Privacy Policy – Vintage Health

Effective Date: 14 July 2026

Vintage Health (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you access our website, book consultations, or purchase products from our online shop.

1. Information We Collect

We may collect and process the following information:

  • Personal details: such as your name and email address.

  • Health information: when you book naturopathy consultations.

  • Payment information: when purchasing consultations or products.

  • Usage information: including data collected automatically via cookies and website analytics.

  • Quiz responses: when you complete our Emotional Terrain Assessment, including your answers and the results generated for you.

2. How We Use Your Information

We use your personal information for the following purposes:

  • To schedule and manage naturopathy consultations.

  • To process and fulfil orders for our crystal essences and other products.

  • To communicate with you regarding bookings, orders, and updates.

  • To comply with legal and regulatory obligations.

  • To generate and deliver your personalised Emotional Terrain Assessment results.

  • To send you newsletters, offers, and marketing communications you've opted into.

3. Third-Party Services

We may share your personal information with trusted third-party service providers to facilitate our services, including:

  • Domain and hosting services: GoDaddy, which owns and manages our domains.

  • Booking platforms: Acuity Scheduling.

  • Calendar and scheduling integration: Google Calendar, used to synchronise and manage consultation bookings.

  • Website hosting and e-commerce: Squarespace.

  • Email and productivity tools: Google Workspace. Mailerlite, who manage our quiz results email, newsletter signup and distribution service.

  • Payment processors: Square, Stripe, and PayPal.

  • Quiz platform and automation: JotForm, which hosts our Emotional Terrain Assessment, and Make, which processes your responses and connects them to our email and results systems.

These third parties are required to maintain the confidentiality and security of your information and are prohibited from using it for other purposes.

4. Cookies and Tracking

Our website uses cookies and similar tracking technologies to operate essential site functions, understand how visitors use our site, and improve your browsing experience.

Essential cookies are required for the website to function correctly (such as shopping cart functionality) and do not require consent.

Non-essential cookies, including analytics and marketing cookies, are only used with your consent. When you first visit our site, you will be asked to accept or decline these cookies. You can change your preferences at any time via your browser settings, or by clearing your cookies and revisiting our site to be prompted again.

For more information on how Squarespace handles cookies on our behalf, please refer to Squarespace's cookie policy.

5. Data Security

We implement reasonable administrative, technical, and physical measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

6. Data Retention

We retain personal information only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

7. Your Rights

You have the right to:

  • Access and receive a copy of the personal information we hold about you.

  • Request correction of any inaccurate or incomplete data.

  • Request deletion of your personal information where permitted by law.

  • Withdraw consent for the processing of your data at any time.

  • Object to the processing of your data for direct marketing purposes.

To exercise these rights, please contact us via the details provided on our website.

8. Compliance

We comply with the Australian Privacy Act 1988 for our Australian clients and take our obligations under this Act seriously.

While the General Data Protection Regulation (GDPR) and Health Insurance Portability and Accountability Act (HIPAA) are not directly applicable to our business, we take guidance from both as recognised standards for handling personal and health-related information, and aim to align our practices with their principles where relevant.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be published on our website with the updated effective date.

10. Contact Us

For questions, concerns, or requests regarding your personal information, please contact us through our website.