Privacy

Privacy Policy

Last updated: 6 August 2026

Nat Concepts Pty Ltd (ABN 88 681 267 309), trading as Natures Concepts, is committed to protecting your privacy. In this policy, “we” and “us” mean Nat Concepts Pty Ltd. This policy explains what personal and health information we collect, why we collect it, how we store it, and how you can access or correct it.

As a health service provider, we are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles regardless of our size, and by the Health Records and Information Privacy Act 2002 (NSW) and its Health Privacy Principles.

What we collect

We collect information you provide directly, including:

• Contact details — name, date of birth, address, phone number and email address.
• Health information — your health history, symptoms, diet and lifestyle, medications and supplements, family history, pathology or imaging results you provide, and notes made during consultations. Health information is classified as sensitive information and receives a higher level of protection.
• Payment information — records of payments made. Card details are handled by our payment provider and are not stored by us.

We collect this from you directly — through the Wellness Check Questionnaire, during consultations, by phone or email, and through our online booking system.

Why we collect it

To provide naturopathic care, to make clinical decisions appropriate to your circumstances, to contact you about appointments, to issue invoices and receipts, and to meet our record-keeping obligations.

We collect health information only with your consent, which you give by attending an appointment and providing that information. You may withdraw consent at any time, though this may limit the care we can provide.

Who we share it with

We do not sell your information and we do not disclose it to third parties for their marketing purposes.

We may disclose your information:

• To your GP, specialist or another practitioner, only with your consent.
• To our practice management software provider, who stores appointment and clinical records on our behalf.
• Where required or authorised by law.
• Where necessary to lessen or prevent a serious threat to life, health or safety.

Marketing

We do not use your contact details to send you marketing material. If that ever changes, any such message will clearly identify us and include a simple way to opt out. You can tell us at any time that you do not wish to receive anything beyond appointment-related contact, and we will act on that.

How we store and protect it

Clinical records are held in our practice management system. Access is limited to Nathan Forbes and any person he authorises to assist with practice administration, each bound by an obligation of confidentiality. Paper records, where they exist, are kept securely at the clinic.

Our website, email and clinical records are held on servers located in Australia. Our practice management provider engages a small number of third-party service providers, some of which are located overseas, including in the United States. Where that occurs, those providers are required to protect your information to a comparable standard.

Children and young people

Where we treat a child, we generally collect their information from a parent or guardian, and a parent or guardian may access and correct that information on the child’s behalf.

As young people mature, they may be capable of making their own decisions about their health information. Where we consider a young person has that capacity, we will respect their wishes about who their information is shared with, including in relation to a parent or guardian.

How long we keep it

Under NSW law we are required to retain health records for at least seven years from the date of your last consultation. For patients who were under 18 at the time of their last consultation, records are retained until they turn 25.

After that period, records are securely destroyed or de-identified.

Accessing and correcting your information

You can ask to see the information we hold about you, and to have anything inaccurate corrected. Contact us using the details below. We will respond within a reasonable time, and will explain our reasons if we are unable to provide access in a particular case.

This website

Our website does not require you to provide personal information to browse it. Appointments are booked through a third-party booking system, which has its own privacy policy governing information you enter there.

Our website may use cookies for basic functionality, and we may use website analytics to understand how the site is used. Analytics information is aggregated and is not used to identify individual visitors or linked to your clinical records. You can disable cookies in your browser settings, though some features may not work as intended.

Data breaches

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

Complaints

If you have a concern about how we have handled your information, please raise it with us first — contact details below — and we will respond within 30 days.

If you are not satisfied with our response, you can contact:

• The Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.
• The NSW Information and Privacy Commission at ipc.nsw.gov.au or 1800 472 679.

Contact us

Nathan Forbes ND
Natures Concepts
Unit 18/13 Digitaria Dr, Gledswood Hills NSW 2557
0425 292 839
nathan@naturesconcepts.com.au

Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the date it was last updated shown at the top.