Privacy policy

Nudge Nutrition is a dietetics practice run by Nicola (Nikki) Edwards-Kalaf, an Accredited Practising Dietitian (APD 059330) based in Brisbane, Queensland (ABN 48 177 147 299).

Because Nudge Nutrition provides a health service and holds health information, it is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. The exemption available to some small businesses does not apply to health service providers.

This policy covers this website and the enquiry, callback, referral and booking forms on it. It does not cover other websites you reach from links here.

We only collect what you choose to give us. Nothing on this site asks for information you have not been shown a field for.

• Booking an appointment. Your name, email address, phone number, date of birth and any notes you add, collected through the PracSuite booking system embedded on the contact page.
• Sending a message. Your name, email address, subject and message.
• Requesting a callback. Your name, email address, phone number and the times that suit you.
• Sending a referral. Your name, email address, phone number, the referring doctor or clinic if you tell us, the referral type, and the referral document you upload. A referral is health information.
• Joining the mailing list. Your email address only.
• Automatically. Our hosting provider records standard server logs, including IP address, browser type and the pages requested, for security and reliability. Ahrefs Web Analytics records aggregate website usage such as the page visited, referrer, browser and device type, language, approximate city and country, link clicks and form submissions. It does not record what you type into a form.

We also record which page you came from when you use a form, so Nikki knows what your enquiry is about before she replies.

Health information is treated as sensitive information under the Privacy Act and is given a higher level of protection. We collect it only with your consent and only where it is reasonably necessary for Nikki to provide dietetic care.

Sending a referral or writing about your health in a message is voluntary. If you would rather not put clinical detail in a web form, book a call or a consultation and discuss it with Nikki directly instead.

• To reply to your enquiry, arrange your appointment and provide dietetic care.
• To confirm a referral and establish your eligibility for a Medicare, DVA or private health rebate.
• To keep the clinical and administrative records Nikki is required to keep as a health practitioner.
• To send the mailing list letter, if you asked for it. Every one of those emails has an unsubscribe link.

We do not sell your information. We do not use it for advertising, and we do not share it with advertisers or data brokers.

Running a practice website means a small number of specialist services process information on our behalf. Each is bound to use it only to provide its service to us.

• Vercel, website hosting and the code that receives form submissions. Servers in Australia and overseas.
• Cloudflare Turnstile, the check that confirms you are a person and not a bot. It sees your IP address. It is not an advertising or analytics product.
• Resend, which delivers form submissions to Nikki by email. Processed in the Asia Pacific region.
• Google Workspace, where Nikki’s practice email is hosted.
• PracSuite, the practice management system that holds Nikki’s appointment book. A booking you make online is created directly in it and forms part of your client record.
• Ahrefs Web Analytics, which provides aggregate, cookie-free information about how the website is used. Ahrefs discards raw IP addresses and does not use persistent identifiers to track people across days, devices or websites.

Some of these services store or process information outside Australia. By using the forms on this site you consent to that disclosure. Where information is held overseas we rely on the provider’s contractual and security commitments to protect it.

This website does not use advertising or cross site tracking, and your information is not shared with advertising networks or data brokers.

Ahrefs Web Analytics measures page views and common website interactions without cookies. It uses a daily salted hash derived from IP address and browser information to estimate unique visitors for that day; the raw IP address is discarded and the salt changes every 24 hours.

The appointment calendar and the antispam check set only what is necessary for them to function. Emails sent from the practice contain no open tracking pixels and no click tracking links.

The site is served over an encrypted connection. Form submissions travel over encrypted connections, and email delivery to the practice requires encryption in transit rather than falling back to an unencrypted send. Referral uploads are limited by size and file type, and forms are protected against automated abuse.

No system is perfect. If we ever became aware of a data breach likely to cause you serious harm, we would notify you and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

Clinical records, including referrals, are kept for as long as Nikki is required to keep them under her professional and legal obligations, and are then securely destroyed or deidentified. Referrals used for a Medicare claim must be retained for at least 24 months from the date of the service.

General enquiries that do not become an appointment are kept only as long as needed to deal with them. You can ask us to remove your details from the mailing list at any time, and every letter carries an unsubscribe link.

You can ask for a copy of the personal information we hold about you, and ask us to correct anything that is wrong or out of date. Ask through the contact page and we will respond within a reasonable time. We may need to confirm your identity first, particularly for health records.

There are limited situations where access can be refused, for example where it would pose a serious threat to someone’s life or health, or affect another person’s privacy. If that happens we will explain why in writing.

Tell us first, through the contact page. We will acknowledge your complaint and work through it with you.

If you are not satisfied with our response, you can take it to the Office of the Australian Information Commissioner. Queensland residents can also raise concerns about health privacy with the Office of the Information Commissioner Queensland.

If this policy changes we will update this page and the date at the top. Material changes to how we handle health information will be explained here rather than made quietly.