top of page

Privacy policy

Version 6, 9 November 2026

This policy covers everything Stress Fracture Physio does: this website, bookings and consultations, our online tools at tools.stressfracturephysio.com, email, and Instagram messages. The tools have their own, more detailed page at tools.stressfracturephysio.com/privacy.

In short. We collect what we need to look after you and run the practice. Research, follow-up contact and marketing only happen if you say yes to each one. We never sell your information. Some services we use are overseas, mostly in the United States; they are listed below.

 

Who we are

Stress Fracture Physio is a physiotherapy practice in Sydney, Australia, run by Beau Walker-Tyrrell (ABN 44 102 844 793) and Blake Withers. As a health service provider we follow the Australian Privacy Principles (Privacy Act 1988) and the NSW Health Records and Information Privacy Act 2002.

Privacy contact: info@stressfracturerehab.com.

 

What we collect

  • Contact and booking details: name, email, phone, date of birth and appointment history.

  • Health information for your care: your history, symptoms, assessment findings and treatment plans. It also covers reports you or other providers send us, such as imaging, blood tests and bone density scans.

  • Your answers in our questionnaires and tools, and training data you choose to share, such as a Strava export.

  • Videos of your running or movement, only when you agree to them being recorded.

  • Messages you send us by email or Instagram.

  • A login on this website, if you create one: your email and account details.

  • Limited technical information:

  •    on this website: Wix, our website host, records visits for our statistics. That covers the pages viewed, your device and browser, your approximate location and the site you came from. It sets its own cookies for security, sign-in and those statistics, and Cloudflare checks traffic for bots. We don't use advertising or social media tracking. A charts app from PurpleBear also loads on the site and receives the same technical details.

  •    on the tools: the date and time, the page used, and a bot check by Cloudflare Turnstile.

 

Why we collect it

  • To assess and treat you, and to keep the clinical record the law requires.

  • To run bookings, reminders, invoices and payments.

  • To send you your results, programmes and the links your clinician sets up.

  • To answer your messages.

  • To improve our treatment protocols and education, using de-identified information only. You can opt out.

  • Only with your separate consent:

  •    research and quality improvement using information that identifies you;

  •    follow-up questionnaires;

  •    marketing emails, each with a one-click unsubscribe.

Each consent is asked separately, is never pre-ticked, and the wording you saw is recorded with its version.

We never sell your information or share it with advertisers or data brokers.

 

Who can see it

  • The practice's clinicians, for your care.

  • Other health providers in your care, such as your GP, with your consent or where the law allows.

  • Service providers that store or process data for us, listed below. They act on our instructions and can't use your information for their own purposes.

 

AI tools and automatic scores

  • AI note-taker. We use a secure AI note-taker during consultations (we ask you each visit) and may use de-identified information from consultations to improve our treatment protocols and education. Identifiable information is never shared with AI tools for this, and you can opt out. Our note-takers are Preve (United Kingdom) and PatientNotes (Australia). If you'd rather not have one, tell us and we'll write the notes ourselves.

  • AI writing help. Anthropic's Claude (United States) helps us write clinical notes, letters and message replies. A clinician reviews anything that goes into your record or is sent to you about your care.

  • On Instagram, an AI assistant answers some general questions straight away, such as how to book or a first question about a bone stress injury. It doesn't diagnose or give personal treatment advice, and anything more personal goes to a clinician first.

  • Some tools work out a score or risk level from your answers. The score informs your clinician, who makes the decisions about your care.

 

Where your information is stored, and overseas services

Your main clinical record is kept in Australia. Some services we use are overseas. We are likely to disclose personal information to service providers in the United States and the United Kingdom, and, through one website app, in Canada and the European Union. Google, Cloudflare and Wix may also process it in other countries where they run data centres. We stay responsible for how these providers handle your information.

  • Cliniko: bookings and clinical records (Australia)

  • Supabase: tool records and the research pool (Sydney, Australia)

  • Google Cloud: movement videos and the Motion Lab (Sydney, Australia)

  • Google Workspace: email, files, results sheets, forms (United States and other countries)

  • Wix: this website and member logins (United States and other countries)

  • Cloudflare: serves this website and the tools; bot checks (Worldwide network (US company))

  • Anthropic (Claude): aI help with notes and replies (United States)

  • PatientNotes: aI consult notes (optional) (Australia; its suppliers may access it from the United States)

  • Preve: aI consult notes (we ask you each visit) (United Kingdom (London))

  • ManyChat and Instagram (Meta): instagram messages (United States)

  • n8n on Railway: automations, including the Instagram reply assistant (United States)

  • ntfy: phone alerts to us about new Instagram messages, kept 12 hours (United States)

  • Notion: workflow status, no clinical content (United States)

  • Tyro: payments and payment links (Australia)

  • PurpleBear: a charts app on this website (Canada, United States and the EU)

Older copies we are retiring. Until each is deleted, three older copies still exist. They aren't used for your care, and each comes off this list when it's deleted.

  • An old version of our patient app, still online at Netlify (United States), which connects to the same records.

  • A switched-off copy of our Motion Lab on Fly.io (stored in Sydney; a US company), holding data from before September 2026.

  • An August 2025 backup of our practice files in Apple iCloud (United States and other countries).

 

How long we keep it

  • Clinical records: as long as NSW health records law requires. That's 7 years from the last service for adults, and until age 25 for anyone treated under 18.

  • Marketing details: until you unsubscribe.

  • Research data: stored under a one-way code while the research continues. It's excluded from future use if you withdraw.

  • Instagram messages: they stay in Instagram and ManyChat until we delete them, and we'll delete yours if you ask. Our automation keeps only short-lived working copies.

 

Your choices and rights

  • Access and correction. Ask for what we hold about you and we'll give it to you, and correct anything wrong, within 30 days.

  • Withdraw consent for research, follow-ups or marketing at any time. Your clinical record isn't affected.

  • Deletion. Ask us to delete anything the law doesn't require us to keep.

  • Anonymity. You can ask general questions without giving your name, but we need to know who you are to treat you.

 

Children

Our tools and this website are for adults. A person under 18 may use them with a parent or guardian, who gives consent on their behalf.

 

Security

  • Information travels encrypted.

  • Clinical records are open only to the practice's clinicians, through signed-in accounts.

  • Tool answers from people who arrive on their own are stored without names or emails.

  • If a data breach is likely to cause serious harm, we'll tell the people affected and the Office of the Australian Information Commissioner, as the law requires.

 

Questions and complaints

Email info@stressfracturerehab.com and we'll reply within 30 days. If you're not satisfied, you can complain to:

  • the Office of the Australian Information Commissioner (oaic.gov.au);

  • for health information in NSW, the Information and Privacy Commission NSW (ipc.nsw.gov.au).

 

Changes

When this policy changes, the version and date at the top change. Consent records keep the version that applied when you gave them.

bottom of page