Privacy Policy

This policy explains what information Aurea Health collects about you, why we collect it, who we share it with, how long we keep it, and how you can see it or ask us to change it.

Last updated: 26 August 2026

Who we are

Aurea Health is the trading name of Lucid Business Solutions Pty Ltd (ABN 92 622 816 906). The studio is operated by Meher Nariman in North Epping, New South Wales. We provide Bowen Therapy, Pilates and Wellbeing Coaching.

• Email: info@aureahealth.com.au
• Phone: 0431 561 666
• Location: 8 Woodvale Avenue, North Epping, NSW, Australia

In this policy, “we”, “us” and “our” mean Lucid Business Solutions Pty Ltd trading as Aurea Health.

The law we work under

Because Aurea Health provides health services, we are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and by the Health Records and Information Privacy Act 2002 (NSW) and its Health Privacy Principles. Health service providers are covered by these laws regardless of the size of the business, so the usual small business exemption does not apply to us.

We also follow the Spam Act 2003 (Cth) for anything we send you by email.

What we collect

Information you give us directly

• Contact details — your name, email address, phone number and, where relevant, your postal address.
• Health information — your health history, current symptoms, injuries, medical conditions, medications, previous treatments, lifestyle, exercise and diet, and the notes we make during and after a session. Health information is “sensitive information” under the Privacy Act and gets stronger protection than ordinary personal information.
• Coaching information — what you tell us during Wellbeing Coaching sessions, including goals, reflections and anything you choose to share.
• Enquiry details — whatever you write in the contact form on this website, including which service your enquiry is about.
• Photos and video — taken at retreats and events where we’ve told you photography will be happening, used as described in our Retreat Terms and Conditions.
• Emergency contact details, where you choose to provide them.

Information we collect automatically

• Website analytics — if you accept analytics cookies, we collect anonymous information about which pages you visit, roughly where in the world you are, and what kind of device and browser you use. See Cookies and analytics below.
• Server logs — our website host records standard technical information such as IP addresses and request times for security and reliability purposes.

Information from other people

If someone refers you to us, we may receive your name and contact details from them. We only accept that information where it is reasonable to assume you know the referral is being made.

Why we collect it, and what we do with it

We collect your information so we can:

• provide Bowen Therapy, Pilates and Wellbeing Coaching safely and appropriately;
• take a health history so a practitioner can decide whether a session is suitable for you, and adapt it if not;
• keep clinical and session records, as we are required to do;
• manage bookings, cancellations, packages and payments;
• answer your enquiries;
• send you the emails you have asked for, if you have signed up;
• meet our legal, insurance and professional obligations;
• and improve the website and the service.

We do not sell your information to anyone, ever. We do not use your health information for marketing.

Consent, and what happens if you don’t provide information

We collect health information with your consent, which you give by completing our health history and taking part in a session. You can withdraw that consent at any time, though it may mean we can no longer safely provide a service to you.

You are welcome to deal with us anonymously or under a pseudonym for general enquiries. We cannot provide a hands-on session anonymously, because we need an accurate health history to work safely.

Who we share your information with

We share your information only where it is necessary, and only with:

Who	What they receive	Why
Bookings Essential	Your name, contact details, bookings and package history	Runs our appointment scheduling and store
Stripe	Your payment details, processed directly by them	Processes payments — we never see or store your full card number
MailerLite	Your first name and email address, if you subscribe	Sends the emails you signed up for, and handles unsubscribes
Netlify	Contact form submissions, and standard web server logs	Hosts this website and delivers your enquiry to us
Google Workspace	Any email you send us	Our business email
Google Analytics	Anonymous website usage data, only if you accept analytics cookies	Tells us which pages are useful

We may also disclose information where the law requires it, where it is necessary to prevent a serious threat to someone’s life, health or safety, or to our professional insurer or a professional association in connection with a claim or complaint.

Information sent overseas

Some of the services above store data on servers outside Australia, including in the United States and Europe. By using this website, making a booking or subscribing to our emails, you consent to your information being handled in those countries. We choose established providers who publish their own privacy and security commitments, but the protections available in another country may not be the same as those under Australian law.

Your health and session records are not sent overseas. They are kept by us, in Australia.

Cookies and analytics

A cookie is a small file a website stores in your browser. This site uses very few of them.

Cookies we set

• Your cookie choice. When you accept or decline analytics on the banner, we remember your answer in your browser’s local storage so we don’t ask again. This is stored on your device, not sent to us.
• Retreat pop-out. If the retreat notice is running, we remember on your device that you have seen or dismissed it, so it doesn’t keep interrupting you. This stays on your device and is not sent to us.

Neither of these identifies you.

Analytics cookies — only if you say yes

If you choose “Accept analytics”, we load Google Analytics, which sets cookies to count visits and understand which pages people read. IP addresses are anonymised. We use this to make the site better; we do not use it to identify individuals or to advertise to you.

If you choose “Essential only”, Google Analytics is never loaded and no analytics cookie is set.

You can change your mind at any time by clearing your browser’s site data for aureahealth.com.au, which will bring the banner back.

Other embedded services

• Bookings Essential is embedded on our booking page and sets its own cookies when you use it, under its own privacy policy.
• Pilates videos are hosted on YouTube and load in privacy-enhanced mode. A video only loads — and only sets cookies — after you click play on it.
• The map on our contact page uses OpenStreetMap, which does not track you.

Email and marketing

From time to time we email our clients and community about what’s happening at Aurea Health — such as upcoming retreats, workshops and news. Where these emails are sent through an automated mailing service, they include an unsubscribe link and unsubscribing takes effect immediately. Where they are sent personally from our own email account, they may not contain an unsubscribe link — you can opt out at any time by replying to the email or by contacting info@aureahealth.com.au, and we will remove you from the list promptly.

Sending an enquiry through the contact form does not subscribe you to anything — we reply to your question and nothing more.

How we keep your information safe

• Health and session records are kept on paper, in a locked filing cabinet at the practice, and only Meher Nariman has access to them. We do not currently keep health records electronically. If we adopt an electronic records system in future, we will choose one appropriate for health information and update this policy before using it.
• Our website is served over an encrypted connection (HTTPS).
• Payment card details are handled entirely by Stripe and never reach us.
• Accounts with our service providers are protected with strong, unique passwords and multi-factor authentication where it is available.

No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

How long we keep it

• Health and session records are kept for at least 7 years from your last session. Where the client was under 18, records are kept until they turn 25. This is what NSW health records law requires.
• Booking and payment records are kept for 7 years, as tax law requires.
• Email subscribers are kept until you unsubscribe or ask to be removed, after which we keep only a record of that request, so we don’t email you again by mistake.
• Contact form enquiries are kept for 2 years.
• Analytics data is kept for 14 months and is not linked to you.

When we no longer need information, we destroy it or permanently de-identify it.

Seeing your information, and correcting it

You can ask us for a copy of the personal and health information we hold about you, and we will provide it within 30 days. There is no charge for a reasonable request; if a request takes substantial work we will tell you the cost before we start.

If anything we hold is wrong, out of date or incomplete, tell us and we will fix it. If we disagree that it is wrong, you can ask us to attach a statement of your view to the record.

In rare cases we may refuse access — for example where giving it would pose a serious threat to someone’s life or health, or would unreasonably affect another person’s privacy. If we refuse, we will tell you why in writing and explain how to complain.

To make a request, email info@aureahealth.com.au or call 0431 561 666.

Complaints

If you think we have mishandled your information, please tell us first — email info@aureahealth.com.au with the details. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you can complain to:

• Office of the Australian Information Commissioner (OAIC) — 1300 363 992, oaic.gov.au
• NSW Information and Privacy Commission — 1800 472 679, ipc.nsw.gov.au — for health records held in NSW

Changes to this policy

We update this policy when what we do changes. The date at the top shows when it was last revised. If we make a change that materially affects how we handle your information, we will tell you.