Privacy Policy

Parties:

You will be referred to throughout this Privacy Policy as (“you” or “your”).

BlackBelt Rehab
ABN 66 387 785 500,
operated by B&K Rebello Pty Ltd (ACN 617 166 757) as trustee for the B&K Rebello Family Trust,
will be referred to throughout this document as the (“Organisation”), (“us”), (“we”) or (“our”).

Overview:

The Organisation understands the importance people place on their personal and health information being handled appropriately. Personal information collected by us is treated with a high degree of privacy, confidentiality, and security.

This Privacy Policy is intended to provide you with a general explanation of how we may collect, store, use, and disclose your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This Privacy Policy should be read in conjunction with any other terms and conditions that appear in or are linked to the Organisation’s website.

Amending this Privacy Policy:

This Privacy Policy was last amended on 05/01/2026 and will be reviewed and updated from time to time to ensure that it reflects our current information-handling practices and any relevant legislative changes.

The Organisation reserves the right to amend this Privacy Policy at any time, with such amendments to take effect from the date of publication of the amended policy on our website (www.blackbeltrehab.physio).

Jurisdiction:

This Privacy Policy is subject to the laws of Queensland, Australia (the “Jurisdiction”). You submit to the exclusive jurisdiction of the courts of the Jurisdiction. This applies regardless of your location when accessing our website or website content.

Collection of information:

We may collect personal information that is reasonably necessary for, or directly related to, one or more of our services or activities, or where required under relevant law or regulation.

The primary purpose for which we collect personal information is to provide physiotherapy and allied health services and to deliver the best possible service experience to you.

The type of personal information we may collect includes, but is not limited to:

Your name, address, date of birth, telephone number, and email address
Health information, including medical history, injury details, assessment findings, treatment notes, clinical records, and progress notes
Referral information from medical practitioners or other health professionals
Health fund, Medicare, DVA, NDIS, insurance, and payment details
Appointment history, attendance records, and billing information
Information submitted through online booking systems, intake forms, consent forms, and questionnaires
Communications and correspondence we have had with you
Occupation and work-related information where relevant to treatment
Information provided in the event that you apply for a position with us

Health information is classified as sensitive information under the Privacy Act 1988 (Cth) and is afforded a higher level of protection.

This information is treated as confidential and will only be used by the Organisation or its related service providers in accordance with this Privacy Policy.

We generally collect personal information directly from you or your authorised representative through:

Online bookings and forms submitted via Cliniko
Digital consent and intake forms via Finger-Ink and Cliniko
In-person consultations
Telephone, email, and electronic communications
Referrals from other healthcare providers
Our AI receptionist and AI-assisted clinical note-taking tools, used to support administrative and clinical documentation processes

We use AI-assisted tools to support practice operations, including appointment handling, general enquiries, and clinical documentation. These tools operate under strict confidentiality obligations. AI systems do not replace clinical judgment, and all clinical records are reviewed and approved by a registered health practitioner.

Where AI tools process personal or health information, they do so solely for the purpose of providing healthcare services and practice operations.

There may be instances where personal information about you is collected from a third party, a publicly available source, or by other lawful means, but only where:

(i) you have provided your consent, or you would reasonably expect us to collect the information;
(ii) it is necessary for a function or activity related to your dealings with the Organisation; and/or
(iii) we are permitted or required to do so by law.

You may choose to remain anonymous or use a pseudonym when dealing with the Organisation, except where this is impractical or where the law requires identification (including for the provision of healthcare services).

If the personal information you provide is incomplete or inaccurate, we may be unable to provide you with the requested services or information.

Separate guidelines apply to information held in relation to the Organisation’s own staff.

Storage of information:

We may store your personal information in hard-copy or electronic form and keep it in storage facilities that we own or that are owned and operated by third-party service providers.

We use secure, cloud-based practice management and digital systems, including software used for clinical records, bookings, communications, and practice administration, which may store or process information on servers located outside Australia. Reasonable steps are taken to ensure that such providers maintain privacy and security standards consistent with Australian privacy law.

Internet users:

If you access our website or social media platforms, we may collect additional information such as your IP address, domain name, and usage data.

Our website uses cookies. Cookies assist us in identifying users, analysing website traffic, and improving website functionality. Cookies do not personally identify you, although they may be linked to a database record relating to you.

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites, which are not subject to this Privacy Policy.

How we deal with unsolicited information:

If we receive unsolicited personal information and determine that we could not have collected it for one or more of our functions or activities, we will take reasonable steps to de-identify or destroy the information, unless retention is required or authorised by law.

Use and disclosure of personal information:

The personal information we collect, and hold depends on your interaction with us. We will generally only collect and use personal information where it is reasonably necessary to establish and maintain a relationship with you.

We may use personal and sensitive information for the purpose for which it was collected, or for a related secondary purpose, including:

(i) providing healthcare and related services;
(ii) facilitating internal business operations;
(iii) communicating with you about appointments, treatment, and services;
(iv) analysing and improving our services; and/or
(v) where required or authorised by law.

We do not sell personal information.

We may disclose personal information where:

(i) you would reasonably expect the disclosure;
(ii) the disclosure is required or authorised by law; and/or
(iii) the disclosure falls within a permitted situation under the Privacy Act 1988 (Cth).

We may disclose personal information (including sensitive information) to overseas recipients, including cloud-based service providers and IT service providers, for the purposes outlined above.

Protection of information:

We take reasonable and practicable steps to ensure that personal information is accurate, up-to-date, complete, and protected from misuse, interference, loss, unauthorised access, modification, or disclosure.

When personal information is no longer required, we will take reasonable steps to securely de-identify or destroy it.

Sale of the business:

If the Organisation merges with, is acquired by, or sells part or all of its assets, personal information may be disclosed to advisers and prospective purchasers, subject to confidentiality obligations and continued application of this Privacy Policy.

Accessing your personal information:

You may request access to personal information we hold about you by submitting a written request. Requests will be responded to within a reasonable timeframe, subject to exceptions permitted under the Privacy Act 1988 (Cth).

A reasonable fee may apply where access requires substantial administrative effort.

Correcting your personal information:

You may request correction of personal information that is inaccurate, incomplete, or out of date by contacting info@blackbeltrehab.physio. Requests will be actioned within a reasonable timeframe where appropriate.

If you have questions, concerns, or complaints regarding this Privacy Policy or our handling of personal information, please contact:

BlackBelt Rehab
2/7 Saleya Drive
Varsity Lakes QLD 4227
Email: info@blackbeltrehab.physio

If your concerns are not resolved, you may contact the Office of the Australian Information Commissioner on 1300 363 992.