Who we are

A&A Vitality (“we”, “us”) is a mobile IV therapy and wellness service operating across Sydney, Australia, with no physical clinic for the time being — our practitioners come to you. Our website is https://anavitality.com.au.

We handle your personal information, including health information, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Health information is “sensitive information” under the Act, and we treat it with extra care.

Information We Collect

• Contact details: name, email, phone, and service address.
• Health information: medical history, medications, allergies, and other details from your pre-treatment questionnaire and consent form, used to check you’re safe to treat.
• Booking details: services, appointment times, and practitioner notes.
• Payment details: handled by our booking and payment providers — we don’t store full card numbers.
• Technical data: IP address, browser, and device info from visiting our site.
• Comments: if you comment on the site, we log your IP address and browser info for spam detection.

Health information is only collected with your consent, and only as needed to safely deliver treatment and meet our TGA obligations.

How We Use It

• Assess treatment eligibility and safety.
• Schedule and deliver appointments.
• Process payments and deposits.
• Respond to enquiries and follow up on bookings.
• Meet legal, clinical, and TGA record-keeping requirements.

We don’t use your health information for marketing without your separate, explicit consent.

Cookies

Commenting on the site lets you opt in to a cookie that remembers your name, email, and website for next time (lasts one year). Our admin login sets short-lived cookies to manage sessions — none of this contains personal data beyond what’s needed to keep you logged in.

Our booking system and payment provider (Fresha) may also set their own cookies to manage your session and process payment, under their own privacy policies.

Booking & Third-Party Services

We rely on trusted platforms to run the business, each governed by its own privacy policy:

• Fresha – bookings, consent gating, deposits, and payments.
• Manual Payment– optional card/NFC pay, handled directly by Fresha EFTPOS .
• Gravatar (Automattic) – may show a profile picture against your comment, based on a hashed version of your email. Policy: https://automattic.com/privacy/.

Consent Forms & Health Questionnaires

Before treatment, you’ll complete a health questionnaire and give informed consent. This is reviewed by qualified practitioners, treated as sensitive information, and only accessible to staff involved in your care — never used for marketing.

Media & Embedded Content

Avoid uploading images with embedded location data (EXIF GPS), as this can be extracted by site visitors. Pages may also include embedded content (videos, maps, etc.) from other sites, which can collect data and set cookies just as if you’d visited them directly.

Who We Share Data With

• Our booking and payment providers, to process appointments and payments.
• Our practitioners, to assess and deliver treatment safely.
• Regulators or authorities, where legally required.
• Spam-detection services, for website comments.

A password reset email will include your IP address. We never sell your personal information.

Overseas Disclosure

Some providers (booking, payment, hosting) may store data offshore. Where this happens, we take reasonable steps to ensure comparable protection to the APPs.

How Long We Keep It

Comments are kept indefinitely so we can auto-approve follow-ups. Health and treatment records are kept as long as required by health record-keeping law, then securely deleted or de-identified. Account holders can view, edit, or request deletion of their profile information at any time.

Data Security

We take reasonable steps to protect your information from misuse, loss, or unauthorised access, with health information restricted to authorised staff only.

Your Rights

• Access a copy of the personal information we hold about you.
• Correct anything inaccurate or out of date.
• Request erasure, subject to what we’re legally required to keep.
• Withdraw consent for health information use (this may affect our ability to treat you).

Contact us using the details below to exercise any of these.

Complaints

Contact us first so we can try to resolve any concern directly. If unresolved, you can complain to the Office of the Australian Information Commissioner (OAIC) at http://www.oaic.gov.au.

Changes to Policy

We may update this policy as our practices or obligations change. Check the “Last updated” date above for the latest version.

Contact Us

• A&A Vitality — https://anavitality.com.au

• Email: hello@anavitality,com.au