Privacy Policy

Last updated: 14/06/2026

1. What this policy covers

This policy explains how personal information is collected, used, stored, and disclosed via this website (maxbellaicheosteopath.com.au) and through Max's clinical practice across the three Sydney clinics where he consults.

This site is operated by Maxwell Bellaiche, AHPRA-registered osteopath (registration number OST0004003860). Clinical records held at each host clinic — Sydney Osteopathic Medicine, Harley Place Health, and Rozelle Osteopaths — are governed by that clinic's privacy policy in addition to this one.

2. What information is collected

Via this website

  • Name, email, and phone number (if you choose to provide them) via the contact form
  • Browser and device information (collected by Google Analytics 4)
  • Pages visited, navigation patterns, and event interactions (Google Analytics 4)
  • Booking interactions with the embedded Cliniko widgets (booking start, completion)

Via clinic visits

  • Identifying information (name, date of birth, contact details, next of kin where relevant)
  • Clinical history (presenting complaint, past medical history, medications, surgical history, lifestyle and activity history)
  • Examination findings and treatment notes
  • Imaging reports you provide or that are requested with your consent
  • Health-fund and Medicare/DVA identifiers for rebate processing
  • Audio of your consultation — only where you consent to the use of an AI medical scribe (Heidi) to assist with clinical note-taking (see Section 4)

Where an AI scribe is used, you will be told before any recording begins and you may decline at any time. If you decline, notes are taken manually and your care is unaffected.

3. How information is used

  • Responding to contact-form messages and booking enquiries
  • Providing clinical care, including assessment, treatment, and follow-up
  • Generating clinical documentation, including with the assistance of an AI medical scribe (Heidi) where you have consented
  • Communicating with your GP or other treating practitioners — only with your express consent
  • Processing private-health, Medicare, DVA, or Work Cover rebates and claims
  • Maintaining clinical records as required by AHPRA's Code of conduct
  • Anonymous, aggregated analytics to understand site usage and improve content

4. How information is stored

  • Website analytics: Google Analytics 4 (operated by Google LLC) — see Google's privacy policy at policies.google.com/privacy
  • Online booking: Cliniko (operated by Red Guava Pty Ltd, Melbourne) — see Cliniko's privacy policy at cliniko.com/privacy. Each clinic operates an independent Cliniko account; clinical record-keeping happens within each clinic's account
  • Clinical records: each host clinic's electronic record system, with security and retention per AHPRA record-keeping requirements (currently a minimum of seven years from the date of last entry for adult patients, or to age 25 for paediatric patients)
  • AI-assisted clinical notes: Heidi (operated by Heidi Health Trading Pty Ltd, Melbourne) — an AI medical scribe used, only with your consent, to help draft clinical documentation. The consultation audio is processed to generate a written note within Heidi's Australian-hosted, encrypted environment (certified to ISO 27001 and SOC 2 Type II) and is not used to train Heidi's AI models. The resulting note is stored in the relevant clinic's record system. See Heidi's privacy policy at heidihealth.com
  • Email correspondence: Microsoft Outlook 365 (Microsoft Corporation)
  • Backups: managed by each host clinic per their own information-security practices

5. Cookies and tracking

This site uses cookies for analytics (Google Analytics 4) and for embedded third-party services (Cliniko booking widgets).

You can decline non-essential cookies via the cookie banner displayed on your first visit. Declining will not affect your ability to read information on the site. It may prevent direct online booking via the embedded Cliniko widget — in that case, booking by phone or email remains available (see Contact).

6. Your rights

Under the Australian Privacy Principles (APPs), you have the right to:

  • Request access to the personal information held about you
  • Request correction of inaccurate or out-of-date information
  • Withdraw consent for non-essential uses (for example, withdrawing consent for GP correspondence)
  • Make a complaint about how your information has been handled

Direct requests to: maxbellaiche.osteo@outlook.com

We aim to respond to access and correction requests within 30 days, in accordance with APP 12 and APP 13.

7. Sharing with third parties

Information is shared only:

  • With your express consent (for example, letters to your GP, specialist correspondence)
  • Where required by law (mandatory reporting obligations, court orders, subpoenas)
  • With service providers acting on Max's behalf (Cliniko, Heidi, GA4) — bound by confidentiality requirements and data-processing agreements

Aggregated, anonymised data may be used for service improvement, content research, or peer-reviewed clinical research where it cannot identify you.

8. Data breaches

If a data breach occurs that is likely to result in serious harm, you will be notified in accordance with the Notifiable Data Breaches scheme administered by the Office of the Australian Information Commissioner.

9. Changes to this policy

Updates will be posted here with the "Last updated" date revised. Material changes will be highlighted on the homepage for a minimum of 30 days.

10. Contact and complaints

Privacy queries: maxbellaiche.osteo@outlook.com

AHPRA complaints process: www.ahpra.gov.au/Notifications

Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au

Max Bellaiche · AHPRA OST0004003860 · Master of Osteopathic Medicine