Seed 2 Seed 

Privacy Policy - Current as of 25 October 2026

1. About this policy

Seed 2 Seed Pty Ltd (ABN 55 418 001 193) (Seed 2 Seed, we, us, our) is a dietetics and nutrition practice. This policy explains how we collect, hold, use and share your personal information, and how you can access it or make a complaint.

As a health service provider, we must comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), regardless of our size. Much of what we hold is health information, which the law treats as sensitive information and protects more strictly.

This policy covers our consultations (in clinic and by telehealth), our website, online booking and any other dealings you have with us. Personal information means information or an opinion about you where you are identified or reasonably identifiable.

2. Anonymity and pseudonyms

You can make general enquiries (for example, about our fees or services) without giving your name.

We cannot provide dietetic consultations anonymously or under a pseudonym. To give safe advice, keep accurate clinical records, coordinate with your doctor and process Medicare, health fund, DVA or NDIS claims, we need to know who you are.

3. What we collect

Personal details: your name, date of birth, gender, address, phone, email, emergency contact, and your Medicare, health fund, DVA or NDIS details.

Health information: your medical history, diagnoses, medications, allergies and intolerances, pathology results, body measurements, dietary habits, lifestyle information, referral letters, and our clinical notes and meal plans. Where relevant to your care, this may include information about pregnancy, eating disorders or mental health, or your cultural or religious dietary practices.

Payment details: information needed to invoice you and process payments and claims.

Website information: your IP address, browser, device and pages visited, collected through cookies and analytics. You can turn off cookies in your browser, though some features may not work.

We only collect health information that is reasonably necessary for your care, and with your consent (which you give when you book or attend, and can discuss with us at any time).

4. How we collect it

We collect most information directly from you: when you book, complete intake forms, attend consultations, or contact us by phone, email or our website.

We may also collect information from others with your consent or where the law allows, such as your GP, specialist or other referring health professional, a parent or guardian (for clients under 18), a carer or someone you authorise, and Medicare, health funds, DVA or the NDIS.

If we receive information about you from someone else, we will let you know where reasonably required.

If we receive information we did not ask for (for example, records sent to us by mistake), we will decide whether we could have lawfully collected it. If we could not, we will destroy or de-identify it as soon as practicable, where lawful and reasonable to do so.

5. Why we use it

We use your information to:

  • assess your nutrition needs and provide dietetic advice and treatment

  • keep accurate clinical records and coordinate care with your other health providers

  • manage appointments, reminders, invoices, payments and claims

  • meet our legal, insurance and professional obligations, and respond to complaints or claims

We will only use your information for another purpose if you consent, or where the APPs allow it (for example, where it is directly related to your care and you would reasonably expect it, or where required by law).

Marketing: we will only send you newsletters or promotional material with your consent. You can unsubscribe at any time.

Protecting our legal rights: We may use or disclose your personal information where reasonably necessary to establish, exercise or defend a legal or equitable claim. This includes protecting our copyright and trade marks and our other legal rights. We may also do so where required or authorised by an Australian law, or by a court or tribunal order.

We only use your Medicare, DVA or NDIS numbers to process claims and as permitted by law, and we do not use them as our own client identifier.

6. Who we share it with

We only share what is necessary, and generally only with your consent. This may include:

  • your GP, specialist or other treating health professionals (for example, progress reports to your referrer)

  • Medicare (Services Australia), your health fund, DVA or the NDIA, to process claims

  • a parent, guardian or person you have authorised

  • service providers who help run our practice, such as practice management, telehealth, booking, email, cloud storage and IT support providers, under confidentiality obligations

  • our insurers, lawyers or professional advisers, if needed

We may also disclose information without consent where the law requires or permits it, such as a court order, a mandatory reporting obligation, or to prevent a serious threat to someone’s life, health or safety.

We never sell your personal information.

7. Information stored or accessed overseas

We use a secure, industry-standard practice management platform to store and manage client and clinical records. That platform, and our website analytics provider, store or access information outside Australia.

Our practice management platform, which stores and manages client and clinical records, bookings and billing, is located in the United States. Our website analytics provider, Google Analytics, may store or access information in the United States and other countries where Google operates.

Before using an overseas provider, we take reasonable steps to make sure it handles your information consistently with the APPs, including through contractual privacy and security obligations. We remain responsible under the Privacy Act for how those providers handle your information.

If you have concerns about overseas storage, please talk to us before your appointment.

8. Security and retention

We protect your information with secure, password-protected and encrypted systems, multi-factor authentication, staff access limited to those who need it, confidentiality obligations on staff and contractors, and secure storage of any paper records.

How long we keep it: we keep health records for at least 7 years after your last consultation, or for clients under 18, until they turn 25 (whichever is later). After that, we securely destroy or de-identify them.

Data breaches: if a breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

Automated decisions: we do not use computer programs to make decisions about you that significantly affect your rights or interests without a dietitian’s involvement.

9. Accessing and correcting your information

You can ask for a copy of the information we hold about you, or ask us to correct it if it is inaccurate, out of date or incomplete. Contact our Privacy Officer (section 10). We will need to confirm your identity.

We will respond within 30 days. Correction is free. We may charge a reasonable fee for copying records, and will tell you the cost first.

In limited cases the Privacy Act allows us to refuse access, for example where it would pose a serious threat to someone’s life, health or safety, or unreasonably affect another person’s privacy. If we refuse access or correction, we will explain why in writing and tell you how to complain.

10. Questions, complaints and contact

If you have a question or think we have mishandled your information, please contact our Privacy Officer first. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

Privacy Officer, Seed 2 Seed

If you are not satisfied with our response, you can contact:

  • Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au, 1300 363 992, GPO Box 5288, Sydney NSW 2001

  • Office of the Health Ombudsman (Queensland), for complaints about a health service: www.oho.qld.gov.au, 133 646

Changes to this policy

We may update this policy from time to time. The current version is always on our website, and the date at the top shows when it was last updated.