Privacy Policy – Vintage Health

Effective Date: 19 December 2025

Vintage Health (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you access our website, book consultations, or purchase products from our online shop.

1. Information We Collect

We may collect and process the following information:

  • Personal details: such as your name and email address.

  • Health information: when you book naturopathy consultations.

  • Payment information: when purchasing consultations or products.

  • Usage information: including data collected automatically via cookies and website analytics.

2. How We Use Your Information

We use your personal information for the following purposes:

  • To schedule and manage naturopathy consultations.

  • To process and fulfil orders for our crystal essences and other products.

  • To communicate with you regarding bookings, orders, and updates.

  • To comply with legal and regulatory obligations.

3. Third-Party Services

We may share your personal information with trusted third-party service providers to facilitate our services, including:

  • Domain and hosting services: GoDaddy, which owns and manages our domains.

  • Booking platforms: Acuity Scheduling.

  • Calendar and scheduling integration: Google Calendar, used to synchronise and manage consultation bookings.

  • Website hosting and e-commerce: Squarespace.

  • Email and productivity tools: Google Workspace.

  • Payment processors: Square, Stripe, and PayPal.

These third parties are required to maintain the confidentiality and security of your information and are prohibited from using it for other purposes.

4. Cookies and Tracking

Our website may use cookies and similar tracking technologies to enhance your browsing experience and collect analytics data. You can manage your cookie preferences via your browser settings. For more information, please refer to Squarespace’s cookie policy.

5. Data Security

We implement reasonable administrative, technical, and physical measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

6. Data Retention

We retain personal information only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

7. Your Rights

You have the right to:

  • Access and receive a copy of the personal information we hold about you.

  • Request correction of any inaccurate or incomplete data.

  • Request deletion of your personal information where permitted by law.

  • Withdraw consent for the processing of your data at any time.

  • Object to the processing of your data for direct marketing purposes.

To exercise these rights, please contact us via the details provided on our website.

8. Compliance

We comply with:

  • GDPR (General Data Protection Regulation) for residents of the European Union.

  • HIPAA (Health Insurance Portability and Accountability Act) for applicable health data.

  • Australian Privacy Act 1988 for Australian clients.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be published on our website with the updated effective date.

10. Contact Us

For questions, concerns, or requests regarding your personal information, please contact us through our website.