Privacy Policy
Effective date: 18th October 2026
1. Our commitment to your privacy
At House Healix, your health, wellbeing and privacy matter.
We understand that seeking healthcare involves sharing personal and sometimes sensitive information. We are committed to treating that information with care, respect and confidentiality.
This Privacy Policy explains how House Healix collects, stores, uses, discloses and protects personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. Information we collect
Depending on your interactions with House Healix, we may collect:
Personal information
Name, date of birth and contact details
Appointment and booking information
Billing, payment and transaction records
Communications and enquiries
Health information
Medical and family health history
Current symptoms, diagnoses and health concerns
Medications and supplements
Dietary habits, lifestyle and physical activity
Relevant pathology and functional testing results
Consultation notes, clinical assessments and treatment plans
Information provided by other healthcare professionals with appropriate authority
We only seek information reasonably necessary for providing our services or operating the practice lawfully.
3. How we collect information
Information may be collected when you:
Book or attend a consultation
Complete an intake or consent form
Contact us by email, telephone or website enquiry
Provide pathology results or medical documentation
Communicate with us during ongoing care
With appropriate consent or other lawful authority, we may also obtain relevant information from your healthcare providers, pathology laboratories or other authorised sources.
4. Why we collect and use information
We collect and use information to:
Assess your nutritional and health needs
Provide individualised clinical nutrition services
Develop and review treatment recommendations
Maintain accurate clinical records
Coordinate care with other healthcare professionals where appropriate
Arrange or interpret relevant testing within our professional scope
Manage appointments, payments and administration
Meet applicable legal and professional obligations
Health information will not be used for unrelated marketing without the appropriate consent.
5. Consent and your choices
We generally collect sensitive health information with your consent, unless collection is otherwise permitted or required by law.
You may decline to provide particular information or withdraw consent for certain future uses or disclosures. However, this may limit our ability to provide appropriate clinical care.
Where lawful and practical, you may interact with us anonymously or using a pseudonym. Identification will generally be necessary for individual clinical consultations.
6. Young People
We see clients aged 13 and over. For clients under 18, we generally require consent from a parent or guardian. Where a young person has sufficient maturity and understanding, we may discuss their health information with them directly and will consider their wishes about what is shared with their parent or guardian, unless sharing is necessary for their safety or required by law
7. Storage and security
House Healix uses Zanda, an Australian practice management system, to store client records, clinical notes, intake forms and booking information. Zanda stores data for Australian accounts in secure data centres located in Australia, with data encrypted both in storage and in transit.
Telehealth consultations are conducted through Zanda’s built-in telehealth system. Calls are encrypted and are not recorded or stored.
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. These steps include password-protected and multi-factor-secured accounts, restricting access to client records to House Healix only, keeping devices secure and up to date, and not storing clinical information in personal email or unsecured locations where avoidable.
If we experience a data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.
8. Sharing information
We do not sell your personal or health information.
Information may be disclosed where appropriate to:
Healthcare practitioners involved in your care, with your consent or other lawful authority
Pathology laboratories and testing providers where relevant and authorised
Technology and administrative service providers that support the practice, including our practice management system (Zanda), payment processors (Square and Stripe), email provider (Google) and website host (Squarespace)
Regulatory or legal authorities where required or permitted by law
Other parties where you have authorised disclosure
Only information relevant to the purpose will be shared, consistent with applicable privacy obligations.
9. Overseas information handling
Clinical records stored in Zanda are held in Australia. However, some service providers we use may store or process limited personal information outside Australia:
Payment processors (Square and Stripe): your name, email address and payment card details may be processed in the United States and other countries where these providers operate.
Email (Google Gmail): emails you send to us, and any information they contain, may be stored on Google servers in the United States and other countries.
Website (Squarespace): information submitted through our website, and technical website data, may be stored in the United States.
Appointment reminders and notifications sent through Zanda: your email address may be processed overseas by Zanda’s email delivery provider.
We use these providers because they are widely used and maintain recognised security standards. We take reasonable steps to ensure they handle personal information consistently with the Australian Privacy Principles.
To reduce overseas handling of sensitive information, we encourage you to share detailed health information through Zanda forms or during consultations rather than by email.
10. Retention and disposal of records
We retain clinical records for at least 7 years after your last consultation. For clients under 18, we retain records until at least the client’s 25th birthday, or for 7 years after the last consultation, whichever is later. We may keep records longer where required by law, insurance or professional obligations, or where there is an ongoing legal matter.
When records are no longer required, we securely destroy or permanently de-identify them.
11. Accessing or correcting information
You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.
Requests can be made using the contact details below.
We will respond within 30 days and explain any lawful reason for refusing access or correction. Any permitted administrative charges will be communicated in advance.
12. Website information and cookies
Our website is hosted by Squarespace. When you visit, Squarespace may collect technical information such as your IP address, browser type, pages visited and time spent on the site, using cookies and similar technologies. We use this information to understand how our website is used and to improve it.
Information you submit through website forms is received by House Healix and stored by Squarespace. Online bookings are made through Zanda, and information entered there is handled as described in section 6.
You can control or block cookies through your browser settings, though some website features may not work as intended.
13. Marketing communications
Where permitted by law, House Healix may send educational updates, newsletters or information about services.
We will obtain consent where required and provide a way to unsubscribe from marketing communications.
Unsubscribing from marketing will not prevent essential appointment or clinical communications.
14. Privacy complaints
If you have concerns about how your information has been handled, please contact House Healix using the details below.
We will acknowledge your complaint, investigate it and aim to provide a response within 30 days.
If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
Website: www.oaic.gov.au
15. Updates to this policy
We may update this policy to reflect changes to our services, technology, business practices or legal obligations.
The current version will be available on our website.
16. Contact us
House Healix
Email: jana@househealix.com.au
Legal entity: ZAK, JANA PETRA
ABN: 32784288652
Location: Western Australia