In short

Your data stays with Monika — nowhere else.

We only collect what we need to deliver safe, professional massage therapy. Your information is stored securely, accessed only by Monika, and never sold or shared with third parties.

Last updated:

Introduction

Monika Bemova trading as Light Waves Therapy (ABN 31 283 131 927), located in Robina, Gold Coast, QLD, is committed to protecting your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and the Privacy Amendment (Notifiable Data Breaches) Act 2017.

This policy explains what information we collect, how we use it, and your rights regarding your data.

What information we collect

Contact information

  • Full name and preferred name
  • Email address
  • Phone number
  • Postal or service address
  • Date of birth

Health information (sensitive personal data)

  • Medical conditions, past and current
  • Medications and allergies
  • Surgeries and injuries
  • Pain symptoms, regions and intensity
  • Family medical history
  • Pregnancy status (if relevant)
  • Emergency contact details

Booking & treatment information

  • Treatment history (dates, services, notes)
  • Preferences (pressure, focus areas, areas to avoid)
  • Booking communications

Consent records

  • Privacy consent
  • Treatment consent
  • Health Intake Form signature and date

How we collect information

We collect information directly from you via:

  • Online booking form (
    lightwavestherapy.com.au/book/
    )
  • Health Intake Form (completed before your first session)
  • Email or phone communication
  • During in-person sessions (notes about treatment)

We do not collect information from third parties.

Why we collect information

Your information is used only to:

  • Provide safe, personalised massage therapy
  • Manage bookings, reminders and cancellations
  • Communicate about your appointments
  • Maintain treatment records as required by AU health practice standards
  • Comply with professional and legal obligations
  • Improve our service (in aggregate, non-identifying form)

How we store and protect your information

  • Health intake data is stored securely in our website database
  • The database is hosted on encrypted servers with regular backups
  • Access to client records is limited to Monika Bemova
  • We use industry-standard security measures (HTTPS, encrypted database, secure authentication)
  • We comply with the Notifiable Data Breaches scheme — if a breach occurs that may cause harm, we will notify you and the OAIC

How long we keep your information

  • Active client records: retained while you are an active client
  • Inactive records: retained for 7 years after your last treatment (consistent with AU health record requirements)
  • After 7 years, records are securely deleted unless legally required to retain longer
  • You can request earlier deletion of your data (see
    Your rights
    below)

Sharing with third parties

We do not sell or share your personal information with third parties for marketing purposes.

We may share information only when:

  • Required by law (court order, subpoena, regulatory investigation)
  • Necessary for your safety (emergency medical situations — sharing with paramedics or doctors)
  • You give explicit consent (e.g., providing treatment notes to your doctor at your request)
  • Service providers processing data on our behalf (e.g., website hosting, email service) — bound by confidentiality

Cookies and website analytics

Our website may use cookies for:

  • Essential functionality (session management, form data persistence)
  • Booking system (remembering form progress)
  • Anonymous usage analytics (aggregate site usage data only)

You can disable cookies in your browser settings. Disabling essential cookies may affect form functionality.

Your rights under Australian Privacy Principles

Under APP 12 and APP 13, you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or outdated information
  • Request deletion of your information (where legally permitted)
  • Withdraw consent for future communications
  • Lodge a complaint if you believe your privacy has been breached

To exercise any of these rights, contact us at:

We will respond within 30 days (typically much sooner).

Complaints

If you believe your privacy has been breached:

  • —
    booking@lightwavestherapy.com.au
    — we'll investigate and respond within 30 days
  • If unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

OAIC

Website: oaic.gov.au / Tel:1300363992

Children's privacy

We do not knowingly collect information from individuals under 18 without parental consent. If you are a parent and believe we have collected your child's information without consent, please contact us immediately and we will delete the records.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the "Last updated" date at the top. Material changes will be communicated to active clients via email.

Contact

Related policies

Terms of ServiceHealth DisclaimerCancellation Policy