Privacy Policy

Last updated: 26 September 2026

1. Who we are

This policy explains how Light Body Healing Co (ABN 77 384 879 490), a sole-trader business run by Darren Harris in Brisbane, Queensland ("I", "me", "we"), handles your personal information. It covers this website, www.lightbodyhealing.au, and my Reiki services (studio, mobile, distance and palliative sessions). Because I provide a health-related service and may hold health information, I comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), even as a small business.

2. What I collect

- Contact and booking details: your name, email address, phone number, preferred dates, the services you're interested in, and anything you write in a message.

- Health and wellbeing information (sensitive information): before or during a session I may ask about your general health, relevant conditions, injuries, pregnancy, medications, emotional wellbeing and anything you'd like me to be aware of. I record brief session notes. For palliative sessions this may include information from you, your family or your care team, with your consent.

- Payment details: the amount and date paid. Card payments are processed by a secure third-party payment provider; I don't see or store your full card number.

- Website information: my website platform (Squarespace) and booking tool (Calendly) automatically collect technical data such as your IP address, browser, device and pages visited, and may use cookies. See their own policies for details.

You can choose not to give some information, or to use a first name only when enquiring. However, I may not be able to provide a session safely if I don't have relevant health information.

3. How I collect it

Mostly directly from you: through the enquiry and booking forms on this website (hosted by Squarespace), when you book through my Calendly page, by email, by phone or text, and in person. For palliative sessions, I may also collect information from a family member, authorised decision-maker or care facility, with consent.

4. Consent to collect health information

I only collect health information with your consent and where it's reasonably necessary to provide a safe, appropriate session. By submitting an intake form or booking, and ticking the consent box, you agree to me collecting it for that purpose. For clients under 18, a parent or guardian gives consent.

5. Why I use it

- to respond to your enquiry and to arrange, confirm, reschedule or remind you about sessions

- to provide a safe session tailored to you, and to keep appropriate session records

- to send a written summary after distance sessions

- to process payments and keep business and tax records

- to meet legal obligations, including under the National Code of Conduct for Health Care Workers (Queensland)

- to send occasional news or offers, only if you opt in (see section 6)

I don't sell, rent or trade your personal information.

6. Text messages and email marketing

If you give your mobile number, I may text you about your booking (confirmations, reminders or changes). I'll only send promotional texts or emails if you have clearly opted in. Every marketing message will identify me and tell you how to unsubscribe. Reply STOP to texts, or email me, and I'll remove you promptly. Opting out of marketing won't affect booking messages.

7. Who I share it with

I only share your information when needed to run my business or when you agree:

- Service providers who store or process data for me: Squarespace (website and forms), Calendly (online booking), my email provider, a secure third-party payment provider and my accountant or bookkeeper (for financial records only).

- Your care team, family or facility: only with your consent (for example, for palliative sessions).

- Where required or authorised by law: for example, to lessen a serious threat to someone's life, health or safety, or if a court or regulator requires it.

8. Overseas storage

Some of my service providers, including Squarespace and Calendly, store data on servers outside Australia, mainly in the United States and other countries listed in their policies. I choose reputable providers and take reasonable steps to make sure they handle your information in line with the APPs. By using the website forms and booking tools, you acknowledge your information may be stored overseas.

9. How I keep it secure

I store records digitally in password-protected accounts with two-factor authentication where available. I don't keep paper records. I limit access to myself. I keep session records for 7 years after your last session (or, for clients under 18, until they turn 25), then securely delete or destroy them. If a data breach is likely to cause serious harm, I'll notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

10. Accessing and correcting your information

You can ask for a copy of the personal information I hold about you, or ask me to correct it, by emailing darren@lightbodyhealing.au. I'll respond within 30 days. There's no charge to ask. If I can't provide access (for example, where the law allows me to refuse), I'll explain why in writing.

11. Complaints

If you have a concern about how I've handled your personal information, please email me first at darren@lightbodyhealing.au. I'll acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au, phone 1300 363 992. Concerns about the service itself can also go to Queensland's Office of the Health Ombudsman: www.oho.qld.gov.au, 133 OHO (133 646).

12. Changes to this policy

I may update this policy from time to time. The current version will always be on this page, with the date it was last updated.

13. Contact

Darren Harris, Light Body Healing Co

Brisbane, Queensland

Email: darren@lightbodyhealing.au