Privacy
Policy.

RISE Sports & Spinal ("we", "us", "our") is an osteopathic practice operated by Steven Eskaf, trading from 5/6–8 Langmore Lane, Berwick VIC 3806. We are an AHPRA-registered health service. This Privacy Policy explains how we collect, use, disclose, and protect your personal and health information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We collect personal information necessary to provide you with osteopathic care. This includes: • Contact details (name, address, phone number, email address) • Health information (medical history, medications, presenting symptoms, clinical findings, diagnosis, and treatment records) • Medicare and private health fund details, where applicable • Emergency contact information • Payment information We collect this information directly from you when you make a booking, complete intake forms, or attend an appointment. We may also receive information from other treating practitioners with your consent.

We use your personal information to: • Provide osteopathic assessment, diagnosis, and treatment • Communicate with you about appointments, health information, and follow-up care • Process payments and private health fund claims via HICAPS • Comply with our legal and regulatory obligations as an AHPRA-registered practitioner • Liaise with other healthcare providers involved in your care (with your consent) We do not use your personal information for marketing purposes without your explicit consent.

We will not disclose your personal information to third parties except: • With your consent • To other treating practitioners involved in your care • Where required or permitted by law (e.g. mandatory reporting obligations, court order) • To our practice management software provider (Cliniko), which is bound by its own privacy obligations Health records are stored securely in Cliniko, a cloud-based practice management platform. Cliniko's servers are hosted in Australia and the platform is compliant with Australian privacy law.

We retain health records in accordance with applicable law. For adult patients, records are generally retained for a minimum of 7 years from the last date of service. For patients who were minors at the time of treatment, records are retained until they reach 25 years of age, or for 7 years from last service — whichever is longer.

You have the right to access your personal information and request corrections. To make a request, contact us at hello@risesportsspinal.com.au or 0409 794 007. We will respond within 30 days. In some circumstances, we may be unable to provide access (for example, where it would pose a serious threat to your health or that of another person), and we will explain the reason in writing.

We take reasonable steps to protect your personal and health information from misuse, interference, and loss, and from unauthorised access, modification, or disclosure. Our practice management system uses encrypted storage and access controls. Physical documents, where used, are stored securely.

If you have a concern about how we have handled your personal information, please contact us first at hello@risesportsspinal.com.au. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or call 1300 363 992.

We may update this policy from time to time. The current version will always be available on our website. If we make significant changes, we will notify patients directly where appropriate.

RISE Sports & Spinal 5/6–8 Langmore Lane, Berwick VIC 3806 hello@risesportsspinal.com.au 0409 794 007