Privacy Policy
Amber Carter Healing
ABN 39 691 874 757
Trading as Amber Carter Naturopath
Last updated: September 2026
Amber Carter Healing, trading as Amber Carter Naturopath, respects your privacy and is committed to protecting your personal and health information.
As a health service provider, we handle personal and sensitive health information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and other applicable privacy requirements.
This Privacy Policy explains what information we may collect, why we collect it, how it may be used and disclosed, and how you can access, correct or raise concerns about your information.
1. Information we may collect
To provide naturopathic and related health services, we may collect personal information including:
your name, date of birth and contact details
address and emergency contact details
appointment and booking information
payment and transaction information
health and medical history
current and previous symptoms and health concerns
medications and supplements
allergies and adverse reactions
dietary, lifestyle and relevant family health information
pathology, functional testing and other investigation results
information supplied by your GP, nurse practitioner, specialist, allied health practitioner or other healthcare provider
clinical notes, treatment plans and correspondence
photographs or other information relevant to your care, where appropriate
communications you send to us by email, SMS, WhatsApp, website forms or other channels.
Because health information is sensitive information, we take particular care when collecting, using and storing it.
We generally collect health information with your consent and where it is reasonably necessary to provide our services or otherwise permitted or required by law.
2. How we collect information
We generally collect information directly from you, including when you:
make an appointment
complete an intake or consent form
attend an in-person or Telehealth consultation
communicate with us by phone, email, SMS or WhatsApp
complete a website enquiry or contact form
purchase a product or service
subscribe to our mailing list
provide pathology, test results or other health documentation.
With your consent, or where otherwise permitted by law, we may also receive information from other healthcare practitioners, pathology or testing providers, parents or guardians, and other people involved in your care.
3. Why we collect and use your information
Your personal and health information may be collected and used to:
provide naturopathic and other health services
assess your health history, symptoms and health goals
develop and review treatment plans
monitor your progress
arrange or interpret pathology and functional testing
communicate with other healthcare practitioners involved in your care
manage appointments, reminders and follow-up
process payments and maintain appropriate financial records
respond to enquiries
provide products or services you have requested
meet our professional, insurance, legal and regulatory obligations
improve the administration and delivery of our services.
If we are unable to collect information reasonably necessary for your care, we may not be able to provide some services safely or effectively.
4. Storage and security of your information
Clinical records and relevant personal information are primarily managed using SimpleClinic and other service providers used to operate the practice.
We take reasonable steps to protect the personal information we hold from misuse, interference, loss, unauthorised access, modification and disclosure.
These measures may include password-protected systems, access controls, secure practice-management software and appropriate physical and electronic safeguards.
Where information is no longer required to be retained, we will take reasonable steps to securely destroy or de-identify it, subject to applicable legal, professional and record-keeping requirements.
No method of electronic storage or communication is completely secure, and absolute security cannot be guaranteed.
5. Pathology, functional testing and referrals
As part of your care, and with appropriate consent or where otherwise permitted by law, information may be provided to pathology laboratories, functional testing providers and other healthcare professionals.
Providers we may work with include NutriPATH, InterClinical Laboratories and Microba, as well as nurse practitioners, GPs, specialists and other healthcare practitioners involved in your care.
Only information reasonably necessary for the relevant test, referral or healthcare service will be shared.
Results received from these providers may form part of your clinical record.
6. Children and young people
We provide services to children and young people and may collect health and personal information about them from a parent or legal guardian.
We will handle this information with the same care and confidentiality as other health information.
Where appropriate, we may also communicate directly with a young person and consider their age, maturity, capacity, privacy and individual circumstances when determining how their information should be handled.
7. Payments
Payments may be processed through SimpleClinic or accepted in clinic via EFTPOS or cash.
Where third-party payment providers are used, those providers may collect and process payment information in accordance with their own privacy policies and security practices.
We generally do not retain complete payment card details ourselves where these are processed by an external payment provider.
8. Email, SMS and WhatsApp
We may communicate with you via email, telephone, SMS and WhatsApp Business for appointment administration, general enquiries and other practice-related communication.
Electronic communication carries inherent privacy and security risks. We therefore recommend avoiding sending highly sensitive or urgent medical information through these channels where possible.
WhatsApp, SMS and email are not intended to replace consultations or emergency medical care.
Clinically relevant information received through these channels may be added to your health record where appropriate.
9. Website, cookies and analytics
When you visit ambercarter.com.au, certain technical information may be collected automatically, such as your browser type, device information, pages visited and general website usage information.
The website may use cookies, analytics and similar technologies to understand how visitors use the website, improve functionality and measure website performance.
You can control or disable cookies through your browser settings, although doing so may affect some website functionality.
Information may also be collected when you submit an enquiry form, subscribe to communications, make a purchase or follow a link to an external booking or service provider.
10. Email marketing
If you choose to subscribe to our mailing list or otherwise provide appropriate consent, we may send you health education, practice updates, offers, events, products or other marketing communications.
Email marketing may be managed using Mailchimp.
You may unsubscribe at any time by using the unsubscribe link included in marketing emails or by contacting us.
We will not use your health information for direct marketing without your consent.
11. Testimonials, reviews, photographs and case studies
We may occasionally share testimonials, reviews, photographs, case studies or client experiences for educational or marketing purposes.
We will seek appropriate consent before using identifiable personal or health information for these purposes.
Where possible and appropriate, case information may be de-identified.
Providing consent for marketing use is voluntary and is not a condition of receiving care.
12. Disclosure of information
We do not sell your personal or health information.
We may disclose relevant information where reasonably necessary to provide our services, including to:
pathology and functional testing providers
nurse practitioners, GPs, specialists and other healthcare practitioners involved in your care
practice-management, technology, website, communication and payment service providers
professional advisers or insurers where reasonably necessary
government, regulatory, law enforcement or other authorities where required or authorised by law.
Health information may also be disclosed in circumstances permitted by privacy law, including where necessary to lessen or prevent a serious threat to life, health or safety and obtaining consent is not practicable.
13. Overseas service providers
Some third-party services used by the practice, including website, email, communications, analytics, cloud or technology providers, may store, process or make information accessible outside Australia.
Where personal information is likely to be disclosed to an overseas recipient, we will handle that disclosure in accordance with applicable Australian privacy requirements.
The countries involved may vary depending on the service providers and infrastructure being used from time to time.
14. Accessing or correcting your information
You may request access to personal information we hold about you or ask us to correct information you believe is inaccurate, out of date, incomplete, irrelevant or misleading.
Requests can be made by contacting:
Amber Carter Healing
Trading as Amber Carter Naturopath
Email: health@ambercarter.com.au
We may need to verify your identity before providing access to health or personal information.
In some circumstances, access may be limited or refused where permitted by law. If this occurs, we will generally explain the reason where we are legally able to do so.
15. Privacy concerns and complaints
If you have a question or concern about how your personal or health information has been handled, please contact:
Amber Carter Healing
Trading as Amber Carter Naturopath
Email: health@ambercarter.com.au
We will take privacy concerns seriously and aim to investigate and respond within a reasonable timeframe.
If you are not satisfied with our response, you may be able to make a complaint to the Office of the Australian Information Commissioner (OAIC).
16. Data breaches
If a data breach involving personal information occurs, we will assess and respond to the breach in accordance with applicable privacy law, including the Notifiable Data Breaches scheme where applicable.
Where notification is required, affected individuals and the Office of the Australian Information Commissioner will be notified in accordance with the law.
17. Third-party websites
Our website may contain links to third-party websites, booking systems, laboratories, social media platforms or other external services.
We are not responsible for the privacy practices of external websites or services and recommend reviewing their privacy policies before providing personal information.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practice, services, technology or legal obligations.
The most current version will be available at ambercarter.com.au.
Contact
For questions, requests or concerns regarding privacy, please contact:
Amber Carter Healing
Trading as Amber Carter Naturopath
ABN 39 691 874 757
Email: health@ambercarter.com.au
Website: ambercarter.com.au