Privacy Policy
Last updated: 21 July 2026
Raphael Harris, trading as Body & Brain (“Body & Brain”, “we”, “us” or “our”), is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, hold, use, disclose and protect personal information.
Body & Brain aims to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Organisations that provide a health service and hold health information may be covered by the Privacy Act even where they operate as a small business.
1. Personal information we collect
Depending on your interaction with Body & Brain, we may collect:
-
Your full name
-
Email address
-
Telephone number
-
Residential location, suburb or address
-
Preferred contact time
-
Enquiry and consultation details
-
Appointment and booking information
-
Services or treatments you are interested in
-
Responses submitted through online forms
-
Communications between you and Body & Brain
-
Payment and transaction information
-
Website usage and advertising interaction information
-
Other information reasonably necessary to provide our services
We only seek to collect personal information that is reasonably necessary for our business activities and services.
2. Sensitive and health information
Sensitive information includes health information and other information given additional protection under Australian privacy law.
Where reasonably necessary to provide our services, we may collect information concerning:
-
Medical history
-
Existing health conditions
-
Allergies
-
Medications
-
Previous treatments
-
Treatment suitability
Other health information voluntarily provided during an enquiry, consultation or appointment
We will generally collect sensitive or health information with your consent, except where collection is otherwise required or permitted by law.
Our Meta advertising lead forms are intended to collect general contact and enquiry information only. They should not be used to provide detailed medical information.
3. How we collect information
We may collect personal information:
-
Directly from you
-
During consultations and appointments
-
By telephone, SMS or email
-
Through our website
-
Through online booking and enquiry forms
-
Through Facebook and Instagram lead forms
-
Through social-media messages
-
Through cookies, pixels and similar technologies
-
From an authorised representative
-
From service providers acting on our behalf
-
Where required or authorised by law
Where appropriate, we will explain why information is being collected and how it will be used.
4. Why we collect and use information
We may collect, hold and use personal information to:
-
Respond to enquiries
-
Contact you about an offer or service you requested
-
Arrange consultations and appointments
-
Provide information about our services
-
Assess whether a service may be suitable for you
-
Deliver and manage services
-
Send appointment reminders
-
Provide follow-up support
-
Maintain business and client records
-
Process payments
-
Manage complaints and requests
-
Improve our website, systems and services
-
Measure advertising performance
-
Protect our clients, business and technology systems
-
Comply with legal, insurance, professional and regulatory obligations
We will generally use information for the purpose for which it was collected, a related purpose you would reasonably expect, with your consent, or where otherwise permitted by law.
5. Meta lead forms and social-media advertising
Body & Brain may collect personal information through advertising and lead-generation services operated by Meta, including Facebook and Instagram.
When you submit a lead form, Meta may provide Body & Brain with information such as:
-
Your name
-
Email address
-
Phone number
-
Treatment interest
-
Preferred contact time
-
Desired booking timeframe
-
Your answers to qualification questions
We use this information to respond to your enquiry, discuss the advertised offer and assist with arranging a consultation.
Your use of Facebook and Instagram is also governed by Meta’s own privacy policies and terms.
6. Website tracking, cookies and the Meta Pixel
Our website may use cookies, pixels and similar technologies to:
-
Operate and secure the website
-
Understand general website usage
-
Measure advertising performance
-
Improve campaign delivery
-
Identify technical problems
-
Support relevant advertising
Body & Brain will not intentionally configure advertising pixels to transmit medical records, detailed health information or sensitive consultation information to advertising platforms.
Tracking technologies must be used carefully on health-related websites. The Office of the Australian Information Commissioner has recently taken action concerning third-party tracking pixels on health-related websites, so the Meta Pixel should be configured conservatively and tested before launch.
You may restrict cookies through your browser settings, although some website features may not work correctly as a result.
7. GoHighLevel and communications systems
Body & Brain may use customer-relationship-management and communication platforms, including GoHighLevel, to:
-
Store enquiry and contact information
-
Manage leads and appointments
-
Record communication history
-
Send SMS and email messages
-
Deliver appointment reminders
-
Track the status of enquiries
-
Produce campaign and business reports
These systems may process information on behalf of Body & Brain.
8. Med Glow A.I
Body & Brain may authorise Med Glow A.I to process personal information on its behalf for purposes including:
-
Managing advertising campaigns
-
Connecting lead forms to Body & Brain systems
-
Managing CRM records
-
Contacting and following up with leads
-
Assisting with appointment coordination
-
Reporting on advertising and lead outcomes
-
Maintaining marketing automations
Med Glow A.I may only use this information for authorised Body & Brain purposes and must take reasonable steps to protect it.
Medical questions, clinical advice and treatment-suitability decisions will be referred to Body & Brain.
9. Marketing communications
Where permitted, we may send information about Body & Brain services, offers or updates.
You may opt out at any time by:
-
Using the unsubscribe link in an email
-
Replying STOP to an SMS where that option is available
-
Contacting Body & Brain using the details below
Opting out of marketing does not prevent us from contacting you regarding an active enquiry, appointment, transaction or service.
10. Disclosure of personal information
We may disclose personal information to:
-
Authorised staff and contractors
-
Health or service providers involved in delivering requested services
-
Med Glow A.I
-
CRM, email and SMS providers
-
Website, cloud-storage and hosting providers
-
Booking and payment providers
-
Accountants, lawyers, insurers and professional advisers
-
Government bodies, regulators or law-enforcement agencies where required or authorised by law
-
Other parties with your consent
We do not sell personal information.
11. Overseas processing and disclosure
Some technology, advertising, cloud-hosting and CRM providers may store or process information outside Australia, including in the United States and other countries where their systems, staff or subcontractors operate.
Where overseas disclosure occurs, we will take reasonable steps appropriate to the circumstances to ensure personal information is handled consistently with applicable Australian privacy requirements.
12. Security of personal information
We take reasonable steps to protect personal information from:
-
Misuse
-
Interference
-
Loss
-
Unauthorised access
-
Unauthorised modification
-
Unauthorised disclosure
-
Measures may include:
-
Password-protected systems
-
Restricted account access
-
Two-factor authentication where available
-
Secure technology providers
-
Staff and contractor access controls
-
Secure storage and disposal practices
No electronic system is completely secure, but we take reasonable steps appropriate to the nature of the information and the risks involved.
13. Retention and disposal
We retain personal information only for as long as reasonably necessary to:
-
Provide services
-
Manage enquiries and appointments
-
Maintain clinical and business records
-
Resolve complaints or disputes
-
Meet legal, insurance, tax and professional obligations
When information is no longer required, we will take reasonable steps to securely destroy or de-identify it, unless we are legally required to retain it.
14. Accessing and correcting your information
You may request access to personal information we hold about you.
You may also ask us to correct information that is:
-
Inaccurate
-
Incomplete
-
Out of date
-
Irrelevant
-
Misleading
We may require proof of identity before processing a request.
We will not charge for making an access request. In limited circumstances, we may charge a reasonable administrative fee for providing copies or completing extensive retrieval work, where legally permitted.
If we refuse access or correction, we will generally provide written reasons where required by law.
15. Privacy complaints
You may contact us if you have concerns about how your personal information has been handled.
Please include enough information for us to understand and investigate your concern. We will aim to acknowledge and respond within a reasonable timeframe.
Where you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.
16. Data breaches
If a suspected data breach occurs, we will take reasonable steps to:
-
Contain the incident
-
Assess what happened
-
Reduce potential harm
-
Improve safeguards
-
Determine whether notification is legally required
Where the Notifiable Data Breaches scheme applies and a breach is likely to cause serious harm, we may notify affected individuals and the Office of the Australian Information Commissioner.
17. Third-party websites
Our website or communications may contain links to third-party websites.
Body & Brain is not responsible for the privacy practices, security or content of external websites. You should review the privacy policy of any third-party website you use.
18. Changes to this Privacy Policy
We may update this Privacy Policy when our services, technology, legal obligations or business practices change.
The current version will be made available on our website and will display the date it was last updated.
19. Contact details
For privacy questions, complaints, access requests or correction requests, contact:
Raphael Harris, trading as Body & Brain
Address: 4/106 Brisbane Street, Ipswich QLD 4305, Australia
Email: raphaelmharris@gmail.com
Phone: +61 433 489 501
Website: https://www.bodyandbrain.com.au