Privacy Policy

Your privacy is very important to us, and we are committed to maintaining your trust and confidence. This Privacy Policy provides detailed information on when and why we collect your personal information, how we use it, the limited conditions under which we may disclose it, and how we keep it secure.

We aim to make your experience with us enjoyable, rewarding, and confident in how we handle your information.

About Us and Your Use of Our Service

This Privacy Policy explains the collection, use, and disclosure of your personal data when you use fitrightwomenshealth.au and other web pages hosted on third-party platforms (the “Service”).

The Service and its content are owned and managed by FitRight Group Pty Ltd and FitRight HQ Applecross Pty Ltd (“Company”, “we”, “us”, or “our”). The term “you” or “your” refers to the user or viewer of the Service.

By using our Service, signing up for or purchasing products or services, or submitting any information through it, you consent to the terms of this Privacy Policy. If you do not agree with these terms, please do not access or use our Service.

Definitions

Service
The fitrightwomenshealth.au website and other web pages hosted on third-party platforms operated by FitRight Group Pty Ltd and FitRight HQ Applecross Pty Ltd.

Personal Data
Data about a living individual who can be identified from that data, either alone or in combination with other information in our possession.

Sensitive Information / Health Information
A subset of Personal Data that includes health information, such as medical history, physical condition, and health service records. Under the Australian Privacy Act 1988, health information is treated as sensitive information and is afforded a higher level of protection. We collect health information only with your explicit consent and only as necessary to provide our services.

Usage Data
Data collected automatically through the use of the Service or its infrastructure (e.g. browser type, page navigation activity).

Cookies
Small data files stored on your device (computer or mobile) that help websites function and improve user experience.

Data Controller
The person or entity responsible for determining the purpose and means of processing personal information. We act as the Data Controller of your Personal Data.

Data Processor (or Service Provider)
A third party that processes data on behalf of the Data Controller.

Information Collection and Use

When you access our Service, we collect various types of information to provide and improve our Service.

1. Information You Provide to Us

You may provide personally identifiable information when:

• Filling out forms or booking appointments
• Communicating via email or social media
• Responding to surveys or feedback requests
• Leaving reviews or testimonials
• Purchasing products or services
• Registering for classes or online programs
• Attending consultations (in-person or via telehealth)

Personal Data may include:

• Email address
• First and last name
• Phone number
• Shipping and/or billing address
• Health information including medical history, physical condition, symptoms, and treatment details (see Health Information section below)

We use this information to:

• Provide and maintain our Service
• Deliver health and fitness services
• Notify you of updates or appointment reminders
• Support your account
• Improve performance and resolve issues
• Send relevant offers and information (you can opt out at any time)

2. Health Information

As a women’s health provider, we collect sensitive health information including but not limited to: pelvic floor health details, pregnancy and postnatal status, medical history, physical conditions, and physiotherapy assessment results.

We collect this information only with your explicit consent, and only to the extent necessary to provide our services. This information is used to:

• Provide appropriate and safe health and exercise services
• Enable our physiotherapists, exercise physiologists, and other health professionals to deliver care
• Maintain accurate health records as required by law

Health information is stored securely and is accessible only to authorised clinical staff involved in your care. We do not use health information for marketing purposes without your separate explicit consent.

2.1 Use of Artificial Intelligence (AI) Clinical Documentation Tools

To assist our practitioners in delivering efficient and accurate healthcare services, we may use artificial intelligence (AI)-powered clinical documentation tools, including but not limited to Heidi Health, Lyrebird Health, and i-scribe.

These tools may assist with recording and summarising information discussed during consultations, generating draft clinical notes, preparing documentation, and supporting administrative tasks. The use of these tools allows our practitioners to spend more time focusing on patient care and less time on manual note-taking.

Where AI tools are used:

• Information discussed during your consultation may be processed by the AI software for the purpose of generating clinical documentation.
• Clinical notes generated by AI are reviewed, edited where necessary, and approved by your treating practitioner before being added to your health record.
• AI-generated content is not used to make clinical decisions without review by a qualified healthcare professional.
• We only use AI providers that are designed for healthcare settings and that have contractual obligations regarding privacy, confidentiality, and data security.
• Personal and health information processed through these systems is handled in accordance with applicable Australian privacy laws and health records legislation.

We take reasonable steps to ensure that any AI service providers we engage maintain appropriate security measures and comply with relevant privacy and confidentiality requirements. However, as with any technology provider, information may be processed using secure cloud-based systems, which may involve storage or processing in jurisdictions outside Australia. Where this occurs, we take reasonable steps to ensure your information remains protected.

We will inform patients when AI-assisted clinical documentation tools are being used during consultations and patients may request that these tools not be used in their appointment.

If you have questions about our use of AI-assisted documentation tools or would prefer that AI not be used during your consultation, please speak with your treating practitioner.

3. Telehealth and Online Programs

Where you participate in telehealth consultations or online programs, we may collect additional information including video/audio session data, notes from practitioners, and program progress data. This information is treated with the same care as in-person health information and is handled in accordance with this Privacy Policy.

Third-party platforms used for telehealth or online program delivery (such as video conferencing tools) operate under their own privacy policies. We encourage you to review those policies directly.

4. Information Collected Automatically

We may automatically collect non-identifying information (“Usage Data”) such as:

• IP address
• Browser type and version
• Pages visited and time spent
• Device identifiers and diagnostic data

This helps us monitor Service performance, improve user experience, and detect technical issues.

Third-Party Service Providers

We use a number of third-party platforms and service providers to operate our business. These may include:

• Booking and practice management systems
• Payment processors (such as Stripe)
• Email marketing platforms
• Website analytics tools (such as Google Analytics)
• Advertising platforms (such as Facebook and Google Ads)
• Video conferencing platforms for telehealth
• AI-assisted clinical documentation providers including Heidi Health, Lyrebird Health and i-scribe

These providers act as Data Processors on our behalf and are only permitted to use your data in accordance with our instructions and applicable privacy law. We take reasonable steps to ensure these providers maintain appropriate data security standards.

We do not sell or rent your personal information to third parties.

Children’s Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect or store personal information from anyone under 13.

Please note that some of our services (such as Baby & Me classes) involve parents attending with infants. In these cases, any information collected relates to the attending adult. We do not collect personal information directly from minors.

If you believe we have collected information from a child under 13, please contact us at hello@fitright.au and we will promptly delete it.

Use of Cookies and Tracking Technologies

We use cookies and similar tracking tools (tags, scripts, pixels) to improve functionality, remember preferences, and analyse usage.

Types of Cookies We Use

• Session Cookies: Operate the Service
• Preference Cookies: Remember your settings
• Security Cookies: Protect user accounts
• Essential Cookies: Authenticate users and prevent fraud

You can control or delete cookies through your browser settings, but disabling them may limit certain features of our Service.

Third-Party Cookies

Some Service content is provided by third parties (e.g. embedded videos, social media plugins). These providers may use cookies and other technologies to collect information for analytics or advertising purposes. We do not control these third parties’ data practices. Please contact them directly for more information.

Email Information and Policies

If you communicate with us by email, we may retain your messages and our responses. We do not sell, rent, or share email lists with third parties.

Emails you receive from us will clearly identify the sender and include an unsubscribe option. You can opt out of future communications at any time by following the unsubscribe link in our emails or by contacting us directly.

Data Retention

We retain your Personal Data only as long as necessary for the purposes outlined in this policy, or as required by law.

Health records are retained in accordance with applicable Australian health records legislation (including the Health Records and Information Privacy Act where applicable) and relevant state requirements. In Western Australia, health records for adults are generally retained for a minimum of 7 years from the date of last service.

Usage Data is kept for internal analysis and security improvements.

Your Rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), you have the right to:

• Access the personal information we hold about you
• Request correction of personal information that is inaccurate, incomplete, or out of date
• Make a complaint about how we have handled your personal information

To make an access or correction request, please contact us at hello@fitright.au. We will respond within 30 days. In some circumstances we may charge a reasonable fee for providing access, or decline a request where permitted by law, and will explain our reasons if we do so.

If you are not satisfied with our handling of your request or complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Data Breach Notification

We are subject to the Notifiable Data Breaches (NDB) scheme under the Australian Privacy Act 1988. In the event of a data breach that is likely to result in serious harm to any affected individuals, we will:

• Notify affected individuals as soon as practicable
• Notify the Office of the Australian Information Commissioner (OAIC)
• Take immediate steps to contain and remediate the breach

We maintain an internal data breach response plan and conduct regular reviews of our security practices to reduce the risk of breaches occurring.

Disclosure of Your Information

We do not sell or rent your information to third parties. We may disclose Personal Data:

• To our staff and contracted health professionals involved in your care
• To third-party service providers who assist us in operating our business (see Third-Party Service Providers above)
• To comply with legal obligations
• To protect our rights and property
• To investigate or prevent misuse or fraud
• To ensure user or public safety
• To trusted technology providers, including AI-assisted clinical documentation providers, where necessary to support the delivery of healthcare services

Where we share health information with other health providers (such as for referrals), we will seek your consent unless disclosure is required or permitted by law.

Security of Your Information

We use commercially reasonable methods and trusted third-party vendors to protect your data. Some information is transmitted via Secure Sockets Layer (SSL) encryption. However, email communications are not always secure - please avoid sending sensitive information by email where possible.

While we strive to protect your data, no online system can guarantee 100% security. We encourage you to take steps to protect your own information, including using strong passwords and keeping your login details confidential.

Advertising and Remarketing

We may use third-party providers (such as Facebook and Google Ads) for remarketing to show relevant ads after you visit our Service. You can control ad settings and opt out via the following:

• Facebook: https://www.facebook.com/help/568137493302217 
• Google Ads Settings: https://www.google.com/settings/ads
• Google Analytics Opt-Out Add-On: https://tools.google.com/dlpage/gaoptout

Policy Updates

We will post any changes to this Privacy Policy on this page and update the “Last Updated” date at the top. If significant updates occur, we will notify users by email or through a prominent notice on our website. Please check this page periodically to stay informed.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information, please contact us at:

FitRight Group Pty Ltd
Email: hello@fitright.au
Website: www.fitrightwomenshealth.au 

Last updated and effective as of 9th June 2026.