LEGAL

Termsof Service & Privacy Policy

BedrockClinic Pty Ltd

ACN684 390 341 · ABN 22 684 390 341 · 129 Spit Rd, Mosman NSW 2088

Lastupdated: 1June 2026 · Version 1.0

PART A

Privacy Policy

HowBedrock Clinic collects, uses, holds, discloses and protects yourpersonal and health information.

About this policy

This Privacy Policy explains how Bedrock Clinic Pty Ltd (ACN 684 390341) collects, uses, holds, discloses and protects personal andhealth information. It applies to information collected through ourwebsite, intake forms, telehealth and in-person sessions, onlineshop, courses, events, and any other interaction you have with us. Itis published in accordance with Australian Privacy Principle 1.3.

We comply with:

the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs);
the Health Records and Information Privacy Act 2002 (NSW) and the fifteen Health Privacy Principles (HPPs), where applicable;
the Notifiable Data Breaches scheme; and
the Spam Act 2003 (Cth).

1. What information we collect

We collect the minimum information needed to provide our services.The categories vary depending on how you interact with us.

We may collect:

contact details (name, email, phone, postal address, emergency contact);
demographic and identity information voluntarily shared during intake;
health and sensitive information (health history, presenting concerns, session notes, telehealth location);
payment information processed by our payment processors (we do not store full card details);
account and order information for our shop, courses and events;
device and technical information when you use our website (IP address, browser, pages visited, referrer);
correspondence with us;
information about your engagement with our marketing emails (opens, clicks).

2. Sensitive information (healthinformation)

Health information is 'sensitive information' under section 6(1) ofthe Privacy Act 1988 (Cth). We collect it only with your expressconsent, given at the time we ask for it — typically at intake orat the start of a session. You may decline to provide sensitiveinformation, but doing so may limit the services we can offer.

Health records held by us are also subject to the NSW Health Recordsand Information Privacy Act 2002 and its fifteen Health PrivacyPrinciples.

3. How we collect

Directly from you when you book a session, complete an intake orcontact form, purchase a product or course, attend an event, orcorrespond with us. We also collect technical informationautomatically when you use our website (see section 10 — Cookies).

We do not buy or rent personal information from third parties.

4. Why we collect

We use the information to:

deliver our services and respond to enquiries;
manage bookings, payments, refunds and access to courses and events;
maintain clinical records and meet our duty of care;
meet legal, professional and tax obligations;
communicate updates, appointment reminders, and (with your consent) marketing.

5. Third-party providers

We use the following third-party providers to operate our practice,listed with their primary data-residency jurisdiction:

practice management — Pracsuite (Australia);
video conferencing — Zoom (United States), Microsoft Teams (United States);
payment processing — Stripe (United States), Square (United States);
website and e-commerce — Webflow (United States), Shopify (Canada / United States);
learning platform — Thinkific (Canada);
email and analytics — Google Workspace (United States), Google Maps (United States);
email marketing — Mailchimp (United States).

This list is current at the date of this policy. We may add or changeproviders from time to time. Any new provider will be assessedagainst APP 8 before engagement.

5.1 AI-assisted operations (Anthropic / Claude AI)

We use Anthropic (Claude AI, United States) for administrativesupport and booking management. Specifically:

managing bookings, scheduling and reminders, which may include your name, contact details and appointment times;
drafting marketing copy, internal communications and other general administrative tasks.

We do not put clinical records, session notes, health history orother sensitive case content into Claude AI. AI usage is limited tooperational support, and is not used to make decisions about yourcare.

To manage this we:

use Anthropic's commercial product tier (Claude for Work / API), with contractual no-training and limited-retention defaults rather than the consumer Claude.ai plans;
train staff on what may and may not be put into Claude AI;
limit access to authorised staff.

If you prefer that your personal information not be processed by anAI provider, please tell us at intake or at any time by emailinghello@bedrockclinic.com.au.

6. Overseas disclosure

Several of the providers listed above store or process personalinformation outside Australia, primarily in the United States andCanada. We take reasonable steps under APP 8 to ensure overseasrecipients handle personal information consistently with the APPs —for example, by using providers who hold recognised certificationsand who contractually commit to Australian-equivalent privacyprotections. Where we cannot take such steps, we will seek yourspecific consent before disclosure.

7. Storage and security

We store personal information on secure cloud platforms (named insection 5) with access controls, encryption in transit, and auditlogging. Paper records, where they exist, are stored in locked filingcabinets at our Sydney clinic. Access is limited to practitioners andauthorised staff on a need-to-know basis.

8. Retention

We retain personal information only for as long as needed for thepurposes set out in this policy, or as required by law.

Clinical health records — minimum 7 years from the last date of service for adult clients; for clients who were minors at the time of service, until the client turns 25 (NSW Health Records and Information Privacy Regulation 2017).
Booking and billing records — 7 years (tax law).
Marketing subscriber lists — until you unsubscribe.
Website analytics — 14 months unless reset to a shorter period.
Correspondence — 2 years unless retained for a longer purpose.

When information is no longer required, we destroy or de-identify it.

9. Notifiable data breaches

If a data breach is likely to result in serious harm, we will notifyaffected individuals and the Office of the Australian InformationCommissioner as required under the Notifiable Data Breaches scheme.

10. Cookies and online tracking

Our website uses cookies and similar tracking technologies. Cookiesare small files stored on your device.

We use:

strictly necessary cookies (required for the site to function);
analytics cookies (Webflow analytics and Google Analytics — anonymised usage statistics);
marketing cookies, where applicable (for example Meta Pixel to measure advertising performance, only after you consent).

You can refuse non-essential cookies through our cookie banner, ordisable cookies in your browser. Refusing cookies will not stop youusing the site but may limit some features.

11. Direct marketing

We send marketing emails only to people who have consented — forexample by subscribing to our mailing list or by opting in at intake.Every marketing email includes an unsubscribe link. Unsubscribing isfree and takes effect within five business days. You can alsounsubscribe by emailing hello@bedrockclinic.com.au.

12. Access and correction

You can request access to, or correction of, your personalinformation by emailing hello@bedrockclinic.com.au.

We will:

verify your identity before responding;
respond within 30 days for information held under the Privacy Act, and within 45 days for health records held under NSW HRIPA (HPP 7);
charge no fee for the request itself; a reasonable fee may apply for copying or producing large volumes of records.

If we refuse access or correction, we will give you written reasons.

13. Complaints

If you believe we have breached your privacy, please contact us firstat hello@bedrockclinic.com.au.

We will:

acknowledge your complaint within 5 business days;
investigate and respond substantively within 30 days;
explain what action (if any) we will take.

If you are not satisfied with our response, you can lodge a complaintwith:

the Office of the Australian Information Commissioner (OAIC) — oaic.gov.au — 1300 363 992; or
the NSW Information and Privacy Commission (for health records) — ipc.nsw.gov.au — 1800 472 679.

14. Children

Our services are provided to adults only. We do not knowingly collectpersonal information from anyone under 18. If you believe a minor hasprovided us information, please contact hello@bedrockclinic.com.auand we will delete it.

15. Changes to this policy

We may update this Privacy Policy from time to time. The version dateat the top reflects the most recent revision. Material changes willbe notified by email to current clients and posted on our website.

16. Contact

Bedrock Clinic Pty Ltd

ACN 684 390 341 · ABN 22 684 390 341

129 Spit Rd, Mosman NSW 2088

Email: hello@bedrockclinic.com.au

Phone: +61 478 084 410

PARTB

Terms of Service

Theagreement between you and Bedrock Clinic when you use our website,book a session, or buy a product, course or event ticket.

About these Terms

These Terms govern your use of the Bedrock Clinic website(bedrockclinic.com.au), our clinical services, our online courses,our online shop and our events. By accessing the website, booking asession, purchasing a product or course, or registering for an event,you agree to these Terms. If you do not agree, please do not use ourservices.

These Terms supersede any prior version. The version date at the topreflects the most recent revision.

1. About us

'Bedrock', 'we', 'us' and 'our' mean Bedrock Clinic Pty Ltd, ACN 684390 341, ABN 22 684 390 341. Registered office: 129 Spit Rd, MosmanNSW 2088. 'You' means any person accessing the website or engagingour services.

2. Website use

You may use our website for personal, non-commercial purposes only.You must not:

copy, reproduce or republish content (including worksheets, blog posts, course material) without our written permission;
attempt to gain unauthorised access to our systems or accounts;
use our site to send spam or unsolicited messages;
use the site in any way that breaches Australian law.

All website content (text, images, illustrations, course material,video, downloadable worksheets) is the intellectual property ofBedrock Clinic Pty Ltd or its licensors. You receive a limited,non-transferable, non-sublicensable licence to view the content forpersonal use only.

3. Clinical services

3.1 Who you contract with

You contract with Bedrock Clinic Pty Ltd. Bedrock arranges yoursessions with one of our independent practitioners. Each practitionerholds their own professional indemnity insurance, operates withintheir own scope of practice, and is responsible for the delivery oftheir professional services. Bedrock is responsible for arranging theengagement, managing your booking, handling complaints, and ensuringpractitioners meet our standards.

If you have a concern about the conduct or quality of a session,contact us at hello@bedrockclinic.com.au and we will respond within 5business days.

3.2 Scope and limitations

Our services are not a substitute for medical care. We do notdiagnose or treat medical conditions. We do not prescribe medication.If you have a medical condition, you should consult a registeredmedical practitioner.

Naturopathic services are complementary to medical care and are notregulated under the Therapeutic Goods Act 1989 (Cth). Clinical EFTTapping is not regulated under the Health Practitioner RegulationNational Law and should be treated as a complementary practice.

3.3 Confidentiality and mandatory reporting

Information you share with your practitioner is confidential. We willonly disclose it without your consent in these circumstances:

Risk of serious harm — where there is a reasonable belief of imminent, serious risk of harm to you or another person;
Child protection — where there is a reasonable belief that a child is at risk of significant harm (NSW Children and Young Persons (Care and Protection) Act 1998);
Subpoena, warrant or court order — where required by law;
Vulnerable adults — where a mandatory reporting obligation applies under NSW law.

We will tell you, where possible, before disclosure.

3.4 Telehealth

By booking a telehealth session you confirm that you have read andconsent to the following:

Identification — your practitioner will identify themselves and their qualifications at the start of every telehealth session.
Suitability — telehealth may not be suitable for every issue or every client. Your practitioner may recommend in-person sessions if appropriate.
Location and emergency contact — you must provide your physical location at the start of each session and a current emergency contact. This information is used in case of an emergency or technical failure.
Privacy of your environment — you are responsible for ensuring you are in a private environment during the session. We are not responsible if others overhear due to your environment.
Recording — sessions are not recorded by us without your written consent. If you record a session yourself, please tell your practitioner at the start.
Technical failure — if the connection is lost, your practitioner will attempt to reconnect or call your nominated phone number. Sessions interrupted by technical failure may be rescheduled at no cost.
Jurisdiction — telehealth sessions are governed by the laws of New South Wales, Australia, regardless of where you are physically located at the time of the session.

CRISIS SUPPORT

Our services are not suitable for emergencies. In a crisis, contact emergency services on 000 (Australia), Lifeline 13 11 14, Beyond Blue 1300 22 4636, or 1800RESPECT 1800 737 732.

Outside Australia, contact your local emergency services.

3.5 Fees, payment and cancellations

Fees are payable at or before the time of service.

You can reschedule a session at no cost with at least 48 hours'notice.

Cancellations or rescheduling with less than 48 hours' notice, ornon-attendance, incur the full session fee. We may waive this fee inexceptional circumstances (for example, medical emergency orbereavement) at our discretion.

Change of mind: clinical servicesare not refundable for change of mind once delivered, or once anon-cancellable booking has been missed.

Australian Consumer Law: nothingin these Terms excludes, restricts or modifies any consumerguarantee, right or remedy you have under the Australian ConsumerLaw. If a service is not delivered with due care and skill, or is notreasonably fit for purpose, you may be entitled to a refund, are-supply, or other remedy under the ACL. Any wording suggesting thatprograms or bundles are 'non-refundable' is to be read consistentlywith the ACL and does not exclude these rights.

3.6 Conduct in sessions

Clients must behave respectfully, maintain appropriate boundaries,and attend sessions sober. Bedrock may suspend or terminate serviceswhere behaviour poses a safety or professional risk. Where we suspendor terminate, prepaid fees for sessions not yet delivered will berefunded, less a reasonable administration fee for sessions alreadybooked.

4. Online courses and digital content

Our online courses are educational only. They do not constitutepersonalised health advice and are not a substitute for individualprofessional support.

Content is licensed to you for single-user, personal use. You may notshare login details, copy or redistribute course material, or use thecontent commercially.

You retain access for the duration stated at the time of purchase, or— if no duration is stated — for 12 months from purchase.

We may suspend access for a clear and material breach of these terms(for example, sharing login details or redistributing content). Wewill tell you the basis for the suspension and give you a reasonableopportunity to respond before any termination.

Australian Consumer Law applies: where a course is not delivered asdescribed, you may be entitled to a remedy under the ACL.

5. Physical products (shop)

5.1 Pricing

All prices are shown in Australian dollars and include GST. Shippingis calculated at checkout.

5.2 Order acceptance

Your order is an offer to buy. We accept your order when we send youan order confirmation. We may decline orders for any lawful reason(for example, stock unavailability or suspected fraud). If wedecline, we will refund any payment in full.

5.3 Shipping

We ship to addresses in Australia and internationally. Standardshipping costs and timeframes are published at checkout and on ourshipping policy page. Risk of loss passes to you on delivery.

5.4 Returns

We offer change-of-mind returns on unused, unopened products within14 days of delivery. For hygiene reasons, opened intimate productscannot be returned for change of mind.

Faulty or damaged products are repaired, replaced or refunded in linewith the ACL consumer guarantees. Contact hello@bedrockclinic.com.auwithin a reasonable time of becoming aware of the issue.

5.5 Adults only

Some products are intended for adult use only. By placing an orderyou confirm you are 18 years or older.

6. Events and workshops

Tickets are subject to availability and are non-transferable.
If we cancel an event, you will receive a full refund or credit at your election.
If we reschedule an event and you cannot attend the new date, you may request a refund within 14 days of the change being announced.
Minor changes (for example, change of venue within the same city, or change of facilitator) do not entitle you to a refund except as required by law.
We may decline entry or remove attendees who breach our code of conduct (see section 3.6).

Australian Consumer Law applies: where an event is not deliveredsubstantially as advertised, you may be entitled to a remedy underthe ACL.

7. Testimonials and reviews

We publish client testimonials and reviews on our website and inmarketing materials. Testimonials reflect the experience ofindividual clients and are not a guarantee of results — outcomesfrom our services vary depending on individual circumstances.

We only publish testimonials with the client's written consent. Weretain records of the original wording and the consent. We do notedit testimonials in ways that change their meaning. We do not payfor testimonials or offer benefits in exchange for them.

If you are a client and would like to provide a testimonial, pleaseemail hello@bedrockclinic.com.au. You can withdraw consent at anytime, and we will remove the testimonial within a reasonabletimeframe.

8. Marketing communications

We send marketing communications only with your consent. Everymarketing email includes an unsubscribe link. See our Privacy Policyfor full details.

9. Disclaimers and limitation ofliability

To the maximum extent permitted by law, and subject to your rightsunder the Australian Consumer Law:

our services are provided on an 'as is' basis;
we do not warrant that our website will be uninterrupted or error-free;
we are not liable for indirect, consequential or incidental loss, including loss of profits, loss of opportunity, or distress arising from the use of our website or services, except where caused by our negligence or breach of an ACL guarantee;
where our liability cannot be excluded, our liability is limited to, at our election, re-supplying the service or refunding the price paid.

Nothing in these Terms excludes, restricts or modifies any consumerguarantee, right or remedy under the Australian Consumer Law thatcannot be excluded.

10. Force majeure

We are not liable for delays or failures caused by events beyond ourreasonable control, including natural disasters, pandemics,government action, internet outages, or failure of third-partyplatforms (for example Zoom or Stripe). We will use reasonableefforts to reschedule affected sessions at no additional cost.

11. Changes to these Terms

We may update these Terms from time to time. The version date at thetop reflects the most recent revision. Material changes affectingyour existing booking, course access or product order will benotified by email and will not take effect until 14 days afternotice. Your continued use of the website or services after that dateconstitutes acceptance.

12. Dispute resolution

If you have a dispute with us, please contacthello@bedrockclinic.com.au first. We will acknowledge within 5business days and attempt to resolve within 30 days.

If the dispute is not resolved within 30 days, the parties willattempt mediation through a recognised Australian mediation service(such as the Resolution Institute) before commencing legalproceedings. This clause does not prevent either party seeking urgentinjunctive relief from a court.

13. Governing law

These Terms are governed by the laws of New South Wales, Australia.The parties submit to the exclusive jurisdiction of the courts of NewSouth Wales.

14. Contact