of electronic storage or transmission is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security, and any transmission of information to us is at your own risk.

7. Retention of records

We retain clinical and health records for the minimum period required by law and our professional obligations. For adults, this is generally at least 7 years from the date of last contact; for clients who were minors at the time of treatment, records are generally retained until the client reaches 25 years of age. When information is no longer required, we destroy or de-identify it securely.

8. Access to and correction of your personal information

You can request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete or misleading, by contacting th*****@*********nm.au. We may need to verify your identity before processing your request. In the limited circumstances permitted by law where we cannot provide access, we will explain why in writing.

9. Telehealth and online services

Online consultations are conducted using a secure platform (Zoom). You acknowledge the inherent limitations of telehealth and accept that the privacy risks associated with electronic communication cannot be completely eliminated.

10. Our website

When you visit our website. We may collect certain information such as your browser type, operating system, the website visited immediately before ours, IP address, and pages viewed. This information is used in an aggregated manner to analyse how people use our site so we can improve it.

Cookies. Like most websites, we use cookies — small files that help a website recognise you on return visits and remember details about your use of the site. Cookies are not harmful programs and do not damage your device. We use cookies to improve the experience of people using our website. You can disable cookies in your browser settings, though some features may not function correctly as a result.

Third-party sites. Our site contains links to other websites not owned or controlled by us, including social media platforms (Instagram and Facebook). We are not responsible for those sites or their privacy practices, and we encourage you to review their own privacy policies.

11. Your rights

You have the right to:

• request access to your personal information;
• request corrections to inaccurate or outdated information;
• opt out of marketing communications; and
• withdraw consent, where legally permissible.

12. Complaints about privacy

If you have any complaint about our privacy practices, please send details to th*****@*********nm.au. We take complaints seriously and will respond within a reasonable time after receiving written notice.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: https://www.oaic.gov.au
• Phone: 1300 363 992

13. Changes to this policy

We may update this Privacy Policy from time to time. Revised versions will be uploaded to our website, with the effective date shown above, so please check back periodically.

Last updated June 2026.